dcs.atmosphere.tv
Issued by Amazon RSA 2048 M01
About this certificate
This digital certificate with serial number 0d:01:3e:b4:14:95:b6:cd:0a:aa:86:29:2e:60:b1:ca was issued on by Amazon.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=dcs.atmosphere.tv
Amazon
Organization:
Amazon
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 0d:01:3e:b4:14:95:b6:cd:0a:aa:86:29:2e:60:b1:caSerial Number (int): 17286428018897813543125546552728269258
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fc:48:bf:7f:03:15:5d:8f:6a:49:fd:b6:f1:44:ea:ed:3d:0f:7c:e0
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85
Fingerprint (sha1): c2:e4:2f:2b:78:f0:ba:51:4e:f2:35:15:bd:1f:e9:a2:7f:ce:b2:67
Fingerprint (sha256): dc:ba:39:55:25:c0:12:87:8d:eb:2a:29:17:dd:69:90:30:7e:9d:c1:9a:40:ef:57:91:74:ec:a3:6b:f3:b3:fe
Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer
Revocation information
OCSP Server: http://ocsp.r2m01.amazontrust.comCRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl
Check the revocation status for certificate dcs.atmosphere.tv
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for dcs.atmosphere.tv
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
dcs.atmosphere.tv
*.dcs.atmosphere.tv
*.dcs.atmosphere.tv
Other certificates including the domain name atmosphere.tv
(limited to 100 certificates)
atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
image.e.atmosphere.tv
blog.atmosphere.tv
*.interact.atmosphere.tv
promotions.cdn.atmosphere.tv
*.interact.atmosphere.tv
image.e.atmosphere.tv
*.www.atmosphere.tv
*.internal.atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
analytics-in-api.atmosphere.tv
marketing.atmosphere.tv
help.thechivery.com
promotions.cdn.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
atmosphere.tv
help.thechivery.com
sls-qa.mobilenxt.app
ww.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
promotions.cdn.atmosphere.tv
help.thechivery.com
*.atmosphere.tv
*.atmosphere.tv
atmosphere.tv
email.axioshq.atmosphere.tv
cargillpresentations.cargill.com
ww.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
help.thechivery.com
marketing.atmosphere.tv
help.thechivery.com
atmosphere.tv
analytics-in-api.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
www.wgslabs.com
genetron.o4s.io
image.e.atmosphere.tv
*.interact.atmosphere.tv
*.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
image.e.atmosphere.tv
stage-ad-proxy-api.atmosphere.tv
mntz.atmosphere.tv
atmoshere.tv
san-2-s12.tlsprovisioning.exacttarget.com
immobilier-responsable.civitimeapp.com
image.e.atmosphere.tv
dcs.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
mntz.atmosphere.tv
*.dcs.atmosphere.tv
vecindiario.org
blog.ade-sede.com
analytics-in-api.atmosphere.tv
*.interact.atmosphere.tv
help.thechivery.com
atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
marketing.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
marketing.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
image.e.atmosphere.tv
blog.atmosphere.tv
*.interact.atmosphere.tv
promotions.cdn.atmosphere.tv
*.interact.atmosphere.tv
image.e.atmosphere.tv
*.www.atmosphere.tv
*.internal.atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
analytics-in-api.atmosphere.tv
marketing.atmosphere.tv
help.thechivery.com
promotions.cdn.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
atmosphere.tv
help.thechivery.com
sls-qa.mobilenxt.app
ww.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
promotions.cdn.atmosphere.tv
help.thechivery.com
*.atmosphere.tv
*.atmosphere.tv
atmosphere.tv
email.axioshq.atmosphere.tv
cargillpresentations.cargill.com
ww.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
help.thechivery.com
marketing.atmosphere.tv
help.thechivery.com
atmosphere.tv
analytics-in-api.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
www.wgslabs.com
genetron.o4s.io
image.e.atmosphere.tv
*.interact.atmosphere.tv
*.atmosphere.tv
image.e.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
help.thechivery.com
image.e.atmosphere.tv
stage-ad-proxy-api.atmosphere.tv
mntz.atmosphere.tv
atmoshere.tv
san-2-s12.tlsprovisioning.exacttarget.com
immobilier-responsable.civitimeapp.com
image.e.atmosphere.tv
dcs.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
mntz.atmosphere.tv
*.dcs.atmosphere.tv
vecindiario.org
blog.ade-sede.com
analytics-in-api.atmosphere.tv
*.interact.atmosphere.tv
help.thechivery.com
atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
