meidanperhe.fi

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0f:15:29:ab:dc:8c:6c:56:17:2b:bb:bd:e6:a3:3a:9e was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=meidanperhe.fi

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:15:29:ab:dc:8c:6c:56:17:2b:bb:bd:e6:a3:3a:9e
Serial Number (int): 20048303365868972510557094636215810718
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fc:66:3a:4e:c8:00:d8:ee:ff:03:ff:5f:f3:aa:1f:fc:aa:60:db:64
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3c:71:6d:2d:b1:34:d2:d3:6c:83:eb:be:0d:92:0f:f0:c1:e6:20:37
Fingerprint (sha256): eb:db:41:47:77:24:b4:d6:c5:c1:38:6d:6a:fd:7b:e9:d3:d7:32:5b:cf:49:b9:94:98:ce:0e:ca:63:64:d5:77

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate meidanperhe.fi

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for meidanperhe.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

meidanperhe.fi
*.tiedeluonto.fi
sport-lehti.fi
*.menaiset.fi
*.meidanperhe.fi
menaiset.fi
*.sportlehti.fi
sportlehti.fi
tiedeluonto.fi
*.sport-lehti.fi
xn--meidnperhe-t5a.fi
*.perhe.fi
*.tiede.fi
perhe.fi
*.xn--meidnperhe-t5a.fi
tiede.fi

Other certificates including the domain name meidanperhe.fi

(limited to 100 certificates)
meidanperhe.fi
images.cdn.menaiset.fi
*.perhe.fi
meidanperhe.fi
images.cdn.menaiset.fi
www.meidanperhe.fi
www.meidanperhe.fi
meidanperhe.fi
meidanperhe.fi
*.perhe.fi
*.perhe.fi
meidanperhe.fi
meidanperhe.fi
images.cdn.menaiset.fi
meidanperhe.fi
images.cdn.menaiset.fi
images.cdn.menaiset.fi
images.cdn.menaiset.fi
meidanperhe.fi
www.meidanperhe.fi

