results-server-consumer.turningtechnologies.eu

Issued by Amazon

About this certificate

This digital certificate with serial number 01:9f:65:12:7c:46:fe:5e:82:1e:88:09:2c:08:70:3f was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=results-server-consumer.turningtechnologies.eu

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:9f:65:12:7c:46:fe:5e:82:1e:88:09:2c:08:70:3f
Serial Number (int): 2156853184230814790987536762688532543
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 64:3a:55:ed:48:21:7d:d8:c4:f9:de:69:81:f8:ad:fd:38:8f:b2:a0
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 4f:52:e6:02:ea:c1:47:6a:8e:16:45:f9:72:1f:50:1a:01:bb:c9:39
Fingerprint (sha256): 7d:9d:b3:3e:15:ce:fb:f3:11:8d:2f:26:7d:6b:89:be:a9:be:47:c3:51:18:92:6a:62:dc:98:93:5a:00:4f:25

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate results-server-consumer.turningtechnologies.eu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for results-server-consumer.turningtechnologies.eu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

results-server-consumer.turningtechnologies.eu

Other certificates including the domain name turningtechnologies.eu

(limited to 100 certificates)
polling.turningtechnologies.com
responseware.turningtechnologies.eu
instructor.turningtechnologies.eu
polling.turningtechnologies.com
polling.turningtechnologies.eu
account-api.turningtechnologies.eu
download.turningtechnologies.eu
polling.turningtechnologiessg.net
polling.turningtechnologies.com
student.turningtechnologies.eu
internaladmin.turningtechnologies.eu
examview.com
instructor.turningtechnologies.eu
www.turningtechnologies.eu
www.turningtechnologies.eu
responseware.turningtechnologies.eu
polling.turningtechnologiessg.net
internaladmin.turningtechnologies.eu
utility.turningtechnologies.eu
account.turningtechnologies.eu
responseware.eu
responseware.eu
download.turningtechnologies.eu
oauth.turningtechnologies.eu
responseware.eu
responseware.turningtechnologies.eu
scheduling-consumer.turningtechnologies.eu
polling.turningtechnologiessg.net
account-api.turningtechnologies.eu
utility.turningtechnologies.eu
oauth.turningtechnologies.eu
scheduling-consumer.turningtechnologies.eu
www.turningtechnologies.eu
push-notification.turningtechnologies.eu
polling.turningtechnologies.eu
account.turningtechnologies.eu
responseware.eu
polling.turningtechnologiessg.net
responseware.eu
results.turningtechnologies.eu
cdn.turningtechnologies.eu
push-notification.turningtechnologies.eu
account.turningtechnologies.eu
cdn.turningtechnologies.eu
results-server-consumer.turningtechnologies.eu
polling.turningtechnologiessg.net
responseware.eu
account-api.turningtechnologies.eu
oauth.turningtechnologies.eu
responseware.eu
internaladmin.turningtechnologies.eu
email.turningtechnologies.eu
api.turningtechnologies.eu
push-notification.turningtechnologies.eu
api.turningtechnologies.eu
account.turningtechnologies.eu
session-analytics.turningtechnologies.eu
polling.turningtechnologies.com
admin.turningtechnologies.eu
lms-integration.turningtechnologies.eu
www.turningtechnologies.eu
account.turningtechnologies.eu
scheduling-consumer.turningtechnologies.eu
gradebook.turningtechnologies.eu
scheduling.turningtechnologies.eu
student.turningtechnologies.eu
oauth.turningtechnologies.eu
responseware.turningtechnologies.eu
email.turningtechnologies.eu
polling.turningtechnologiessg.net
responseware.eu
student.turningtechnologies.eu
email.turningtechnologies.eu
user-server-consumer.turningtechnologies.eu
internal-admin.turningtechnologies.eu
polling.turningtechnologies.eu
www.turningtechnologies.eu
session-analytics.turningtechnologies.eu
responseware.eu
gradebook.turningtechnologies.eu
instructor.turningtechnologies.eu
results-server-consumer.turningtechnologies.eu
user-content.turningtechnologies.eu
pgnotification.turningtechnologies.eu
user-server-consumer.turningtechnologies.eu
email.turningtechnologies.eu
cdn.turningtechnologies.eu
pgnotification.turningtechnologies.eu
pgnotification.turningtechnologies.eu
account-api.turningtechnologies.eu
content.turningtechnologies.eu
student.turningtechnologies.eu
user-content.turningtechnologies.eu
student.turningtechnologies.eu
scheduling.turningtechnologies.eu
application-error-consumer.turningtechnologies.eu
cdn.turningtechnologies.eu
results.turningtechnologies.eu
responseware.eu
responseware.turningtechnologies.eu