marketing.atmosphere.tv
atmosphere.tv
image.e.atmosphere.tv
marketing.atmosphere.tv
san-2-s12.tlsprovisioning.exacttarget.com
atmosphere.tv
Certificate
The complete raw certificate details for dcs.atmosphere.tv in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF4TCCBMmgAwIBAgIQDQE+tBSVts0KqoYpLmCxyjANBgkqhkiG9w0BAQsFADA8 MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g UlNBIDIwNDggTTAxMB4XDTIzMDcyNjAwMDAwMFoXDTI0MDgyNDIzNTk1OVowHDEa MBgGA1UEAxMRZGNzLmF0bW9zcGhlcmUudHYwggEiMA0GCSqGSIb3DQEBAQUAA4IB DwAwggEKAoIBAQCWE4Pogh7knIduGGDUPvzt3G7mXnMYA+sq0tr35AQnCSNZ/PEV SuNI0HlN/chZY9AjUXTt86qm0p8QcHJV/TfeF1ALTLCgXdxohOi2NkJlKXd5KG8r jrGZ3jjhA86EvqlnHzZ+vq4bpOLWkZtnibhn5QSASPsmoud/svYjBVmnDVNCQlW1 6hG1Ky66+d5A5s7Rxfe9XyN4OaqjDnzD+tL9i+Jd6NBWMAI8X/Er325q3bpifnNf wkRGJ/b21pmpuCKm7mSm1j7lui6EnANld7oVu0DrW0L5FK5ixcPc1v5t7YEssruC TMDqxr/0tPSN6YUWuYqLlxKd9f+sBhIsW101AgMBAAGjggL9MIIC+TAfBgNVHSME GDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQU/Ei/fwMVXY9qSf22 8UTq7T0PfOAwMQYDVR0RBCowKIIRZGNzLmF0bW9zcGhlcmUudHaCEyouZGNzLmF0 bW9zcGhlcmUudHYwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMB BggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnIybTAxLmFt YXpvbnRydXN0LmNvbS9yMm0wMS5jcmwwEwYDVR0gBAwwCjAIBgZngQwBAgEwdQYI KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6 b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQucjJtMDEuYW1hem9u dHJ1c3QuY29tL3IybTAxLmNlcjAMBgNVHRMBAf8EAjAAMIIBfAYKKwYBBAHWeQIE AgSCAWwEggFoAWYAdQDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA AYmQHrbLAAAEAwBGMEQCIBN9fUPcitSKVrUNdbVDiU07lJUiTqtLxlxpsXWoBuDy AiAhJzVzFHHtrHgbaiI6qQfUQ+Cy5v9kmwW0JYEy03544QB1AEiw42vapkc0D+Vq AvqdMOscUgHLVt0sgdm7v6s52IRzAAABiZAetmUAAAQDAEYwRAIgXm3gTcIuxg1k lY0rVZMO3zEfHT6jqO4/S4x+jOkGfW4CIG5uXi1Xwh9sS3+Mie6FO7dzUDotVubc sApZFqeZkI5NAHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGJ kB62PgAABAMARzBFAiBx1n7QQsU0xmQ3o2Yqvf5XagpotyJjApISMv1ZaihyBgIh AJwaUHBNvt2iTsY48vcJm5rYDLJH3rVJCyqukPD1T6r6MA0GCSqGSIb3DQEBCwUA A4IBAQAXvpxKORfE+5dkqiP9IhtoBDIgkiRyQhGNPGXYyyoLRUHoChASgJCN6Ess Wd3Lw/VtY2GTpc+VCzFayJ0tRMiTBvrpcY4PH/3bwri74rsKqrvrUyldgIhDhrxX xKSu0agmC9XfnqonvPnYe6XYZ8XUvvYtJJ6DCSPjTKnUcjsuoWpxnSsJe5ATPKwM EXyg4VStlkve00M9LBX+QBVOMELBNdcy9BJhUhVZl7wReyPOZDtHjQqV1XLyDr26 yMZEfqXYmPme4YqEPs8E83GG/3ZpLuIM9GPMHoW0pT3zxviDlsK1PQj9+Mlvp+PO d/EarFPlHjXOQgWoME4h++FXdE0r -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhOD6IIe5JyHbhhg1D78 7dxu5l5zGAPrKtLa9+QEJwkjWfzxFUrjSNB5Tf3IWWPQI1F07fOqptKfEHByVf03 3hdQC0ywoF3caITotjZCZSl3eShvK46xmd444QPOhL6pZx82fr6uG6Ti1pGbZ4m4 Z+UEgEj7JqLnf7L2IwVZpw1TQkJVteoRtSsuuvneQObO0cX3vV8jeDmqow58w/rS /YviXejQVjACPF/xK99uat26Yn5zX8JERif29taZqbgipu5kptY+5bouhJwDZXe6 FbtA61tC+RSuYsXD3Nb+be2BLLK7gkzA6sa/9LT0jemFFrmKi5cSnfX/rAYSLFtd NQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17286428018897813543125546552728269258 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-24 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcs.atmosphere.tv' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18945369081508730261808277772701297242072393498638450604828550878806029650489667465003714909388208575713456978275311174315079570292308643032969729232250511768744799466834454050477599717336191601755741892662869370097797851406637084112201231193060780796501956914896435341042938035227957191448558678464115562514118530668617391967017594962231377047731346906801053512850841149237757449674584389129510935141508017715623281400064042259168660453050953319298606639814493374273677857473891215971537268753747168413873024350533833329484601125563710667746584273453617523270417695478373460987912122139679145154368648550444097559861 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fc48bf7f03155d8f6a49fdb6f144eaed3d0f7ce0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcs.atmosphere.tv' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dcs.atmosphere.tv' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0017be9c4a3917c4fb9764aa23fd221b6804322092247242118d3c65d8cb2a0b4541e80a101280908de84b2c59ddcbc3f56d636193a5cf950b315ac89d2d44c89306fae9718e0f1ffddbc2b8bbe2bb0aaabbeb53295d80884386bc57c4a4aed1a8260bd5df9eaa27bcf9d87ba5d867c5d4bef62d249e830923e34ca9d4723b2ea16a719d2b097b90133cac0c117ca0e154ad964bded3433d2c15fe40154e3042c135d732f4126152155997bc117b23ce643b478d0a95d572f20ebdbac8c6447ea5d898f99ee18a843ecf04f37186ff76692ee20cf463cc1e85b4a53df3c6f88396c2b53d08fdf8c96fa7e3ce77f11aac53e51e35ce4205a8304e21fbe157744d2b