geadditive.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0d:2a:36:9c:ec:99:a2:33:3f:91:7a:ac:c6:53:ab:b6 was issued on by Amazon.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=geadditive.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:2a:36:9c:ec:99:a2:33:3f:91:7a:ac:c6:53:ab:b6
Serial Number (int): 17499148096198512460560554676880386998
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:f3:81:96:98:94:c7:1f:59:06:1f:e4:d2:44:9e:77:66:2a:dd:44
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): b2:a4:5c:48:06:1b:58:10:d9:3f:10:2f:40:7d:46:59:23:69:2c:cb
Fingerprint (sha256): a9:35:ef:1f:f8:cb:6c:72:bb:e6:29:2f:ff:b5:64:51:c8:26:95:ba:f6:11:8d:87:09:01:4b:9b:85:5d:54:77

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate geadditive.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for geadditive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

geadditive.com
ge-girls.com
smallworld.nl
ge-smallworld.com
geenergyfinancialservices.com
smallworld.de
ge-smallworld.de
gesmallworld.com
smallworldwide.com
gesmallworld.net
smallworldamericas.com
smallworld.co.uk
geoilandgas.com

Other certificates including the domain name geadditive.com

(limited to 100 certificates)
imperva.com
incapsula.com
www.general-electric-company.org
www.general-electric-company.org
geadditive.com
aaf.gecompany.com
incapsula.com
incapsula.com
imperva.com
beta.geadditive.com
imperva.com
incapsula.com
imperva.com
geadditive.com
imperva.com
incapsula.com
*.smallworldwide.com
*.smallworldwide.com
redmine-geonx.geadditive.com
imperva.com
imperva.com
imperva.com
incapsula.com
imperva.com
imperva.com
incapsula.com
www.general-electric-company.org
www.general-electric-company.org
imperva.com
geadditive.com
imperva.com
incapsula.com
www.general-electric-company.org
imperva.com
redmine-geonx.geadditive.com
incapsula.com
incapsula.com
imperva.com
www.general-electric-company.org
imperva.com
incapsula.com