Certificate

The complete raw certificate details for results-server-consumer.turningtechnologies.eu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFpDCCBIygAwIBAgIQAZ9lEnxG/l6CHogJLAhwPzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMjgwMDAwMDBaFw0yMDA0Mjgx
MjAwMDBaMDkxNzA1BgNVBAMTLnJlc3VsdHMtc2VydmVyLWNvbnN1bWVyLnR1cm5p
bmd0ZWNobm9sb2dpZXMuZXUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDJs7V9WSABhnZOCkpG9A/J6AwkKNudgB78A7JJjsqb6h2Hb82JPpJv06+bhIrA
9GFmehDhXGy+E3Gtx1mS/x2pyEIYbS715Ci3WUi4ifahmBgwZs1xCBIbflfFPagz
J6jotOHAc7+Mmpn2bjFUVMV2f/4oKy9Qq+amrPRwQxvJpatvRiLynJ06V3N9q8ZK
4GPRz4VGPcmDctA+d8ktGkyuesPH9uKvbJZs8rfwvuEHl5C1F11H02neBOR7QyGv
36m0EsBO3J34APA6SI0OUohcg9lytti/UhVBPTtEWXMIZ5tlwlmjHVHPDIMCcnEK
BvCKkz+d0NGe6M5R6kLc9J1FAgMBAAGjggKZMIIClTAfBgNVHSMEGDAWgBRZpGYG
UqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUZDpV7UghfdjE+d5pgfit/TiPsqAw
OQYDVR0RBDIwMIIucmVzdWx0cy1zZXJ2ZXItY29uc3VtZXIudHVybmluZ3RlY2hu
b2xvZ2llcy5ldTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h
em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI
BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga
kJZkNo4e0YUAAAFpxXc55wAABAMARzBFAiAZbDY7dnlz8GLJJQJ7UgIDzRWkXOFD
3PFJbU5eI8DFkAIhAKo3IHIksxQGziflyFydn8XODcUSKPSsZr2ZsZ8pbX3lAHUA
h3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFpxXc68AAABAMARjBE
AiBxXShvT/f1ShJ5WuR6LgXjr6EnrKuXDgpcV+buudERRQIgF7O6cHpkdDPC2kli
5qX0zCFzE0IsBhrVD/Y9oAVhAVYwDQYJKoZIhvcNAQELBQADggEBAKfdNpbZFFKz
Lv4EtCe9cGUV6yKzslfXMjJ7SA7/ixofjDD7M+Ppg2F7kk/5+qoBhew8A3zY2Vbb
KcnRvfbTqaR5ZbtZY3W8kbamnU+syegypE5pyk0EpX1WpvMAM0BF9k6xRJjuOdDM
X2WGYUnCgCZMoF3AD2SH2euChMVTo35A/a3OKGCd1Ne1OBVc+onQsao0uQ7S4O0+
Pv6i1aoB90Thb0AmzDx18UVqdaOtCuxzwrCuHoq4f9FSwpD6C2hZS5MUkY21++Zn
/mVEW6U3tTaNAO6uaJ/mwKYoYmDxyiP7Jly5/J4f39xieegNc8333uYi9wNv10ej
p4kgqfyF+Gc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybO1fVkgAYZ2TgpKRvQP
yegMJCjbnYAe/AOySY7Km+odh2/NiT6Sb9Ovm4SKwPRhZnoQ4VxsvhNxrcdZkv8d
qchCGG0u9eQot1lIuIn2oZgYMGbNcQgSG35XxT2oMyeo6LThwHO/jJqZ9m4xVFTF
dn/+KCsvUKvmpqz0cEMbyaWrb0Yi8pydOldzfavGSuBj0c+FRj3Jg3LQPnfJLRpM
rnrDx/bir2yWbPK38L7hB5eQtRddR9Np3gTke0Mhr9+ptBLATtyd+ADwOkiNDlKI
XIPZcrbYv1IVQT07RFlzCGebZcJZox1RzwyDAnJxCgbwipM/ndDRnujOUepC3PSd
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2156853184230814790987536762688532543
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'results-server-consumer.turningtechnologies.eu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25462517081250252944189887256218045146046169246054683704492334539708875034049552122957795325232611061561049127781864228071992096606495738870759360309385568368024933337611031475056696550719249075049183167982873117438568320355129922077091268406760142651564332828621469614690739706395299218783011138678987518716565668773035244910240746340421606346224700646836183919050960717673025434418925840803874363636471055272570371118884631682020610384083702390411538878070308631087031569029207785616098080117044107542801487794110871170708396272901981919345625204659802846302716510316023289133844241211740433950887644803960019393861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							643a55ed48217dd8c4f9de6981f8adfd388fb2a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'results-server-consumer.turningtechnologies.eu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169c57739e700000403004730450220196c363b767973f062c925027b520203cd15a45ce143dcf1496d4e5e23c0c590022100aa37207224b31406ce27e5c85c9d9fc5ce0dc51228f4ac66bd99b19f296d7de50075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000169c5773af000000403004630440220715d286f4ff7f54a12795ae47a2e05e3afa127acab970e0a5c57e6eeb9d11145022017b3ba707a647433c2da4962e6a5f4cc217313422c061ad50ff63da005610156
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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