cstest.adtech.com

- ADTECH GmbH -

Issued by AOL Member CA

About this certificate

This digital certificate with serial number 52:c7:b3:b6:de:db:b8:63:ff:04:42:86:ec:58:d8:80 was issued on by America Online Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ADTECH GmbH

Organization: ADTECH GmbH
State / Province: Hessen
Locality: Dreieich
Country: DE

America Online Inc.

Organization: America Online Inc.
State / Province: Virginia
Locality: Dulles
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 52:c7:b3:b6:de:db:b8:63:ff:04:42:86:ec:58:d8:80
Serial Number (int): 110033607769027461216175682180445952128
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 42:32:25:c7:f9:2f:c1:8e:df:0c:09:fc:64:16:38:fe:ca:aa:ce:5c
AuthorityKeyId: 61:a6:99:6d:24:9f:0e:11:88:e6:39:e0:fe:74:d1:05:69:52:a9:43

Fingerprint (sha1): d3:a4:40:f0:22:5e:3c:ee:c8:c6:75:99:49:09:7c:cd:bb:0e:b8:c8
Fingerprint (sha256): 8d:57:f3:f4:ef:bc:02:3d:6d:1a:8d:44:2c:23:1c:a2:da:57:48:8f:63:d1:e7:3a:c8:de:e0:b1:e2:30:db:5d


Revocation information

OCSP Server: http://ocsp.web.aol.com/ocsp
CRL Distribution Point: http://crl.aol.com/AOLMSPKI/aolServerCert.crl

Check the revocation status for certificate cstest.adtech.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cstest.adtech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cstest.adtech.com
beta-cstest.adtech.com

Other certificates including the domain name adtech.com

(limited to 100 certificates)
onebyaol.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-fra.adtech.com
dev-scheduler001.eu-fra.adtech.com
jenkins001.us-ec.adtech.com
zenoss.adtech.com
api.canvas-qa.adtech.com
jira.adtech.com
canvas-qa.adtech.com
canvas-stage.adtech.com
newfront.aol.com
scheduler003.us-ec.adtech.com
research.adtech.com
canvas-stage.adtech.com
canvas.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
spacewalk-proxy001.eu-fra.adtech.com
spacewalk.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
api.canvas.adtech.com
wdm.adtech.com
build-cpp.eu-fra.adtech.com
spacewalk.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.prod.adtech.aolcloud.net
qa-scheduler003.eu-fra.adtech.com
scheduler003.us-ec.adtech.com
spacewalk.prod.adtech.aolcloud.net
qaa-scheduler003.eu-fra.adtech.com
cstest.adtech.com
*.eu-fra.adtech.com
cstest.adtech.com
ansible-jenkins001.us-ec.adtech.com
api.canvas-stage.adtech.com
spacewalk.scd.us.adtech.com
spacewalk.toy.as.adtech.com
spacewalk.prod.adtech.aolcloud.net
spacewalk.eu-amt.adtech.com
canvas.adtech.com
ansible-jenkins002.us-ec.adtech.com
qa-scheduler003.eu-fra.adtech.com
scheduler001.eu-fra.adtech.com
ersa-api.us-ec.adtech.com
onebyaol.com
*.eu-fra.adtech.com
spacewalk.us-ec.adtech.com
svn.adtech.de
spacewalk.prod.adtech.aolcloud.net
classic-aerospike.us-ec.adtech.com
dev-scheduler003.eu-fra.adtech.com
mail.advertising.com
intranet.adtech.com
api.canvas.adtech.com

