mi.amazonmusic.com
Issued by Amazon RSA 2048 M02
About this certificate
This digital certificate with serial number 07:1c:34:23:4a:74:47:66:ee:59:a9:9d:ae:fe:d7:66 was issued on by Amazon.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=mi.amazonmusic.com
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:1c:34:23:4a:74:47:66:ee:59:a9:9d:ae:fe:d7:66Serial Number (int): 9451037763860927478657320832034854758
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: 99:0f:6f:81:4e:a1:f6:b6:88:22:3d:86:85:b9:6f:94:b7:97:8d:6e
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2
Fingerprint (sha1): 02:06:80:68:13:07:13:81:d3:d0:9d:3c:1e:76:fa:fd:a4:62:e1:82
Fingerprint (sha256): af:0e:45:7b:38:59:49:29:ef:7b:41:d8:72:70:10:ce:35:07:52:6b:44:ac:2d:cd:27:ea:c0:cf:06:c2:59:f0
Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer
Revocation information
OCSP Server: http://ocsp.r2m02.amazontrust.comCRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl
Check the revocation status for certificate mi.amazonmusic.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for mi.amazonmusic.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
mi.amazonmusic.com
Other certificates including the domain name amazonmusic.com
(limited to 100 certificates)
sonos-na.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-eu.amazon.com
sonos-eu.amazon.com
artists.amazonmusic.com
sonos-eu.amazon.com
www.amazonmusic.com
www.amazonmusic.com
artists.amazonmusic.com
*.download.cdn.delivery.amazonmusic.com
sonos-na.amazon.com
cms.amazonmusic.com
sonos-na.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
www.amazonmusic.com
sonos-na.amazon.com
sonos-eu.amazon.com
cms.amazonmusic.com
sonos-na.amazon.com
posters.amazon.com
jobfinder.amazon.com
sonos-na.amazon.com
sonos-eu.amazon.com
sonos-na.amazon.com
influencer.amazonmusic.com
music2.production.k1.amazon.brightspot.cloud
sonos-eu.amazon.com
www.amazonmusic.com
artists.amazonmusic.com
sonos-eu.amazon.com
*.streaming.cdn.delivery.amazonmusic.com
sonos-na.amazon.com
www.amazonmusic.com
sonos-na.amazon.com
assets.amazonmusic.com
sonos-eu.amazon.com
posters.amazon.com
mi.amazonmusic.com
sonos-eu.amazon.com
sonos-na.amazon.com
www.artists.amazonmusic.com
assets.amazonmusic.com
www.amazonmusic.com
sonos-na.amazon.com
aol.amazon.com
jobfinder.amazon.com
www.amazonmusic.com
san-13-s11.tlsprovisioning.exacttarget.com
mi.amazonmusic.com
amazonmusic.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-eu.amazon.com
posters.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-na.amazon.com
www.amazonmusic.com
www.amazonmusic.com
sonos-eu.amazon.com
amazonmusic.com
artists.amazonmusic.com
sonos-na.amazon.com
posters.amazon.com
sonos-eu.amazon.com
sonos-eu.amazon.com
cms.amazonmusic.com
sonos-eu.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-na.amazon.com
assets.amazonmusic.com
sonos-na.amazon.com
sonos-na.amazon.com
assets.amazonmusic.com
www.amazonmusic.com
influencer.amazonmusic.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-eu.amazon.com
sonos-eu.amazon.com
artists.amazonmusic.com
sonos-eu.amazon.com
www.amazonmusic.com
www.amazonmusic.com
artists.amazonmusic.com
*.download.cdn.delivery.amazonmusic.com
sonos-na.amazon.com
cms.amazonmusic.com
sonos-na.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
www.amazonmusic.com
sonos-na.amazon.com
sonos-eu.amazon.com
cms.amazonmusic.com
sonos-na.amazon.com
posters.amazon.com
jobfinder.amazon.com
sonos-na.amazon.com
sonos-eu.amazon.com
sonos-na.amazon.com
influencer.amazonmusic.com
music2.production.k1.amazon.brightspot.cloud
sonos-eu.amazon.com
www.amazonmusic.com
artists.amazonmusic.com
sonos-eu.amazon.com
*.streaming.cdn.delivery.amazonmusic.com
sonos-na.amazon.com
www.amazonmusic.com
sonos-na.amazon.com
assets.amazonmusic.com
sonos-eu.amazon.com
posters.amazon.com
mi.amazonmusic.com
sonos-eu.amazon.com
sonos-na.amazon.com
www.artists.amazonmusic.com
assets.amazonmusic.com
www.amazonmusic.com
sonos-na.amazon.com
aol.amazon.com
jobfinder.amazon.com
www.amazonmusic.com
san-13-s11.tlsprovisioning.exacttarget.com
mi.amazonmusic.com
amazonmusic.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-eu.amazon.com
