vauva.fi

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:e6:2c:af:6b:58:82:07:d0:b7:10:ab:60:cb:30:d0 was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vauva.fi

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e6:2c:af:6b:58:82:07:d0:b7:10:ab:60:cb:30:d0
Serial Number (int): 17145870551054897073984930527979450576
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b3:31:d6:03:4f:b9:f1:e3:9f:db:5e:1a:8f:bb:e8:9c:c7:ee:5f:e3
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): e8:e2:bc:eb:55:cc:f4:b5:e9:f3:36:b8:da:b9:68:c9:1a:27:bd:17
Fingerprint (sha256): bc:2a:71:98:44:93:f1:da:de:41:9f:af:cb:ac:88:3a:02:59:4e:82:51:1c:7e:09:86:87:a0:fb:db:91:8e:3b

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate vauva.fi

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vauva.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vauva.fi
*.vauva.fi
perhe.fi
*.perhe.fi
vauva-lehti.fi
*.vauva-lehti.fi
lastenoma.fi
*.lastenoma.fi
aihevapaa.fi
*.aihevapaa.fi

Other certificates including the domain name vauva.fi

(limited to 100 certificates)
vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
uutiskirje.vauva.fi
www.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi
m.vauva.fi
amonas.10kysymysta.fi
test.vauva.fi
tarinat.vauva.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
images.cdn.menaiset.fi
message000.sp-prod.net
images.cdn.menaiset.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
kauppa.vauva.fi
vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
tarinat.vauva.fi
vauva.fi
tarinat.vauva.fi
amonas.10kysymysta.fi
amonas.10kysymysta.fi
images.cdn.menaiset.fi
tarinat.vauva.fi
vauva.fi
prod.vauva.fi
test.vauva.fi
m.vauva.fi
www.vauva.fi
amonas.10kysymysta.fi
tarinat.vauva.fi

Certificate

The complete raw certificate details for vauva.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIQDOYsr2tYggfQtxCrYMsw0DANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA2MDQwMDAwMDBaFw0xOTA3MDQx
MjAwMDBaMBMxETAPBgNVBAMTCHZhdXZhLmZpMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEA2R0EuaWFsEbCft+2JcnUxYA5ox2TGZpN/QcQTRYrk1+MkTQC
PENp6PWfc8xdpiAuubST7HPEisIPvp+xJK802UtGdlhWVuQzQUtZYw57PZG5h3a3
PRSrR5BsV6l3Y2+rml1trqryTZZffkHRhZanSvN4IX84a/3uvlnOF2fxHUcdxzWT
LXv2+SzXmnxMZyGWRZhiDl1Vo7Mvx5ivFWRIovNRy9vpsFFdGKaZ37D5lqP1WAZB
kP6n1ZcGqq/0MhIdXbTmgcbLk5xzSZZIzBT0coFHnp41JJ3/Q8irV/K3ACP/yEkU
Mv62vYhFH99nBqV8xOPqv7ULMvFPtrJh3cmfOQIDAQABo4IC9TCCAvEwHwYDVR0j
BBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYEFLMx1gNPufHjn9te
Go+76JzH7l/jMIGVBgNVHREEgY0wgYqCCHZhdXZhLmZpggoqLnZhdXZhLmZpgghw
ZXJoZS5maYIKKi5wZXJoZS5maYIOdmF1dmEtbGVodGkuZmmCECoudmF1dmEtbGVo
dGkuZmmCDGxhc3Rlbm9tYS5maYIOKi5sYXN0ZW5vbWEuZmmCDGFpaGV2YXBhYS5m
aYIOKi5haWhldmFwYWEuZmkwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgB
hv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0
cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRw
Oi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/
BAIwADCCAQIGCisGAQQB1nkCBAIEgfMEgfAA7gB0ALvZ37wfinG1k5Qjl6qSe0c4
V5UKq1LoGpCWZDaOHtGFAAABY8njfg4AAAQDAEUwQwIgD3p9E5I0Wq+4NHNhcqNr
JVG9rZwDm1cGaGmWo2LLeAMCH2YC5F28pIv5mJ/OaAqFamCljbeS15z3EnibgPZK
6zcAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWPJ435oAAAE
AwBHMEUCIFEJc+P0ngdFAYBL6r20DAsbPf2EQu2htXjDBOJQOcJCAiEAm2BqKTeK
gRowp7rm70kkEGIVvePqsCRHdybhA661At4wDQYJKoZIhvcNAQELBQADggEBABel
rEv70P3VGzIyJ2ygBWbCDZXTkwVWJ4Cfc1Zy0CT9ubeatg1QetFki+TAw/BdyfYl
CTpK1GTAcKaXeboNRJacka2VbRQjNXxbeRPOaU6IJqJWWjdn9wmqrIJasc883rmS
V71TEBGQVQ9HRvaEZt82VXBQR7Fq8dIEeBEARPzDLEcOvdkxt6aP2ZrGPSBXxFB5
dvazKefgU8sAsZHokJ7K9zM6tzI7N/BvDfybx724B/UoTPB1ZV9JHRR+t4Hoa1js
Pt1oB1bqIFIc8n3g5hKmHdC2OQJffr5GNbOunrlPaVFbDuTvU9xMj7xjS1Gr7Fvl
Fn1GR9wQI0fC00s2bSs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2R0EuaWFsEbCft+2JcnU
xYA5ox2TGZpN/QcQTRYrk1+MkTQCPENp6PWfc8xdpiAuubST7HPEisIPvp+xJK80
2UtGdlhWVuQzQUtZYw57PZG5h3a3PRSrR5BsV6l3Y2+rml1trqryTZZffkHRhZan
SvN4IX84a/3uvlnOF2fxHUcdxzWTLXv2+SzXmnxMZyGWRZhiDl1Vo7Mvx5ivFWRI
ovNRy9vpsFFdGKaZ37D5lqP1WAZBkP6n1ZcGqq/0MhIdXbTmgcbLk5xzSZZIzBT0
coFHnp41JJ3/Q8irV/K3ACP/yEkUMv62vYhFH99nBqV8xOPqv7ULMvFPtrJh3cmf
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17145870551054897073984930527979450576
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vauva.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27408021712470903993755466078671486662990407971742477620234231170140070242934655497759012661702218627640088221265624108433250041987507555014483003826687609279018816841947882386180923555675061963529840965844573365889204522400795932760404221208923256109327750922327394893498365932997685821368086303638664298823852993334667850204443390467417461095040486493842575489193130213229779732873838951707611065233574168428607687214997389105464924297407549294006220552995104481050551816780078328952150276910505554173654273207723693298855724303187855167456807685635219270530019986761000283775137676236495080037388156193379495550777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b331d6034fb9f1e39fdb5e1a8fbbe89cc7ee5fe3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (141 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vauva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vauva.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vauva-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vauva-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lastenoma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lastenoma.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aihevapaa.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aihevapaa.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007400bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163c9e37e0e000004030045304302200f7a7d1392345aafb834736172a36b2551bdad9c039b5706686996a362cb7803021f6602e45dbca48bf9989fce680a856a60a58db792d79cf712789b80f64aeb370076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163c9e37e6800000403004730450220510973e3f49e074501804beabdb40c0b1b3dfd8442eda1b578c304e25039c2420221009b606a29378a811a30a7bae6ef4924106215bde3eab024477726e103aeb502de
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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