dukc.net

Issued by Amazon

About this certificate

This digital certificate with serial number 06:b8:41:fc:32:a8:be:dc:fe:0a:4e:d5:e0:4c:28:1b was issued on by Amazon.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dukc.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:b8:41:fc:32:a8:be:dc:fe:0a:4e:d5:e0:4c:28:1b
Serial Number (int): 8932088934479345829246566732848179227
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d4:d1:58:f1:e6:47:85:4b:a4:b2:64:5e:fe:76:68:c6:82:85:77:1d
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): be:19:b2:2b:fa:ef:ee:df:bf:b6:ba:10:08:a1:f8:ad:c7:75:e4:6a
Fingerprint (sha256): b3:bd:a2:71:ad:5f:32:9b:c5:a7:83:9a:a4:0c:ab:ad:85:e0:a4:20:af:63:70:86:2a:b8:8d:fc:41:4c:ef:04

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate dukc.net

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dukc.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dukc.net
production.dukc.net
melbourne.dukc.com

Other certificates including the domain name dukc.net

(limited to 100 certificates)
rmq.sandpitunstable.dukc.net
msdukc2.sandpit.dukc.net
services.production.dukc.net
msdukc-melbourne1.uat.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
auth.sandpit.dukc.net
dukc.net
nagios.uat.dukc.net
services.support.dukc.net
msdukc2.test.dukc.net
dds.test.dukc.net
auth.sandpit.dukc.net
www.dukc.net
nagios.sandpit.dukc.net
dds.support.dukc.net
sandpit.dukc.net
auth.test.dukc.net
nagios.sandpit.dukc.net
adaptacast2.sandpit.dukc.net
msdukc2.sandpitdev.dukc.net
dukc.net
services.dukc.net
transitanalyst-nightly.uat.dukc.net
api.production.dukc.net
rmq.uat.dukc.net
dds.production.dukc.net
melbourne.dukc.com
dds.sandpit.dukc.net
nagios.sandpit.dukc.net
dukc.net
adaptacast.test.dukc.net
dukc.net
rmq.test.dukc.net
auth.dukc.net
auth.sandpit.dukc.net
dukc.net
dukc.net
sandpitdev.dukc.net
msdukc1.uat.dukc.net
serviceviewer.support.dukc.net
dds.dukc.net
nagios.uat.dukc.net
dukc.net
centralais.dukc.net
api.sandpit.dukc.net
dukc.net
dukc.net
centralrmq.dukc.net
msdukc2.dukc.net
dds.production.dukc.net
sandpit.dukc.net
appservices.test.dukc.net
services.sandpit.dukc.net
adaptacast.support.dukc.net
test.dukc.net
appservices.sandpit.dukc.net
dukc.net
nagios.dukc.net
adaptacast.dukc.net
adaptacast2.production.dukc.net
dds.sandpitunstable.dukc.net
dukc.net
dukc.net
rmq.test.dukc.net
dukc.net
sandpitunstable.dukc.net
api.dukc.net
serviceviewer.production.dukc.net
melbourne.dukc.com
msdukc-melbourne1.sandpitdev.dukc.net
adaptacast1.production.dukc.net
msdukc2.sandpit.dukc.net
strat1.sandpitdev.dukc.net
centralrmq.dukc.net
dds.test.dukc.net
dds.dukc.net
api.sandpit.dukc.net
nagios.production.dukc.net
adaptacast.production.dukc.net
nagios.production.dukc.net
ais.sandpit.dukc.net
appservices.production.dukc.net
uat.dukc.net
api.sandpit.dukc.net
ais.uat.dukc.net
rmq.sandpit.dukc.net
adaptacast.sandpit.dukc.net
dds.sandpitdev.dukc.net
nagios.dukc.net
rmq.support.dukc.net
ais.dukc.net
msdukc1.production.dukc.net
*.dukc.net
rmq.sandpit.dukc.net
api.sandpitdev.dukc.net
rmq.production.dukc.net
msdukc1.test.dukc.net
ais.sandpit.dukc.net