posters.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-na.amazon.com
www.amazonmusic.com
www.amazonmusic.com
sonos-eu.amazon.com
amazonmusic.com
artists.amazonmusic.com
sonos-na.amazon.com
posters.amazon.com
sonos-eu.amazon.com
sonos-eu.amazon.com
cms.amazonmusic.com
sonos-eu.amazon.com
san-13-s11.tlsprovisioning.exacttarget.com
sonos-na.amazon.com
assets.amazonmusic.com
sonos-na.amazon.com
sonos-na.amazon.com
assets.amazonmusic.com
www.amazonmusic.com
influencer.amazonmusic.com
Certificate
The complete raw certificate details for mi.amazonmusic.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFzjCCBLagAwIBAgIQBxw0I0p0R2buWamdrv7XZjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAyMB4XDTIzMDMwMjAwMDAwMFoXDTIzMTIyMTIzNTk1OVowHTEb MBkGA1UEAxMSbWkuYW1hem9ubXVzaWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA8q7IS7iIN/rG3oGdGgT7eYXHX/4KP0cGBeBHP/N50dMqFz4L mlSLlb7Jsgv6syi8oXt8rxU5UPqIWPEqe4vmenCqZA6LjZ4OuEPQuF0jiATMWFbx NroQ0ToYNikfKFDixGckU28Cq3gGzLp+8+jgXxJftu1c/P1e4mxG2qplN3LAT+gs w44LQbq3tTGxk98HLu4zfZGTymSY+Vz1LQUQdGJql4bsXoDpISxzWavNCtxKGsOT F6uhcLpfAiB+INRazvhpIfRl3tnPYU8mF7G2OHcaJbi682FKEBBEnDgP+938mN13 n17rpx0xIkQMCFU1WZ+fsnT+Rx69PA5Xwpd2ywIDAQABo4IC6TCCAuUwHwYDVR0j BBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFJkPb4FOofa2iCI9 hoW5b5S3l41uMB0GA1UdEQQWMBSCEm1pLmFtYXpvbm11c2ljLmNvbTAOBgNVHQ8B Af8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0 MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAy LmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYB BQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEF BQcwAoYqaHR0cDovL2NydC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2Vy MAwGA1UdEwEB/wQCMAAwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AK33vvp8 /xDIi509nB4+GGq0Zyldz7EMJMqFhjTr3IKKAAABhqATP0UAAAQDAEYwRAIgBvVS TSAX1ua1GNIjRRs4H+g1+oul0Y7DgGhTY1MoXfgCIHSKCg/p1yNen2VWWlpehjnt atrhAFsc21DyiHX/pqKFAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2 pZoAAAGGoBM/XAAABAMARzBFAiBWkYphKHxsalIRdDFk0tdX4IW7m7Bo6nCVxDZ5 YV2q6gIhAKRSn9aNz4H99PiPDhSlMKKW7T1ttViTTXn2Kda0cxVkAHUAtz77JN+c Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGoBM/EQAABAMARjBEAiAlZqPc YghMQD1JpEyKANVAyZch8jVS8vWLRaMyjteKdQIgXMmVBBnqye7nuK6QwH4QFZ/b X8FNi919j+oZa7vGImowDQYJKoZIhvcNAQELBQADggEBAHcvk5nxas8ACrLpwUiR ELYdvuUF975NrpSCFucKYs4pYcF5ktWHvkQS5nvv0Hp0pzps4Ew6vppHp4zZfgpi LBHEqn1vhPwGSj+5nFYWZhYxHEIZhmPeTz7x229bnK23WMd7dCIi7jgiJBm6OxA8 S6mpK74XAjhHTOETZb/FUIWPhA6THs/ncYtSUm+J9gwseR0XmBehrxzFzBoKErTL zrbIeAA6LokluKaoKr1724i5FLctKCoQ70vsaBG9A+sZKk1N3OYWwf226+ZaRc3T uQfNgt+R3a/NRgRJSICep7UGmdkJjqsUmDtt8lhK3zi5TA37qec8tXuZXT9LtKCu I/A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8q7IS7iIN/rG3oGdGgT7 eYXHX/4KP0cGBeBHP/N50dMqFz4LmlSLlb7Jsgv6syi8oXt8rxU5UPqIWPEqe4vm enCqZA6LjZ4OuEPQuF0jiATMWFbxNroQ0ToYNikfKFDixGckU28Cq3gGzLp+8+jg XxJftu1c/P1e4mxG2qplN3LAT+gsw44LQbq3tTGxk98HLu4zfZGTymSY+Vz1LQUQ dGJql4bsXoDpISxzWavNCtxKGsOTF6uhcLpfAiB+INRazvhpIfRl3tnPYU8mF7G2 OHcaJbi682FKEBBEnDgP+938mN13n17rpx0xIkQMCFU1WZ+fsnT+Rx69PA5Xwpd2 ywIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 9451037763860927478657320832034854758 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mi.amazonmusic.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30635858218179215337613547999729090794519921202111048607009269235915039246569679522148558530489822036335951995945857242183305946392265190463799607834277242860073471609119943056224014820395222304990865010633505490511325646269301013321890581154823013274557176166421179339798063271151321629634026487408269697202950290463536725122541534230607771270777997869116108375455488511839034769380690773085674643611126418401627223548890131112293664734068680324158827047746607833095433379570612243921958611825829370573688600560958230939300372494979667528166429101922090255520825241973656860041031687676520920898079956890982379124427 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 990f6f814ea1f6b688223d8685b96f94b7978d6e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.amazonmusic.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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