aviva-digital.co.uk

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 02:c9:33:39:e7:e1:89:f2:8a:48:8a:b2:8a:5d:55:ff was issued on by Amazon.

With 53 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=aviva-digital.co.uk

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:c9:33:39:e7:e1:89:f2:8a:48:8a:b2:8a:5d:55:ff
Serial Number (int): 3703146650794078663829696118381172223
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 47:52:6d:aa:39:fe:93:3e:b9:ef:0d:13:89:d1:62:22:c5:12:08:6a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 68:92:11:85:a1:fe:c5:7c:4d:84:25:58:2d:1c:32:05:52:ec:cb:55
Fingerprint (sha256): 8e:95:7b:77:1e:65:1e:46:14:27:19:ab:7c:3a:58:fa:45:3e:54:e4:fd:1c:d3:20:04:48:94:b1:2a:cd:75:ff

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate aviva-digital.co.uk

53

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aviva-digital.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aviva-digital.co.uk
avivabroker.ie
apprentices.aviva.co.uk
avivastaffpensions.co.uk
avivaequine.ca
avivahealth.ie
aviva-labs.co.uk
avivasurety.biz
avivadirect.ie
bcmotorcycle.com
bcmotorcycle.uk
aviva-digital.net
avivawellbeingrewards.co.uk
advantageaviva.ca
aviva.co.uk
brokertechlaunchpad.com
avivasurety.com
avantageaviva.com
avivaresults.com
avivapartenaire.ca
avivaworld.at.aviva.com
brokertechlaunchpad.ca
43.fpinternational.com
avivawellbeingrewards.com
avivawaterprotection.ca
advantageaviva.com
avivacorpsite.at.aviva.com
aviva-digital.uk
aviva-digital.com
bcmotorcycle.co.uk
avivawaterprotection.com
avivasaleshub.com
avivastaffpension.co.uk
aviva-labs.uk
avivatrouduncoup.com
bcmotorcycle.ca
avivademosauto-enrolment.co.uk
avivasavesmarter.co.uk
avivawebcast.com
avivamerchandise.com
avivaadvantage.ca
avivatransfer.co.uk
aviva-direct.ie
autoenrolmentplanner.co.uk
avantageaviva.ca
aviva.com
avivashareplans.at.aviva.com
bcmotorcycle.net
avivaadvantage.com
avivabrand.com
avivasurety.ca
avivamarine.com
avivasurety.net

Other certificates including the domain name aviva-digital.co.uk

(limited to 100 certificates)
avivaadvantage.com
43.fpinternational.com
avivaadvantage.com
avivahealth.ie
aviva-digital.co.uk

Certificate

The complete raw certificate details for aviva-digital.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAupL2oIPsVlS2pEtIvEEN
9npdT+vU0AsCxwdYPJg3x0Qas05z7DZLCTreLvfNYEBwooKNnBkC6B/NjB4j5eF1
cQwOaDQjMK51IafWXtBE4j0fvrKXpGIEhBoSV2ahC6+94lf1/tFoGLUxF23fNodH
fumbRfo9YEAddPN4QHwYQ1an46eYnh83ubQNT2zZpd7R43/8O29yBKU+7VdviDXU
epssj4EN11OoS0qdh6o8BtthbTNX0oAGCGskGlLaKZmk47O6gm0GLjQdifksbb7/
GgZPKIboonum5mr6fpltQKGien/8mIWjh+FRDuhYl5LBAbLVVtxTTyC4Kdwyl0RV
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3703146650794078663829696118381172223
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aviva-digital.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23552795070709759500486617862707708352021652754906551674538783078581223766557524330955460599213181081549135163813882015687073012065977842286952220921194751535208296944675371684368647671795302570939422669398991146040828563071191927117930939407844070991596212660151819257978644758483024684996431596409545922075577366981468073140587331557215738269840953616327739177601957164039131142726785147547833435747004343374783225625666777721072052884949746150431748976091586670141702171812259292017902764866884040639173850694432677270633928811941235655942420449784560957893774822260799006014357720759515944014491936915926471169519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							47526daa39fe933eb9ef0d1389d16222c512086a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1087 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaequine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaworld.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacorpsite.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatrouduncoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivademosauto-enrolment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivashareplans.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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