Certificate

The complete raw certificate details for dukc.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFgjCCBGqgAwIBAgIQBrhB/DKovtz+Ck7V4EwoGzANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAzMDYwMDAwMDBaFw0yMDA0MDYx
MjAwMDBaMBMxETAPBgNVBAMTCGR1a2MubmV0MIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAjw4JubZcDdUAVAd3FbwJxIGFIbnordfG0gUQorvFE0GL6ME0
ckZZdCi+4o+Y6SyTPtginkbizK8fpPa7xOVNcAT1YMFoQNXU2zw6WBqU+NxcBJnS
cgKOAQfmVSR0drRMzx/1pb5hCaWMN1fRikeieN3Tb079aQ+9xuOccl5arQ18pFcg
NqKevOr32JNQC7tHSaTTs+tNlLAX2sLMTS/9iGgYMTxCVXA9Jt5mjFWOtBvUzaR6
e6AXdYjA9A9Fx68H8T+lslZ85ODIaPGTzH601SkHRK3K5m7qJaM8VRmikgrctwUY
r0YEpOaqiLqeDyOeJGI4fV6G5RBdbnJbbT95BwIDAQABo4ICnTCCApkwHwYDVR0j
BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFNTRWPHmR4VLpLJk
Xv52aMaChXcdMDwGA1UdEQQ1MDOCCGR1a2MubmV0ghNwcm9kdWN0aW9uLmR1a2Mu
bmV0ghJtZWxib3VybmUuZHVrYy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8v
Y3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzAL
BglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcw
AYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAC
hipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYD
VR0TAQH/BAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1ALvZ37wfinG1k5Qj
l6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABaVDM6h4AAAQDAEYwRAIgeT1p5OHecmPU
nUP4ppyzTwOz9YCr4KwbbD/zSZrQgLECIHn0yZixkAPfbs4tVr/wCgYqgQbD/i5S
7eeqO/pJHFkeAHcAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFp
UMzrVwAABAMASDBGAiEA/bgLY+EfSU9js3NhtBO+C90q254pzGVUj87EyPHKh6QC
IQDgvCcV9HVajbW1UOq9EncbBQnnQF9odjchSk81Kuw2tTANBgkqhkiG9w0BAQsF
AAOCAQEAnRpyh2OaKYAYrE/Nw60vFiXf6mZMLxxxCOCTf9LMwo8UEi/IK8eS/3nJ
Dq1jVPQDnuK4CtxNup2AEBlR34QNgCeOdHiprRk+rc/pUD3KU1EewWhn2b4yOWDa
XogFbwwULGOqDwBRoNmux30n3Z+tJmIroiGjMR3zfW+ybfzc/mYq3eY5kJOYAvqh
uvQQaMJE0MOfLEwNljHMa8bAoNj1TwZeCF9BqHrZvQSWxxs9CC3gnfk0GtEU7OlC
t3L2dcDf1iWfhfPuW385/AMO+T61pwrcBnxtdCv4HDh71i+Krpur5uDydwxGs8uE
6SOrzccO7KhuMSBYFrAfNj4mwu8KgA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjw4JubZcDdUAVAd3FbwJ
xIGFIbnordfG0gUQorvFE0GL6ME0ckZZdCi+4o+Y6SyTPtginkbizK8fpPa7xOVN
cAT1YMFoQNXU2zw6WBqU+NxcBJnScgKOAQfmVSR0drRMzx/1pb5hCaWMN1fRikei
eN3Tb079aQ+9xuOccl5arQ18pFcgNqKevOr32JNQC7tHSaTTs+tNlLAX2sLMTS/9
iGgYMTxCVXA9Jt5mjFWOtBvUzaR6e6AXdYjA9A9Fx68H8T+lslZ85ODIaPGTzH60
1SkHRK3K5m7qJaM8VRmikgrctwUYr0YEpOaqiLqeDyOeJGI4fV6G5RBdbnJbbT95
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8932088934479345829246566732848179227
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dukc.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18059000001014182659960485071752236969877380527292117602565136280761448586702795606132346655464030192313668583307643220675459640380632908360885937590290958190397334808795426704374718080821896772521539301520887129435062646654752659990014136049113590922122469627590403090819417551249678973538507675901775641072563888890536193127233663516026989347407486674432093603697161477970085302687214320119740851895390473890317414012798936440149484802738053638050014011044375384919231183388479343357374197207614781602476658375451400803451508738488106612282964531539452668116517682462418827607984166216751534957510919895710150129927
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4d158f1e647854ba4b2645efe7668c68285771d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dukc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'production.dukc.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'melbourne.dukc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016950ccea1e00000403004630440220793d69e4e1de7263d49d43f8a69cb34f03b3f580abe0ac1b6c3ff3499ad080b1022079f4c998b19003df6ece2d56bff00a062a8106c3fe2e52ede7aa3bfa491c591e0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016950cceb570000040300483046022100fdb80b63e11f494f63b37361b413be0bdd2adb9e29cc65548fcec4c8f1ca87a4022100e0bc2715f4755a8db5b550eabd12771b0509e7405f687637214a4f352aec36b5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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