Certificate

The complete raw certificate details for geadditive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGrzCCBZegAwIBAgIQDSo2nOyZojM/kXqsxlOrtjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMTIzMTAwMDAwMFoXDTI1MDEyOTIzNTk1OVowGTEX
MBUGA1UEAxMOZ2VhZGRpdGl2ZS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCtvS9inS4vr6d2O1qRs5WVC5XWpKEeF2S1o5cYiafiXjfz86qVErvg
+1ZnPcSS/fUrCNVC33BSdOdoSzLvUvbu9EcwziqTqeAAYWUlGCWmaUwEY2PtBUH+
0/QIz5KXR72OkXz2auRmAl7pZBJxobgdJIcavyBOQGqYzPim4b6zIJvse/pM6XIB
4ISvnwQEXynV3q+zwEQ34Z3qVYDOwZUCvAgVRPIJIv/9Op5JDO2W0WZIyvFBpAy2
JeCYfwNtbSYACkR2DuOam1CIzTiwpN3P8dLziX4uhY/sZ/V20c4CNkgg8lFsYkvt
lpV5lKPQG2xsRrd2OQtklHuxtqxxeyYLAgMBAAGjggPOMIIDyjAfBgNVHSMEGDAW
gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUkPOBlpiUxx9ZBh/k0kSe
d2Yq3UQwgf4GA1UdEQSB9jCB84IOZ2VhZGRpdGl2ZS5jb22CDGdlLWdpcmxzLmNv
bYINc21hbGx3b3JsZC5ubIIRZ2Utc21hbGx3b3JsZC5jb22CHWdlZW5lcmd5Zmlu
YW5jaWFsc2VydmljZXMuY29tgg1zbWFsbHdvcmxkLmRlghBnZS1zbWFsbHdvcmxk
LmRlghBnZXNtYWxsd29ybGQuY29tghJzbWFsbHdvcmxkd2lkZS5jb22CEGdlc21h
bGx3b3JsZC5uZXSCFnNtYWxsd29ybGRhbWVyaWNhcy5jb22CEHNtYWxsd29ybGQu
Y28udWuCD2dlb2lsYW5kZ2FzLmNvbTATBgNVHSAEDDAKMAgGBmeBDAECATAOBgNV
HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1Ud
HwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3Iy
bTAyLmNybDB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw
LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y
Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF/
BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AM8RVu7VLnyv84db2Wkum+kacWdKsBfs
rAHSW3fOzDsIAAABjL6XkJIAAAQDAEcwRQIhAN6iB6Vi73HXWYz2DkEoiHhBH+TQ
BfTCmsctrBrRcFFxAiAPf/TelQyXNde87l5lQ12/I2rPin5SBAu6UWMHridXBgB3
AH1ZHhLheCp7HGFnfF79+NCHXBSgTpWeuQMv2Q6MLnm4AAABjL6XkEEAAAQDAEgw
RgIhAMiRjRGEXx2qPQ9FP77iCElZqbRg06t1wFmGkwQS5P3LAiEAjASZL2PmSPk9
WeAsl9jfP00eY/X5sU0QWGoMb4JAopsAdgDm0jFjQHeMwRBBBtdxuc7B0kD2loSG
+7qHMh39HjeOUAAAAYy+l5BsAAAEAwBHMEUCIQCqjjprAXc03MUv5fcYsxxRQz1R
vWIPPovSfXIxyVogoQIgWvR7PYNV52+dDclg7A3wIOqNyuY0U7GxkesXH4QZVgQw
DQYJKoZIhvcNAQELBQADggEBAHqXEmPpWaZ3/LnOjE/kHJMwzASw2iJuV1j1QP1q
Dsrf+YKmLo4mZ7N99u17Thx0CsJUGZcmIo0bJr7Dst3bpB5ASV3mgDMLT8DO2epk
88dV4Xfs243Ws6BeXhRoT7BsVN3/JaPhRskUlIF7CEhtcmkdRi9nbevyMuvlUNY6
trYC0VxlmWnk37BMQFY3xey+r8EA5hzOVMeRHx1ncCuxosnRvTn4mLFoH8H8bg55
M5GIMTghvIFUCRPVL3MrMXZ0kpZs6lWYhLRIFb5g1dRcA92M8UcPoh0U0gGVYi5c
PXrzo2xyRm9vRZr487oyA+jaT+8Tc7p4nJbqEeW5JKaANXo=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArb0vYp0uL6+ndjtakbOV
lQuV1qShHhdktaOXGImn4l438/OqlRK74PtWZz3Ekv31KwjVQt9wUnTnaEsy71L2
7vRHMM4qk6ngAGFlJRglpmlMBGNj7QVB/tP0CM+Sl0e9jpF89mrkZgJe6WQScaG4
HSSHGr8gTkBqmMz4puG+syCb7Hv6TOlyAeCEr58EBF8p1d6vs8BEN+Gd6lWAzsGV
ArwIFUTyCSL//TqeSQztltFmSMrxQaQMtiXgmH8DbW0mAApEdg7jmptQiM04sKTd
z/HS84l+LoWP7Gf1dtHOAjZIIPJRbGJL7ZaVeZSj0BtsbEa3djkLZJR7sbascXsm
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17499148096198512460560554676880386998
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'geadditive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21932517408178741081663816659128110626340316965279764931477086145866059154186022189668180867126579954365105211639890828852043712924335223811968930091546125576651614755409154532210043149768608353793969631516762404376766641952780196501645562120257121739705968372578826996642999559560349871782354149543683366532546740512583066409902929002713706688874986581932628788288128332647753574908300434512021844905176556504097840242958583651608875642410258013762446782469066871560908040751958491371814986727774041837123899095504390585429545173003920610015946927176785420419556878096006196688711902989774212213607601806128690439691
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90f381969894c71f59061fe4d2449e77662add44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geadditive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-girls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-smallworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geenergyfinancialservices.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ge-smallworld.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesmallworld.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworldwide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gesmallworld.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworldamericas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smallworld.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'geoilandgas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018cbe9790920000040300473045022100dea207a562ef71d7598cf60e41288878411fe4d005f4c29ac72dac1ad170517102200f7ff4de950c9735d7bcee5e65435dbf236acf8a7e52040bba516307ae2757060077007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018cbe9790410000040300483046022100c8918d11845f1daa3d0f453fbee2084959a9b460d3ab75c05986930412e4fdcb0221008c04992f63e648f93d59e02c97d8df3f4d1e63f5f9b14d10586a0c6f8240a29b007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018cbe97906c0000040300473045022100aa8e3a6b017734dcc52fe5f718b31c51433d51bd620f3e8bd27d7231c95a20a102205af47b3d8355e76f9d0dc960ec0df020ea8dcae63453b1b191eb171f84195604
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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