Certificate

The complete raw certificate details for meidanperhe.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuzCCBaOgAwIBAgIQDxUpq9yMbFYXK7u95qM6njANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIyMTIwOTAwMDAwMFoXDTI0MDEwNzIzNTk1OVowGTEX
MBUGA1UEAxMObWVpZGFucGVyaGUuZmkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCwdpSnk1vJxjIyYx4OmnIHnnGqisxmEX+8+rc03+aLLEvdvTGmv53K
ck1f2CQOot1cFBFlHpJuSNzDjS/59EzDbh26DG74oX3YPTFZJ4PE5zHo11ofD4D2
X6MpqirXL5h3OV7/bsL1Xt0tCDJbPCskDJ4/AKeiN4hE0750jVJDXeWomSI96CoY
NzxG6Jj6Zro1ujSWyaJhOmb12qbmTqS8kea19xb5fv+CpEbVLSsoDC6z5dRQn/5r
neMJbMdseE228kJy5cuTnR7BiLWikMLWBcdDNDVmBAdgw6sHnKp3kpXTpZhMZa3j
V5zc8VwB3LrIhjvLACNTXblBAo61EYL3AgMBAAGjggPaMIID1jAfBgNVHSMEGDAW
gBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQU/GY6TsgA2O7/A/9f86of
/Kpg22QwggEKBgNVHREEggEBMIH+gg5tZWlkYW5wZXJoZS5maYIQKi50aWVkZWx1
b250by5maYIOc3BvcnQtbGVodGkuZmmCDSoubWVuYWlzZXQuZmmCECoubWVpZGFu
cGVyaGUuZmmCC21lbmFpc2V0LmZpgg8qLnNwb3J0bGVodGkuZmmCDXNwb3J0bGVo
dGkuZmmCDnRpZWRlbHVvbnRvLmZpghAqLnNwb3J0LWxlaHRpLmZpghV4bi0tbWVp
ZG5wZXJoZS10NWEuZmmCCioucGVyaGUuZmmCCioudGllZGUuZmmCCHBlcmhlLmZp
ghcqLnhuLS1tZWlkbnBlcmhlLXQ1YS5maYIIdGllZGUuZmkwDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnIybTAxLmFtYXpvbnRydXN0LmNvbS9yMm0wMS5jcmww
EwYDVR0gBAwwCjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzAB
hiFodHRwOi8vb2NzcC5yMm0wMS5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKG
Kmh0dHA6Ly9jcnQucjJtMDEuYW1hem9udHJ1c3QuY29tL3IybTAxLmNlcjAMBgNV
HRMBAf8EAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgB2/4g/Crb7lVHC
Ycz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYT19OFNAAAEAwBHMEUCIQCio8psSRuR
6RfpY4BGC4+XTJSLb9oKXjd3rYHzOiIsRwIgClI83VWcKFKkWPqTgmT70m21ytNi
dK2LmN71cVH1h7IAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAA
AYT19OFVAAAEAwBHMEUCIGKfwJY4lLclOY59fWOy+Q3Yj0n4mR9t9ftXN0SF9Wo7
AiEAxC0Vb5KIsUeOp/gjjHsj/sNV1MmftDST0xmwDk+dTakAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYT19OESAAAEAwBHMEUCIQDcF5vZWrFq
dxzgHp50sS2LaoThG01fsbAd0PQ4k5OtNwIgQFidTUArNbaKN+5q7QzxSyk8Ejro
SsDs4u0pXQ5B3KYwDQYJKoZIhvcNAQELBQADggEBAAWb5QaREHWij7Zh3YciVFrf
rK1Nm3HUTYOR6A0JdHQvcJrMU9uoj9QTXdIOM9z+K2ron8uNvo462IKQoeyxyuJP
CcLMK31F8U91ZmQroKT4T9EHDLnb/9auBPBrnBhiSEuch4RDGNOucHjIg+0Cbv8r
IcSqn650/tEslrgIRQctzqNSsTRt2LMRmZz6xwWWYW5aZOd+2fbaQhROiZ+2j4gi
BT+cwgqg+NWT/FW21XfkA5z0YX9QtYJIquLSsNCAuuW91U6zzPgwfnUgEOqKaJeW
jRgw7ETGcJRgvSLhvYyjQvBiSFSEEN/mqvX0+ZVGDi6StdFI4+8wehBbfuQXdko=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHaUp5NbycYyMmMeDppy
B55xqorMZhF/vPq3NN/miyxL3b0xpr+dynJNX9gkDqLdXBQRZR6Sbkjcw40v+fRM
w24dugxu+KF92D0xWSeDxOcx6NdaHw+A9l+jKaoq1y+Ydzle/27C9V7dLQgyWzwr
JAyePwCnojeIRNO+dI1SQ13lqJkiPegqGDc8RuiY+ma6Nbo0lsmiYTpm9dqm5k6k
vJHmtfcW+X7/gqRG1S0rKAwus+XUUJ/+a53jCWzHbHhNtvJCcuXLk50ewYi1opDC
1gXHQzQ1ZgQHYMOrB5yqd5KV06WYTGWt41ec3PFcAdy6yIY7ywAjU125QQKOtRGC
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20048303365868972510557094636215810718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meidanperhe.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22276415987688539806330494760880016297864556945622017075531903290950103984365768797724099220539292332632924962807348901260045844008317750671968048044428268057360792044811289038875162183382194891217887353739589480404570737318589252501888723429853801610315616811466606781956502515467744115730520485027094685294482532160251410797991556574864187092527148276202646353975042395752929511931928085776069163044716822386281064543324828652159160719817962151613862124350637846184280064765254685283880712401819365073074571626192725567799524609380478953859887060060515574430390923682255547430175212516755124019875376519746153448183
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fc663a4ec800d8eeff03ff5ff3aa1ffcaa60db64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (257 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meidanperhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiedeluonto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sport-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.menaiset.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.meidanperhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'menaiset.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sportlehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sportlehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiedeluonto.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sport-lehti.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xn--meidnperhe-t5a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tiede.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perhe.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.xn--meidnperhe-t5a.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tiede.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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