thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud

Issued by Amazon ECDSA 256 M03

About this certificate

This digital certificate with serial number 0e:b2:28:ab:eb:63:18:45:c6:bb:ec:c5:0a:5a:de:e4 was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:b2:28:ab:eb:63:18:45:c6:bb:ec:c5:0a:5a:de:e4
Serial Number (int): 19534245699056733132649582743837662948
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e8:67:90:54:a5:30:f0:e2:2e:9b:c1:0d:76:f7:16:99:7b:98:b1:2f
AuthorityKeyId: cb:23:c3:f3:02:73:6f:ba:c1:a4:ad:f8:71:c6:10:28:16:df:ec:bf

Fingerprint (sha1): 80:03:a4:f5:26:76:2a:77:a4:c6:6b:c4:54:31:2f:b2:cd:e2:e7:a0
Fingerprint (sha256): 97:ac:45:4c:b4:a8:c0:f8:96:7f:8e:9a:ef:1c:b1:42:b5:60:53:be:d6:97:40:ad:f0:ce:b9:d7:ff:f0:f6:cf

Issuing Certificate URL: http://crt.e2m03.amazontrust.com/e2m03.cer

Revocation information

OCSP Server: http://ocsp.e2m03.amazontrust.com
CRL Distribution Point: http://crl.e2m03.amazontrust.com/e2m03.crl

Check the revocation status for certificate thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

ECDSA with SHA256

Key Usage

Digital Signature
Key Agreement

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
thkxgea.lb.anuvu.cloud
thkxgea-docs-framework-laboratory.lb.anuvu.cloud

