choba.org
Issued by Amazon RSA 2048 M03
About this certificate
This digital certificate with serial number 01:e1:5c:b7:f7:ec:0c:66:ad:97:1c:21:91:79:ca:7b was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=choba.org
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 01:e1:5c:b7:f7:ec:0c:66:ad:97:1c:21:91:79:ca:7bSerial Number (int): 2499375346120690635151423334929517179
Serial Number lenght: 121 bits, 16 octets
SubjectKeyId: 5b:ca:2d:0b:dd:b8:05:c7:7e:8f:98:e5:0a:23:61:b1:92:26:34:7d
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02
Fingerprint (sha1): e2:29:ad:bc:46:fc:ce:b8:cc:79:23:a7:ef:0d:25:af:47:1d:6f:25
Fingerprint (sha256): 8c:6f:6a:50:07:71:28:bc:15:eb:fb:08:00:96:50:df:13:7e:5d:ef:2e:c8:4e:37:d8:60:09:34:f1:94:bd:b9
Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer
Revocation information
OCSP Server: http://ocsp.r2m03.amazontrust.comCRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl
Check the revocation status for certificate choba.org
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for choba.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
choba.org
www.choba.org
www.choba.org
Other certificates including the domain name choba.org
(limited to 100 certificates)
ucoconnect.com
ucoconnect.com
cumbrianetwork.global
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ucoconnect.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
caterhamschoolsociety.co.uk
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
choba.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
choba.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
ucoconnect.com
campionalumni.org
choba.org
choba.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
m.choba.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com
cettalumni.com
ucoconnect.com
connected.cardiff.ac.uk
campionalumni.org
colfesnet.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
ucoconnect.com
cumbrianetwork.global
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
community.mancosa.co.za
campionalumni.org
connected.cardiff.ac.uk
campionalumni.org
community.mancosa.co.za
challonershighnetwork.com
campionalumni.org
casscommunity.co.uk
ucoconnect.com
choba.org
campionalumni.org
campionalumni.org
cettalumni.com
campionalumni.org
caterhamschoolsociety.co.uk
cettalumni.com
campionalumni.org
campionalumni.org
campionalumni.org
colfesnet.com
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
challonershighnetwork.com
campionalumni.org
campionalumni.org
campionalumni.org
ucoconnect.com
campionalumni.org
choba.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
charterhouseconnect.org.uk
campionalumni.org
campionalumni.org
choba.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
connected.cardiff.ac.uk
caterhamschoolsociety.co.uk
challonershighnetwork.com
cettalumni.com
challonershighnetwork.com
ucoconnect.com
campionalumni.org
choba.org
choba.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
campionalumni.org
caterhamschoolsociety.co.uk
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
corpusalumni.com
ucoconnect.com
community.mancosa.co.za
campionalumni.org
community.mancosa.co.za
campionalumni.org
campionalumni.org
campionalumni.org
community.mancosa.co.za
m.choba.org
campionalumni.org
campionalumni.org
campionalumni.org
cityshefalumni.org
ucoconnect.com
cettalumni.com
ucoconnect.com
connected.cardiff.ac.uk
campionalumni.org
colfesnet.com
community.mancosa.co.za
campionalumni.org
campionalumni.org
ucoconnect.com
ucoconnect.com
campionalumni.org
Certificate