Certificate

The complete raw certificate details for cstest.adtech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIQUseztt7buGP/BEKG7FjYgDANBgkqhkiG9w0BAQUFADBn
MQswCQYDVQQGEwJVUzERMA8GA1UECBMIVmlyZ2luaWExDzANBgNVBAcTBkR1bGxl
czEcMBoGA1UEChMTQW1lcmljYSBPbmxpbmUgSW5jLjEWMBQGA1UEAxMNQU9MIE1l
bWJlciBDQTAeFw0xMzAyMjAxOTAxMjJaFw0xNTAyMjAxOTAxMjJaMGMxCzAJBgNV
BAYTAkRFMQ8wDQYDVQQIDAZIZXNzZW4xETAPBgNVBAcMCERyZWllaWNoMRQwEgYD
VQQKDAtBRFRFQ0ggR21iSDEaMBgGA1UEAwwRY3N0ZXN0LmFkdGVjaC5jb20wggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DmHxMm1bUMbqKg9Jxn7P/yov
RdxmWhUD6NsNDffEUAIM6L1loFrK2a2aTTEb3Bta/Bo5n+JU/ws/5PNEr8Ecd1Fk
dWxnlKRYViVn8tNH7Ejpin4PvSNs7PMTgm2psOwVyo5VTNQhE2bCYroHQod6N2Xk
pqq0pSs9q0XmJa+Nnb5WIcoyyK9mRXwemeE4zZaNv2AIOhKvnmqbGy0iYlXjv3xD
AKbkB103BrLhfsu+GDxSzTLAgtnUP01T+ZuA77o/TVvEhLlgeQ9Zmj4iUA5hjZYN
SMd4WKsgVd6ZBXZAO4TjOKkeHjdrulJE9qX+keWceCncsIVmcC1iYkXOmRD7AgMB
AAGjggGGMIIBgjAfBgNVHSMEGDAWgBRhppltJJ8OEYjmOeD+dNEFaVKpQzAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMD4GA1Ud
HwQ3MDUwM6AxoC+GLWh0dHA6Ly9jcmwuYW9sLmNvbS9BT0xNU1BLSS9hb2xTZXJ2
ZXJDZXJ0LmNybDA4BggrBgEFBQcBAQQsMCowKAYIKwYBBQUHMAGGHGh0dHA6Ly9v
Y3NwLndlYi5hb2wuY29tL29jc3AwNAYDVR0RBC0wK4IRY3N0ZXN0LmFkdGVjaC5j
b22CFmJldGEtY3N0ZXN0LmFkdGVjaC5jb20wCQYDVR0TBAIwADBWBgNVHSAETzBN
MEsGDisGAQQBiCoBh2gBAAICMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly9wa2ktaW5m
by5hb2wuY29tL0FPTE1TUEtJL2luZGV4Lmh0bWwwHQYDVR0OBBYEFEIyJcf5L8GO
3wwJ/GQWOP7Kqs5cMA0GCSqGSIb3DQEBBQUAA4IBAQAKzMNxMR68jiFOfTxJa3b2
oYs7UBa8xbKgelaxt9J1DEvc+KmiSDg3LbrcwfCvg6v9dFh47zmBrFKUDyBRfysB
YHG3wpruUx5vfPYPJEDjJ6IqXjbTFKTxC0adMt+VeAgT8hySpuFFrIUmrgXJLpsE
tqaT8MPlIUjgvMzVxfB4TyVqaS5ox6Gpd+aEz/Wz29ighQM4DXAag/r/6ErGSf5p
53muregttM6HSq6zgGuNeiOopO/Y3Ni/A09xJSVql0PvbcoCI/RGvlczqHAQVrio
vv4+fpE/3RK1zm+dO5Fss8y/cu0xyTjuQTWT4o/v86um0N4l3wlxD62AxmLcyQyh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtw5h8TJtW1DG6ioPScZ+
z/8qL0XcZloVA+jbDQ33xFACDOi9ZaBaytmtmk0xG9wbWvwaOZ/iVP8LP+TzRK/B
HHdRZHVsZ5SkWFYlZ/LTR+xI6Yp+D70jbOzzE4JtqbDsFcqOVUzUIRNmwmK6B0KH
ejdl5KaqtKUrPatF5iWvjZ2+ViHKMsivZkV8HpnhOM2Wjb9gCDoSr55qmxstImJV
4798QwCm5AddNway4X7Lvhg8Us0ywILZ1D9NU/mbgO+6P01bxIS5YHkPWZo+IlAO
YY2WDUjHeFirIFXemQV2QDuE4zipHh43a7pSRPal/pHlnHgp3LCFZnAtYmJFzpkQ
+wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110033607769027461216175682180445952128
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dulles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'America Online Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AOL Member CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-02-20 19:01:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-20 19:01:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hessen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Dreieich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ADTECH GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'cstest.adtech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23108702126587256500491597218510255995573124815548829339023988762622526390936892353101223261180239145237799328212761811427677814674716401402685952867267204274218232523934580762309192189489857658239758793095881049993780204405166573343832775367566392256656907843008985780192184851737030632682532231290498445999383108798659053206853193016529318330775293890399105896904841593761470707851445602295334774212907120020980008997543672606716938482934511761021670611078583304459385395728478923666303433027658550264493527683592754283097231828922086625618926669093145273533686334388209408517314648283582424642785193419189446578427
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 61a6996d249f0e1188e639e0fe74d1056952a943
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.aol.com/AOLMSPKI/aolServerCert.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.web.aol.com/ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cstest.adtech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beta-cstest.adtech.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.1066.1.1000.1.0.2.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://pki-info.aol.com/AOLMSPKI/index.html'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							423225c7f92fc18edf0c09fc641638fecaaace5c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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