www.agriculturaltrader.co.uk
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 04:af:6f:a0:bb:27:bc:6f:6e:0d:db:d4:99:41:20:3c was issued on by Amazon.
With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.agriculturaltrader.co.uk
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 04:af:6f:a0:bb:27:bc:6f:6e:0d:db:d4:99:41:20:3cSerial Number (int): 6227828015277000748293244500087742524
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 05:0a:c8:44:6b:c8:5b:98:29:5a:cb:de:60:ec:86:fe:79:53:6f:2d
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): c5:63:92:f9:0a:2e:78:b8:a7:1e:08:fb:71:9c:5a:e2:c5:84:3e:f9
Fingerprint (sha256): 9e:06:3b:d6:b1:d4:f0:ec:75:8d:10:db:78:e2:45:f6:a7:b4:fb:cd:0b:3e:5c:10:7d:a4:22:ca:e6:20:f0:13
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate www.agriculturaltrader.co.uk
3
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.agriculturaltrader.co.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.agriculturaltrader.co.uk
stage.agriculturaltrader.co.uk
agriculturaltrader.co.uk
stage.agriculturaltrader.co.uk
agriculturaltrader.co.uk
Other certificates including the domain name agriculturaltrader.co.uk
(limited to 100 certificates)
eastyorkbeach.toronto.com
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
agriculturaltrader.co.uk
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.wahpetondailynews.com
consent.agriculturaltrader.co.uk
local.centraloregon.pamplinmedia.com
consent.agriculturaltrader.co.uk
flintshopping.mlive.com
portperry.durhamregion.com
local.tabertimes.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
local.northamptonchron.co.uk
consent.agriculturaltrader.co.uk
local.cessnockadvertiser.com.au
local.hamhigh.co.uk
local.dglobe.com
local.fdlreporter.com
shopping.silive.com
muskokan.muskokaregion.com
local.thesiuslawnews.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
local.devonlife.co.uk
local.malvern-online.com
*.agriculturaltrader.co.uk
local.mywebtimes.com
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
local.insidebiz.com
fk.local.kentonline.co.uk
www.agriculturaltrader.co.uk
agriculturaltrader.co.uk
flintshopping.mlive.com
local.mycaldwellcounty.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
analytics.agriculturaltrader.co.uk
western-leader.origami.neighbourly.co.nz
local.the-review.com
*.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
horowhenua-mail.origami.neighbourly.co.nz
local.madisoncourier.com
local.hackneygazette.co.uk
*.agriculturaltrader.co.uk
local.mycaldwellcounty.com
local.doverpost.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
kg.local.kentonline.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
agriculturaltrader.co.uk
local.dissexpress.co.uk
local.bensonnews-sun.com
local.mexicoledger.com
local.wahpetondailynews.com
consent.agriculturaltrader.co.uk
local.centraloregon.pamplinmedia.com
consent.agriculturaltrader.co.uk
flintshopping.mlive.com
portperry.durhamregion.com
local.tabertimes.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
local.northamptonchron.co.uk
consent.agriculturaltrader.co.uk
local.cessnockadvertiser.com.au
local.hamhigh.co.uk
local.dglobe.com
local.fdlreporter.com
shopping.silive.com
muskokan.muskokaregion.com
local.thesiuslawnews.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
local.devonlife.co.uk
local.malvern-online.com
*.agriculturaltrader.co.uk
local.mywebtimes.com
consent.agriculturaltrader.co.uk
*.agriculturaltrader.co.uk
local.insidebiz.com
fk.local.kentonline.co.uk
www.agriculturaltrader.co.uk
agriculturaltrader.co.uk
flintshopping.mlive.com
local.mycaldwellcounty.com
agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
analytics.agriculturaltrader.co.uk
western-leader.origami.neighbourly.co.nz
local.the-review.com
*.agriculturaltrader.co.uk
consent.agriculturaltrader.co.uk
horowhenua-mail.origami.neighbourly.co.nz
local.madisoncourier.com
local.hackneygazette.co.uk
*.agriculturaltrader.co.uk
local.mycaldwellcounty.com
local.doverpost.com
newhomes.yorkregion.com
consent.agriculturaltrader.co.uk
kg.local.kentonline.co.uk
consent.agriculturaltrader.co.uk
Certificate
