ws-na.assoc-amazon.com

- Amazon.com, Inc. -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 15:3c:7e:20:ff:6e:c5:86:bb:f2:6c:ca:88:79:1e:a3 was issued on by Symantec Corporation.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Amazon.com, Inc.

Organization: Amazon.com, Inc.
State / Province: Washington
Locality: Seattle
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 15:3c:7e:20:ff:6e:c5:86:bb:f2:6c:ca:88:79:1e:a3
Serial Number (int): 28227883920959175691828437970518089379
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 01:e8:cd:9e:bf:2b:e3:34:50:17:78:61:a4:01:d0:23:42:7b:c5:cc
Fingerprint (sha256): 8a:9b:25:6c:b1:5b:45:fb:64:e8:a0:37:f1:07:93:39:52:79:3f:d1:ce:a5:af:dc:23:d1:d2:88:f6:e8:2f:88

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate ws-na.assoc-amazon.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws-na.assoc-amazon.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws-na.amazon-adsystem.com
ws-na.assoc-amazon.com
ws.amazon.ca
ws.amazon.com
ws.assoc-amazon.ca
ws.assoc-amazon.com

Other certificates including the domain name assoc-amazon.com

(limited to 100 certificates)
rcm-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms-na.assoc-amazon.com
rcm-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-na.assoc-amazon.com
ws-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
wms.assoc-amazon.com
wms-na.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-na.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
www.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-cn.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-fe.assoc-amazon.com
wms-fe.assoc-amazon.com
rcm-eu.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-eu.assoc-amazon.com
wms.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-eu.assoc-amazon.com
www.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms-eu.assoc-amazon.com
ws-eu.assoc-amazon.com
wms-fe.assoc-amazon.com
wms-na.assoc-amazon.com
wms-eu.assoc-amazon.com
rcm-fe.assoc-amazon.com
rcm-cn.assoc-amazon.com
wms-cn.assoc-amazon.com
ws-na.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
www.assoc-amazon.com
www.assoc-amazon.com
rcm-eu.assoc-amazon.com
wms.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-cn.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-cn.assoc-amazon.com
ws-fe.assoc-amazon.com
ws-cn.assoc-amazon.com
rcm-na.assoc-amazon.com
wms-fe.assoc-amazon.com
www.assoc-amazon.com
wms-fe.assoc-amazon.com
rcm-cn.assoc-amazon.com
rcm-eu.assoc-amazon.com
www.assoc-amazon.com
rcm-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-na.assoc-amazon.com
wms-eu.assoc-amazon.com
ws-na.assoc-amazon.com
rcm-eu.assoc-amazon.com
ws-fe.assoc-amazon.com
wms-na.assoc-amazon.com
ws-eu.assoc-amazon.com
ws-na.assoc-amazon.com

Certificate

The complete raw certificate details for ws-na.assoc-amazon.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoTpimeM3tAn/ANLBjPzM
fVfpG1EPG9gzv9yJR/g6ddEKnLeOpXpSX1sAAMG2LMIV+0INVbQbMC5FTn8nnPJA
6iqkYzWnO/lyLeWSxmc0aXorzffbY1D9BlffLl387h/enuHvG+IdrpHYRh7DZmXT
FVEQ8ArSy84Ozg4h+AeHHQqZNBXAWPKaqQii/MJFT7hOFZgbuZNcCmZaZ2vQOIGj
wco2ErBDmfH4Fm0UfGYlLAnjJdQ32FzzZbKEjb6Z/yFCgEwr6bRdrnCP6llvm8o/
MdpFmwG0iy/N82UAq8ClbxYt/lawjMaoG9GJX432p6gdPBvcx1i5CbjkdgAp9H7H
xQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 28227883920959175691828437970518089379
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Amazon.com, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ws-na.assoc-amazon.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20353157895293664352732106987568300856569378883615880645585573699586716838319284925890655536965598289444926181740815988048377733015165677237302024819832609023163571722803287534470957406183688571634410196426992855730798270374947784927625700260517289065458884386738768753503956423470254318410904970678976425487592496508878217387296225840674174928153156313869636799911308304284824995747809299063730711553278374316521035668151981383648865880166860452227423751777614971237066465676463840193920304422953765132143906916337915940144041800477360350461507091116655775160341234489776522820492217767163719149635015988138255239109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-na.amazon-adsystem.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws-na.assoc-amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.amazon.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.assoc-amazon.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.assoc-amazon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001578ed211770000040300483046022100ae04dbb3c2c5373704c69294e8a2984e3eda6020df5a9f0872f40b6a65b8c26e022100ce0ed004ba7b8a3b62e2c5ef51de06d77a99656a09da1a1f604a4d08fddfcd9700760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc4000001578ed21196000004030047304502201900fada1fb9a7627bd82db2075b08304a7784a5ecfb59f35708ce9411e7c65a022100ebf37cbb8fbecb851b2b5f7e9d62d6fffb4d4cf1246b5394a1dfc2769503838c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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