forms.public-prod.aktiacloud.fi
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0f:eb:01:2d:ac:2d:cc:b5:07:5c:ad:0c:92:fe:3e:0c was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=forms.public-prod.aktiacloud.fi
Amazon
Organization:
Amazon
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0f:eb:01:2d:ac:2d:cc:b5:07:5c:ad:0c:92:fe:3e:0cSerial Number (int): 21158633599493129433135070206517722636
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: f8:df:52:33:30:fc:83:f5:89:fa:1b:30:a4:cf:de:72:11:33:79:b3
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): 7c:ae:0e:ef:18:c4:33:93:50:41:53:b1:d4:92:af:cc:f4:99:97:4d
Fingerprint (sha256): b0:74:c1:0e:dc:d9:e0:6c:01:5a:13:26:ab:78:b9:cb:f3:e0:a8:8e:59:83:ab:9d:89:4e:36:fe:70:a4:7c:15
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate forms.public-prod.aktiacloud.fi
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for forms.public-prod.aktiacloud.fi
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
forms.public-prod.aktiacloud.fi
forms.www.aktia.fi
forms.www.aktia.fi
Other certificates including the domain name aktiacloud.fi
(limited to 100 certificates)
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
*.systest.portfolio.aktiacloud.fi
sysforms.public-sys.aktiacloud.fi
sysmisc.public-sys.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
*.prod.portfolio.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
authgw.authentication-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
*.systest.portfolio.aktiacloud.fi
sysforms.public-sys.aktiacloud.fi
sysmisc.public-sys.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
*.prod.portfolio.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
authgw.authentication-dev.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
devmisc.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
forms.public-prod.aktiacloud.fi
devforms.public-dev.aktiacloud.fi
forms.public-prod.aktiacloud.fi
misc.public-prod.aktiacloud.fi
Certificate
The complete raw certificate details for forms.public-prod.aktiacloud.fi in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGADCCBOigAwIBAgIQD+sBLawtzLUHXK0Mkv4+DDANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDIxMzAwMDAwMFoXDTIzMDYzMDIzNTk1OVowKjEo MCYGA1UEAxMfZm9ybXMucHVibGljLXByb2QuYWt0aWFjbG91ZC5maTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMmBGdZ0LVCcQci8HxEaw4XbEkvHHF59 i7rZQgxE2W6cT0ofAE/dAHv7z/VSbhLVOsw+h0Fp2zcSzG+iMrGz2LbUVHxdAwW/ Uu2RrcFgOEYNgzp06FqK4QwiJnQqair/Nl2t9j9or5tCF/+mAaU/m8gOP6Rs9e/K 43EtvpS4MyVv8xem5Tej+GqDPVSqx/PN+Ru7WCAvkwfDZI9hVqiqHaZKnkbio7bi SS4tSOIj0oQotTHChI3ojW2TeLMi43YGbf9TAg6A9T4GbmIflTERbZ5KL9X8/jpD NgSr8XyT9OZoXVuvv426F4FdnrsC5MBlKK28V0j8PWyG+91hG6KHhzcCAwEAAaOC Aw4wggMKMB8GA1UdIwQYMBaAFIG4DmOKiRIY5fo7O1CVn+blkBOFMB0GA1UdDgQW BBT431IzMPyD9Yn6GzCkz95yETN5szA+BgNVHREENzA1gh9mb3Jtcy5wdWJsaWMt cHJvZC5ha3RpYWNsb3VkLmZpghJmb3Jtcy53d3cuYWt0aWEuZmkwDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAy MDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5j cmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUF BzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUH MAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAM BgNVHRMBAf8EAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgDoPtDaPvUG NTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYZMW2+eAAAEAwBHMEUCIQD//UNO