The complete raw certificate details for www.agriculturaltrader.co.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGIDCCBQigAwIBAgIQBK9voLsnvG9uDdvUmUEgPDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDIyMTAwMDAwMFoXDTI0MDMyMjIzNTk1OVowJzEl MCMGA1UEAxMcd3d3LmFncmljdWx0dXJhbHRyYWRlci5jby51azCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALjxaK12/gspQXyGmQh/j43AYBvGCD4LbjUl DayDlp3aj1xzen9eimri6Zbtr0Xe3L3jvSrgDOculZOa+sXZNxvUx7QDwLkhyZV7 aP8AKGdsQWW5krNz9+f0g3Ablu7y86pGQSdOOeKyt7BUHfF1sONHWCbA7mnuwv4M y3cq+W9dojL45/3UElWBrtK4EsNHysGwDwn20CTt1rEG5dxF35Mt7V9lj8/ljIJU eHQ3IvbCze6iyn0JyQFx+MKHrgEP2iCfHKRVwJwoY9f0LMBpLoqPOwabFmE2YxDV 3+k7aatNNeKbICxmQc6rM5soltH7Y0eRDTjubgf2s8kGV88ygSECAwEAAaOCAzEw ggMtMB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl664LiMB0GA1UdDgQWBBQF CshEa8hbmClay95g7Ib+eVNvLTBhBgNVHREEWjBYghx3d3cuYWdyaWN1bHR1cmFs dHJhZGVyLmNvLnVrgh5zdGFnZS5hZ3JpY3VsdHVyYWx0cmFkZXIuY28udWuCGGFn cmljdWx0dXJhbHRyYWRlci5jby51azAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j cmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgG BmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggGA BgorBgEEAdZ5AgQCBIIBcASCAWwBagB3AHb/iD8KtvuVUcJhzPWHujS0pM27Kdxo Qgqf5mdMWjp0AAABhnFXymwAAAQDAEgwRgIhAM3z12Ea9p9zc2oAeK1yVm51/IhV CI3FcY+Oi89c/V5dAiEAqtOKaiYSzj0Kk7i+QfhxHJgqqBtr3qfpSoiKJuvtRNEA dgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYZxV8p2AAAEAwBH MEUCIQDh7ZEaf+J7MerQymk7p2sTwzkvUo9QV25+vx9ddVi91gIgP5+ihnNrKPrX CRv0a4XAupGf5zgo46RDOHb2y0vtY5UAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bd LIHZu7+rOdiEcwAAAYZxV8o2AAAEAwBIMEYCIQClte9PS4tJt+1Kg6zv/JjrFfIN YOXalVKK8zIWv+fFbQIhALLyqETMzxTXgWTidiMYtpntrQufENJ5YP97YACuSOrv MA0GCSqGSIb3DQEBCwUAA4IBAQAkImyBJl9u0Hu9xG/Jr1e7dyd5DCtCQyHfICZ7 XSnzcfMroUlX6/+obpUSUGgMi+b5YZ9qlqxRSZUhIBTnLJUz59Q+WDVDb12Ia4Da BGMzMvxc1BsYgq+KYPayF1uRcCvW4EKVv8mnohe5Ee9gzRy2cOuAZqGbaKe+QDmU SUcYfoWta90qLv9AA9M6Hi3NlebpjDmuueOCvYPZ5r44eHKpAbche9Orf4hUQJIu 841xStqKPvxonn2yeU5hR28NbFUpSm1KfLo22k/jFHI1ggxzYprJRVAZ3xrcVLaM y/MDO5YIueb78kRZNVmWw6pQJYHbeXcglBPyjcuQU9tqfggL -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPForXb+CylBfIaZCH+P jcBgG8YIPgtuNSUNrIOWndqPXHN6f16KauLplu2vRd7cveO9KuAM5y6Vk5r6xdk3 G9THtAPAuSHJlXto/wAoZ2xBZbmSs3P35/SDcBuW7vLzqkZBJ0454rK3sFQd8XWw 40dYJsDuae7C/gzLdyr5b12iMvjn/dQSVYGu0rgSw0fKwbAPCfbQJO3WsQbl3EXf ky3tX2WPz+WMglR4dDci9sLN7qLKfQnJAXH4woeuAQ/aIJ8cpFXAnChj1/QswGku io87BpsWYTZjENXf6Ttpq0014psgLGZBzqszmyiW0ftjR5ENOO5uB/azyQZXzzKB IQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6227828015277000748293244500087742524 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-22 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.agriculturaltrader.co.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23346891277597410800904801496375317897079498949146583818698989935733735304469691041571427153849784122931615396529487091981380516515141123024013937294758582126969794246543030268938578532788801072322770147287442689979805463049200661995322703411017976251134800020735693308050938449978391560443464506729747267482780291405614795471194305132731733953533732520715025677790568765541447505989079080017848228758177193017351323581707464320386922491133592758571585723520237511839428966563857189829463844714535022689239873559437851711071947417304892048758516501890189544026525079214672188737085470595467591149772957439434503127329 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 050ac8446bc85b98295acbde60ec86fe79536f2d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.agriculturaltrader.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.agriculturaltrader.co.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agriculturaltrader.co.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0024226c81265f6ed07bbdc46fc9af57bb7727790c2b424321df20267b5d29f371f32ba14957ebffa86e951250680c8be6f9619f6a96ac514995212014e72c9533e7d43e5835436f5d886b80da04633332fc5cd41b1882af8a60f6b2175b91702bd6e04295bfc9a7a217b911ef60cd1cb670eb8066a19b68a7be4039944947187e85ad6bdd2a2eff4003d33a1e2dcd95e6e98c39aeb9e382bd83d9e6be387872a901b7217bd3ab7f885440922ef38d714ada8a3efc689e7db2794e61476f0d6c55294a6d4a7cba36da4fe3147235820c73629ac9455019df1adc54b68ccbf3033b9608b9e6fbf24459355996c3aa502581db7977209413f28dcb9053db6a7e080b