www.volkswagen.ca
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:c1:32:d6:82:52:04:35:e1:d1:62:c2:fa:86:ff:1b was issued on by Amazon.
With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.volkswagen.ca
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 04:c1:32:d6:82:52:04:35:e1:d1:62:c2:fa:86:ff:1bSerial Number (int): 6320056392476048937409577843597704987
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: fd:54:dc:67:e3:ac:c4:ee:fe:3c:c9:fa:57:3a:45:66:13:95:f7:1a
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c6:69:7c:13:eb:b5:01:eb:6c:37:0f:fd:70:10:94:3d:3c:18:5b:a3
Fingerprint (sha256): 9d:e8:95:6c:bf:05:5c:b3:1d:db:37:32:43:0b:a3:32:41:c8:a4:f3:cc:92:ca:2c:62:57:8a:e5:35:48:11:64
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate www.volkswagen.ca
12
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.volkswagen.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Client Authentication
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.volkswagen.ca
mx.volkswagen.com
vwdealers.com
www.volkswagen.com.mx
vwcpo.com
volkswagen.ca
vw.com.mx
vwdealer.com
vwcomerciales.com.mx
volkswagen.com.mx
vw.com
vw.ca
mx.volkswagen.com
vwdealers.com
www.volkswagen.com.mx
vwcpo.com
volkswagen.ca
vw.com.mx
vwdealer.com
vwcomerciales.com.mx
volkswagen.com.mx
vw.com
vw.ca
Other certificates including the domain name volkswagen.ca
(limited to 100 certificates)
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
access.vw.com
Revproxypool1.vw.com
rp.vw.com
Revproxypool1.vw.com
www.volkswagen.ca
access.vw.com
access.vw.com
access.vw.com
Revproxypool1.vw.com
Revproxypool1.vw.com
access.vw.com
lyncfrontendvip.vwoa.na.vwg
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
www.volkswagen.ca
access.vw.com
Revproxypool1.vw.com
www.volkswagen.ca
www.volkswagen.ca
access.vw.com
access.vw.com
access.vw.com
access.vw.com
www.volkswagen.ca
www.volkswagen.ca
Revproxypool1.vw.com
secure.m.volkswagen.ca
access.vw.com
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
Revproxypool1.vw.com
access.vw.com
access.vw.com
Revproxypool1.vw.com
access.vw.com
rp.vw.com
Revproxypool1.vw.com
access.vw.com
secure.m.volkswagen.ca
www.volkswagen.ca
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
access.vw.com
Revproxypool1.vw.com
rp.vw.com
Revproxypool1.vw.com
www.volkswagen.ca
access.vw.com
access.vw.com
access.vw.com
Revproxypool1.vw.com
Revproxypool1.vw.com
access.vw.com
lyncfrontendvip.vwoa.na.vwg
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
www.volkswagen.ca
access.vw.com
Revproxypool1.vw.com
www.volkswagen.ca
www.volkswagen.ca
access.vw.com
access.vw.com
access.vw.com
access.vw.com
www.volkswagen.ca
www.volkswagen.ca
Revproxypool1.vw.com
secure.m.volkswagen.ca
access.vw.com
Revproxypool1.vw.com
access.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
www.volkswagen.ca
Revproxypool1.vw.com
Revproxypool1.vw.com
access.vw.com
access.vw.com
Revproxypool1.vw.com
access.vw.com
rp.vw.com
Revproxypool1.vw.com
access.vw.com
secure.m.volkswagen.ca
www.volkswagen.ca
Revproxypool1.vw.com
Certificate
The complete raw certificate details for www.volkswagen.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGdDCCBVygAwIBAgIQBMEy1oJSBDXh0WLC+ob/GzANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDkxMDAwMDAwMFoXDTI0MTAwODIzNTk1OVowHDEa MBgGA1UEAxMRd3d3LnZvbGtzd2FnZW4uY2EwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQDZdk3PWoYaoS5CaJEm+FxS1PhDyQV3w7jUcoHbxDNPJN7TsCQ6 9sno/pxrqACdDcFbTVibUAyEj9q+ez2EMTASqL+dlra2vXF8zGXl4tSdzckeEoLz kDtjnolgvZQqcKVG2ejpRUJRzXbvoytuiRDG2YQU+vsvKt2fmmXBm1YL5Lk7Ut2f LKp9FP1KNviogC1+5T+jz1jtZZH2Vllna13wEX85R8nvwQdUxsnLrjnMa7BAlihU aVhtIDY1CXMQcPy+Jpj/c92txwqUN/n9M+UCOD4+TLNNI9ztWK4P3l7FAR+BCHTF