OSDfOxFWykI62eQdNHJ+Bjc1e04HI0QbMVjJCwIgWWtc9kGhNBbOUl8raO2lwabW 9OO9j4gcpdixQNRiovwAdwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTal mgAAAYZMW3AcAAAEAwBIMEYCIQDuUXxyhtVgRzqyRHddDX+40jkJtELEycipGfEf VaA2vQIhAIC/i9+hIcQ9crDxXBd3b1Cx8psKvDBFDlJfAElR91G/AHcAtz77JN+c Tbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGTFtvzgAABAMASDBGAiEAn2Qb pyhXRJTMbgpxzY4W3Kp2Gfcj2qNpqgeIiTtkm9ACIQCgY2yo0mWUxh1PUUyvsYdn H5tOuQ6r/aDejmm5uvj9jzANBgkqhkiG9w0BAQsFAAOCAQEA4kHhqTIa0Cpj+d/z nNR1Rv4QPtJHci/MPE4iyvts3nZO06HrUSee19GAkbmIZAh5oACre4w2wz6tUP6q QgFp2Zm3yL84Ozo6Vmf8PeTXXMEAcABCs2ATj0ZbMTuGpXqpvvxCy6kFqSuVU7LZ SPmSmv/UNwPKByr+ohbOjL+moEeyZTBK+HvLQA9RTkNQuEBgiKRvlmqok2JLlu54 y3rJOvkxmpw9ndz2Mbf2JblyR0w4dHxRAmlt09mT0YZsg6DvzbiiJWZcKCCGPLld TVfMs3FNUl3aHw4PVbcdFtV/5w1tQOrO9cmcDf1niSMNDLzvXkN/a3vF0M7k3ixI oMwLoQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYEZ1nQtUJxByLwfERrD hdsSS8ccXn2LutlCDETZbpxPSh8AT90Ae/vP9VJuEtU6zD6HQWnbNxLMb6IysbPY ttRUfF0DBb9S7ZGtwWA4Rg2DOnToWorhDCImdCpqKv82Xa32P2ivm0IX/6YBpT+b yA4/pGz178rjcS2+lLgzJW/zF6blN6P4aoM9VKrH8835G7tYIC+TB8Nkj2FWqKod pkqeRuKjtuJJLi1I4iPShCi1McKEjeiNbZN4syLjdgZt/1MCDoD1PgZuYh+VMRFt nkov1fz+OkM2BKvxfJP05mhdW6+/jboXgV2euwLkwGUorbxXSPw9bIb73WEbooeH NwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 21158633599493129433135070206517722636 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-13 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-30 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'forms.public-prod.aktiacloud.fi' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25437561338765270276656978158290599831630969714807929502627973630666208756548370932667589534825144017080681540943318404058813595080129394611163425784080050551017843426659412839987630016777115852098351579323301740453066494780141630652633419913609401213827706478490350568178611519055368201106776145649968497935411938702301169076923321589540111706118126533895923629210239619262612350443317033165375635964988048399195224395751711007495978679286665168196536112133166630511916554463758748337799199940576445520971476632110211904296378454092779081248054003349269041184052100776390408130278243568812069401970734888942045726519 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f8df523330fc83f589fa1b30a4cfde72113379b3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.public-prod.aktiacloud.fi' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'forms.www.aktia.fi' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) 016a007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001864c5b6f9e0000040300473045022100fffd434e3920df3b1156ca423ad9e41d34727e0637357b4e0723441b3158c90b0220596b5cf641a13416ce525f2b68eda5c1a6d6f4e3bd8f881ca5d8b140d462a2fc007700b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001864c5b701c0000040300483046022100ee517c7286d560473ab244775d0d7fb8d23909b442c4c9c8a919f11f55a036bd02210080bf8bdfa121c43d72b0f15c17776f50b1f29b0abc30450e525f004951f751bf007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001864c5b6fce00000403004830460221009f641ba728574494cc6e0a71cd8e16dcaa7619f723daa369aa0788893b649bd0022100a0636ca8d26594c61d4f514cafb187671f9b4eb90eabfda0de8e69b9baf8fd8f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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