Other certificates including the domain name anuvu.cloud

(limited to 100 certificates)
kctkcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
mbd3cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
cbcqcfr-afgo-01.afgo.us1.lb.anuvu.cloud
liotcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
jkatcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
nn8fcfr-hatchery-01.game.us1.lb.anuvu.cloud
zsgunlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
meuqcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
agiulutvunittest.hatchery-s3.lb.anuvu.cloud
97ohk0ezec2-tftest-01.tftt.us1.lb.anuvu.cloud
e0pe-tftest-alternate-s3-static.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
dvlrnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
cfr-mprtfji-01.cops.us1.sg.anuvu.cloud
j0izalb-mon-01.dvps.us1.lb.anuvu.cloud
xui1re5pcicd-artifact.lb.anuvu.cloud
thkxcfr-afgo-01.afgo.us1.lb.anuvu.cloud
cfr-mprtuam-01.cops.us1.pr.anuvu.cloud
le8zcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
helfnlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
l6vlcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
sngnnlb-flock-01.game.us1.lb.anuvu.cloud
kkvxnlb-jnksmstr-01.dvps.us1.lb.anuvu.cloud
xcldcfr-afgo-01.afgo.us1.lb.anuvu.cloud
co84cfr-afgo-01.afgo.us1.lb.anuvu.cloud
co84cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
oqeealb-mon-01.dvps.us1.lb.anuvu.cloud
g6oncfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
wgx9alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
788lmp1tunittest.hatchery-s3.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
sj31cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
ra29nlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
45j9ndxfec2-flock-01.tftt.us1.lb.anuvu.cloud
dvlrnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
helfnlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
sngnnlb-jnksmstr-01.game.us1.lb.anuvu.cloud
pebdalb-mon-01.dvps.sa1.lb.anuvu.cloud
48ir18ctout.hatchery-s3.lb.anuvu.cloud
cfr-mprtcpa-01.cops.us1.sg.anuvu.cloud
keabnlb-aviary-01.game.us1.lb.anuvu.cloud
o9benlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
wifunlb-jnksmstr-02.mobi.us1.lb.anuvu.cloud
aqvbcfr-afgo-01.afgo.us1.lb.anuvu.cloud
f6pqcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
pqukcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
rln8cfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
y1xyalb-mon-01.dvps.us1.lb.anuvu.cloud
agiulutvtechdoc.lb.anuvu.cloud
cdrzcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
g5y9alb-mon-01.dvps.us1.lb.anuvu.cloud
kotqnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
g9cjalb-mon-01.dvps.us1.lb.anuvu.cloud
wgx9cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
n2gznlb-jnksmstr-02.game.us1.lb.anuvu.cloud
luxynlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
qqvjg0cvtechdoc.lb.anuvu.cloud
n2gznlb-jnksmstr-02.game.us1.lb.anuvu.cloud
uzr10u7dout.hatchery-s3.lb.anuvu.cloud
i67xgwv6tototest.lb.anuvu.cloud
usy0cfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
agiulutvec2-flock-01.tftt.us1.lb.anuvu.cloud
cfr-mprtcpa-01.cops.us1.pr.anuvu.cloud
ipb7cfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
f93ncfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
liotcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
i1mpbtzmtechdoc.lb.anuvu.cloud
qc2anlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
pqukcfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
byiecfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
nn8fec2-flock-01.tftt.us1.lb.anuvu.cloud
r5hicfr-afrfdocs-01.afgo.us1.lb.anuvu.cloud
j0izalb-mon-01.dvps.us1.lb.anuvu.cloud
anfanlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
pebdalb-mon-01.dvps.sa1.lb.anuvu.cloud
xcldalb-afrapimk-01.afgo.us1.lb.anuvu.cloud
f445alb-mon-01.dvps.us1.lb.anuvu.cloud
l9uasxyjout.hatchery-s3.lb.anuvu.cloud
qlwdcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
sngnnlb-aviary-01.game.us1.lb.anuvu.cloud
txq0cfr-afgo-01.afgo.us1.lb.anuvu.cloud
oik1alb-mon-01.dvps.us1.lb.anuvu.cloud
usy0alb-afrapimk-01.afgo.us1.lb.anuvu.cloud
k90salb-afrapimk-01.afgo.us1.lb.anuvu.cloud
dd1tcfr-cicdartf-01.mobi.us1.lb.anuvu.cloud
l9uasxyjunittest.hatchery-s3.lb.anuvu.cloud
vd2swzt5ec2-flock-01.tftt.us1.lb.anuvu.cloud
olpxtovmec2-tftest-01.tftt.us1.lb.anuvu.cloud
dashboard-afgo.lb.anuvu.cloud
f6pqcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud
sgv5nlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
serversiderendering.lb.anuvu.cloud
r5hicfr-afgo-01.afgo.us1.lb.anuvu.cloud
z0lpnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud
zueshc6vunittest.hatchery-s3.lb.anuvu.cloud
tbsecfr-afgo-01.afgo.us1.lb.anuvu.cloud
o9benlb-jnksmstr-01.mobi.us1.lb.anuvu.cloud
sg2pnlb-aviary-01.game.us1.lb.anuvu.cloud
xgelnlb-jnksmstr-01.acg.us1.lb.anuvu.cloud

Certificate

The complete raw certificate details for thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAETRPBPxyL8/cMcLytUxz0vndXlXYQ
q1VM3YkLkUBSK5XvNZtKecCnDV1A+n5WwgnOZxPcTEbTLYXd7de5PLM0Og==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19534245699056733132649582743837662948
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon ECDSA 256 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				00044d13c13f1c8bf3f70c70bcad531cf4be7757957610ab554cdd890b9140522b95ef359b4a79c0a70d5d40fa7e56c209ce6713dc4c46d32d85ddedd7b93cb3343a
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName cb23c3f302736fbac1a4adf871c6102816dfecbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e8679054a530f0e22e9bc10d76f716997b98b12f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thkxcfr-geafdocs-01.afgo.us1.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thkxgea.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thkxgea-docs-framework-laboratory.lb.anuvu.cloud'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							0388
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.e2m03.amazontrust.com/e2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.e2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.e2m03.amazontrust.com/e2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.4.3.2 (ecdsaWithSHA256)
 . . . . [c:0|t:3|false] BIT STRING (576 bits)
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 95754592122823291256938685700340235586400678331174934561323179085914162555863
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 76249420731400812579316218004596345927518247842167833026275595611004593850212