The complete raw certificate details for choba.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIQAeFct/fsDGatlxwhkXnKezANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAzMB4XDTI0MDMyMjAwMDAwMFoXDTI1MDQxOTIzNTk1OVowFDES MBAGA1UEAxMJY2hvYmEub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAxGZycnZi7zVyum14elcvR/lU3ltVLPWFLpq+rNEwJCDnvqvVSGkVeO1Wo08A ZqhSBbMfRK0/V25aa5JcEfpg/eUUd5ZJh7MHqGVhmgzks1egbn+O3Cdvpvfo/Pk/ KdCS7lWKd//lS/vnc2OClPBCSp9W5ihApQNndf4o+Na009iR6RL1dpRR2+HurY6/ xr1Z2OFIKb6F3DxJmwXbYIKa3O3hyPCtZ3vui4IXdH2fQ6vC3bVeKiWBx78rLDRj t82Mf7EIZXoZxbPQox9pDlcTABakF4Py6R4SWVt5Bi1QKJ+M4sxxKSmW+z/w7eta ayGoh7/mTOxfDXgxuZe/qqBsSQIDAQABo4IC8jCCAu4wHwYDVR0jBBgwFoAUVdkY X9IczAHhWLS+q9lVQgHXLgIwHQYDVR0OBBYEFFvKLQvduAXHfo+Y5QojYbGSJjR9 MCMGA1UdEQQcMBqCCWNob2JhLm9yZ4INd3d3LmNob2JhLm9yZzATBgNVHSAEDDAK MAgGBmeBDAECATAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDMuYW1h em9udHJ1c3QuY29tL3IybTAzLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUH MAGGIWh0dHA6Ly9vY3NwLnIybTAzLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcw AoYqaHR0cDovL2NydC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY2VyMAwG A1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AE51oydcmhDD OFts1N8/Uusd8OCOG41pwLH6ZLFimjnfAAABjmTAI9sAAAQDAEcwRQIhAKwF2O9r vOmrUry7fySFpVfSk6nAPvTe5eMuQqtuvDTQAiAwQfORCbeXbI8739gAK3MnanJN kySvp4QCoEEy0g/iJAB2AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45Q AAABjmTAJCkAAAQDAEcwRQIhAKfr12QYjniuiEix7TvKXXFQo5stSdDvlDEDeMfd AJLGAiBo0SdSyqtO1kgW3wyORMzxCsrmm5YlijgaBIXojmn4jgB3AKLjCuRF772t m3447Udnd1PXgluElNcrXhssxLlQpEfnAAABjmTAJNEAAAQDAEgwRgIhAP5hI1SL b1kaFVqszt8y2A7rVtC95n7nLTNeMbPE0JhKAiEAoGP2uIKEK2PYRccYUoAiJmqB RuLCUQN3EOgPiYxo4JIwDQYJKoZIhvcNAQELBQADggEBAD/4N62eFP6PeiDM7TlU +MdPahYzJKSY0otPiMBBl2XHzvGgsp663Xr6G1s0OB/zrmn8qczHm1nuvN8WkYBY LU6MPdDvjIRAtuJRwXCAhKwwZNfv7CGHFjPQbYFrHS7Yd9WW8V3aExG1o6OPCaYn 0Xf0B7K8btlzNbBY2wM0vF9p9EbnDG9jfL5LdyVEXaz/1Y3I+054qrYpcUbwn/9K 18GZ+P4cBWBYh8LdSG7+RzhnWzTovdbpd2dAObmFNBxWhXFqp2tDsdga4fQMJXi0 f6Po0+wtc00ALOWx8QEbxPiWqGB0u+rOPWz3ZfKMV0g2OqPnEIImS50rJhKbvuyT tHk= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGZycnZi7zVyum14elcv R/lU3ltVLPWFLpq+rNEwJCDnvqvVSGkVeO1Wo08AZqhSBbMfRK0/V25aa5JcEfpg /eUUd5ZJh7MHqGVhmgzks1egbn+O3Cdvpvfo/Pk/KdCS7lWKd//lS/vnc2OClPBC Sp9W5ihApQNndf4o+Na009iR6RL1dpRR2+HurY6/xr1Z2OFIKb6F3DxJmwXbYIKa 3O3hyPCtZ3vui4IXdH2fQ6vC3bVeKiWBx78rLDRjt82Mf7EIZXoZxbPQox9pDlcT ABakF4Py6R4SWVt5Bi1QKJ+M4sxxKSmW+z/w7etaayGoh7/mTOxfDXgxuZe/qqBs SQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 2499375346120690635151423334929517179 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'choba.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24793226301020466761405137400880605197789189480410760647463158316108554229647398822930006239072442008282200299629805060815817450606637365401115472994887013635869222650492330617782415710650183944781462689696052285189762865238768533044332657428030134932305773881853167626741517615587354934009118788098821428303919044935704865367813163196900867454738998672657571144003200578834947446592395324558154221293481990699056869581998030384040759058711546053932687277458339688866705632771379226627376427440284631130271770396291856111540503183783602190073974107209690668102815652599288081252977599307563744818826942539735727369289 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5bca2d0bddb805c77e8f98e50a2361b19226347d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'choba.org' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.choba.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 01690076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e64c023db0000040300473045022100ac05d8ef6bbce9ab52bcbb7f2485a557d293a9c03ef4dee5e32e42ab6ebc34d002203041f39109b7976c8f3bdfd8002b73276a724d9324afa78402a04132d20fe224007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e64c024290000040300473045022100a7ebd764188e78ae8848b1ed3bca5d7150a39b2d49d0ef94310378c7dd0092c6022068d12752caab4ed64816df0c8e44ccf10acae69b96258a381a0485e88e69f88e007700a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018e64c024d10000040300483046022100fe6123548b6f591a155aaccedf32d80eeb56d0bde67ee72d335e31b3c4d0984a022100a063f6b882842b63d845c718528022266a8146e2c251037710e80f898c68e092 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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