So5pGkNbQe6v+htP/2Ya74LUSO3QW88vfgC9AgMBAAGjggOQMIIDjDAfBgNVHSME GDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU/VTcZ+OsxO7+PMn6 VzpFZhOV9xowgcIGA1UdEQSBujCBt4IRd3d3LnZvbGtzd2FnZW4uY2GCEW14LnZv bGtzd2FnZW4uY29tgg12d2RlYWxlcnMuY29tghV3d3cudm9sa3N3YWdlbi5jb20u bXiCCXZ3Y3BvLmNvbYINdm9sa3N3YWdlbi5jYYIJdncuY29tLm14ggx2d2RlYWxl ci5jb22CFHZ3Y29tZXJjaWFsZXMuY29tLm14ghF2b2xrc3dhZ2VuLmNvbS5teIIG dncuY29tggV2dy5jYTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNVHQ8BAf8EBAMC BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMDsGA1UdHwQ0MDIwMKAu oCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDB1 BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFt YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6 b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5 AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb AAABin2FSgoAAAQDAEcwRQIhAOPx6osS/lj9lqxx/kmFkJIKUzl/OKd4w9aLomT/ H0j+AiA8iCvVKX9yLOLRUjOiLxhNemPOdy95BlleGbx17UkbdAB1AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABin2FSkAAAAQDAEYwRAIgCiRGB1U1 vIl2SQIp5l38B49LyUTTX7sa5f60hoyWUJYCIDYLwDOFoKYKvjHR7WPuVvaijqTc hU872zpEoSSae1ZdAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sA AAGKfYVJ9gAABAMARzBFAiEAkar/5I8AB3GiR+3AnRaVbo7hZ2iuQxRPhsiyA2qT sMgCIEBvRMXf/6MwnSOy4OOFeyX47OUR3t7BsGboZrnJcbyOMA0GCSqGSIb3DQEB CwUAA4IBAQCXoMm0pf0lmuWpLOYQKkDwROv9i6ljbjiPcVzJ/dqKnyPGwW5LhsM1 w/An7Yl/RvvXjHxYj9RIgxWrRjN2DS2/YgvUppyPGaXyNGaJm2L3AOjxq3Re2C7M ak/hRDy6D2NfhnfoqEXDp26xJQQwpXVArvKbZDKyUtINX5W4wJEHryl/hBut0yFf PT/gNd0VLXidyPLxmWFZZ1XTJhqC0s2UmTVNPtZyvZ5v8ARf/tT63Fx3rXPmQE8U +AfCuhxO2mudquJCEtgtISRtZqKCPlWwws9dftB6HNZCQN9Q1gf1miTNj5gG/VfZ 8YC5oqX1YNWmB56r+mIl5aNvlAvmOrqa -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XZNz1qGGqEuQmiRJvhc UtT4Q8kFd8O41HKB28QzTyTe07AkOvbJ6P6ca6gAnQ3BW01Ym1AMhI/avns9hDEw Eqi/nZa2tr1xfMxl5eLUnc3JHhKC85A7Y56JYL2UKnClRtno6UVCUc1276MrbokQ xtmEFPr7Lyrdn5plwZtWC+S5O1LdnyyqfRT9Sjb4qIAtfuU/o89Y7WWR9lZZZ2td 8BF/OUfJ78EHVMbJy645zGuwQJYoVGlYbSA2NQlzEHD8viaY/3PdrccKlDf5/TPl Ajg+PkyzTSPc7ViuD95exQEfgQh0xUqOaRpDW0Hur/obT/9mGu+C1Ejt0FvPL34A vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6320056392476048937409577843597704987 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-10 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.volkswagen.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27452050027301659393344489696054021165863284667898213942074343866907791159426669255870028254216010026699889443782122515161908783781028415791755044534988884624151004470284881060408583168281789667372678733146389203162175907449998216012822438284800766104544632996005353470412819138984687795059957405186498489560155320947577783732712595143081816347513059417002052619651837422606317615814487791150266793932782193130118106230575139239222248643391395587002408065095168754220910784176828322468221434473177923760033141220368617120924089930483677230760985444984485682132261470596585156814295184173816574249301531751577661866173 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fd54dc67e3acc4eefe3cc9fa573a45661395f71a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkswagen.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mx.volkswagen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwdealers.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.volkswagen.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwcpo.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkswagen.ca' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwdealer.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vwcomerciales.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'volkswagen.com.mx' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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