11851.discos.orbis.tomtom.com

- TomTom International B.V. -

Issued by HydrantID Server CA O1

About this certificate

This digital certificate with serial number 40:01:8f:03:19:a4:97:7f:62:74:87:d1:2f:c7:9b:f1 was issued on by IdenTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

TomTom International B.V.

Organization: TomTom International B.V.
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

IdenTrust

Organization: IdenTrust
Organization unit: HydrantID Trusted Certificate Service
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 40:01:8f:03:19:a4:97:7f:62:74:87:d1:2f:c7:9b:f1
Serial Number (int): 85078684657287064932256100817683586033
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 85:61:82:e4:47:d6:f0:fd:1b:52:8a:62:40:71:a9:13:8c:7d:6b:5d
AuthorityKeyId: 89:b8:9b:b6:9e:ed:fb:b0:c6:bd:0d:ec:67:4e:3c:a3:92:9d:2d:f9

Fingerprint (sha1): 46:17:04:08:5a:d6:15:be:cd:be:ae:98:83:81:27:cc:a6:ee:f3:ed
Fingerprint (sha256): 00:be:6d:f9:cb:49:d8:41:0c:df:4d:09:2b:ec:2f:95:d3:01:a7:86:aa:70:49:36:a4:16:14:c2:9b:df:7b:1a

Issuing Certificate URL: http://validation.identrust.com/certs/hydrantidcaO1.p7c

Revocation information

OCSP Server: http://commercial.ocsp.identrust.com
CRL Distribution Point: http://validation.identrust.com/crl/hydrantidcao1.crl

Check the revocation status for certificate 11851.discos.orbis.tomtom.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for 11851.discos.orbis.tomtom.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

11851.discos.orbis.tomtom.com
state-reader-20324.11851.discos.orbis.tomtom.com

Other certificates including the domain name tomtom.com

(limited to 100 certificates)
wadetrim.trubytraining.com
22773.discos.orbis.tomtom.com
tracker.engage.tomtom.com
ind06pr-890.maps-pu-poi.tomtom.com
s1.i.maverick.mep.tomtom.com
*.fcd-ingest.tomtom.com
atom-ws.27373.orbis.tomtom.com
*.tomtom.com
brandguide.tomtom.com
connect-us.tomtom.com
kenai-mod-11943-similar-jobs.preprod.marketing-az.tomtom.com
kenai-master.preprod.marketing-az.tomtom.com
11851.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
reportswithmaps.eu-west-1.maps-central.tomtom.com
fleetsecure.telematics.tomtom.com
6.discos.orbis.tomtom.com
airflow.inc-conf.prod.maps-amf.tomtom.com
bhsa.mysportsanalysis.com
28200.discos.orbis.tomtom.com
backend.pr-44.aqua.poi-dev.orbis.tomtom.com
ns-gss-wfs.inc-conf.dev.maps-amf.tomtom.com
usa06pr-843.maps-pu-poi.tomtom.com
matter-ws.22068.orbis.tomtom.com
fra2409test90-907.maps-pu-poi.tomtom.com
dev.mapexplorer.tomtom.com
atom-ws.67299.orbis.tomtom.com
academy.tomtom.com
atom-ws.20735.orbis.tomtom.com
*.tomtom.com
argo-discos.13999.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
cert00017-azurecdn.akamaized.net
kepler.ts.tomtom.com
mcodnkevtest-901.maps-pu-poi.tomtom.com
alertmanager.test-jk.connected-services.tomtom.com
preprod-vag-hcp3.acs.services.tomtom.com
caesgbitnosw06-844.maps-pu-poi.tomtom.com
wadetrim.trubytraining.com
*.navcloud.tomtom.com
farmviability.oahurcd.org
cert00017-azurecdn.akamaized.net
*.discovery.speech.tomtom.com
aqua-viewer.pr-58.aqua.poi-dev.orbis.tomtom.com
*.fcd-ingest.tomtom.com
alertmanager.prod-blue.connected-services.tomtom.com
api.roadcheck-dev.tomtom.com
backend.pr-47.aqua.poi-dev.orbis.tomtom.com
minerva-rest-api.test-chha.connected-services.tomtom.com
btsqas.tomtom.com
7.discos.orbis.tomtom.com
15408.discos.orbis.tomtom.com
backend.pr-46.aqua.poi-dev.orbis.tomtom.com
kenai-develop.preprod.marketing-az.tomtom.com
cert00017-azurecdn.akamaized.net
vertex.mep.tomtom.com
cert00017-azurecdn.akamaized.net
matter-ws.26195.orbis.tomtom.com
*.fcd-ingest.tomtom.com
*.adas-tile-service.mapcontent-dev.tomtom.com
kenai-mdev-1967-indigo-borders.preprod.marketing-az.tomtom.com
goldstream-develop.prod.marketing-az.tomtom.com
reportswithmaps.maps-central.tomtom.com
aqua-sampler-backend.released.aqua.poi-dev.orbis.tomtom.com
alertmanager.7777.discos-v2.orbis.tomtom.com
22867.discos.orbis.tomtom.com
fra06pr-883.maps-pu-poi.tomtom.com
matter-ws.11100.orbis.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
16770.discos-dev.orbis.tomtom.com
preprod-famar-ams.services.tomtom.com
feature-history.mep.tomtom.com
19680.discos.orbis.tomtom.com
ind06pr-889.maps-pu-poi.tomtom.com
brcachsg06pr-833.maps-pu-poi.tomtom.com
6.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
aqua-sampler-backend.pr-11.aqua.poi-dev.orbis.tomtom.com
kafka-bootstrap.prod-green.connected-services.tomtom.com
cpt.cs.tomtom.com
minerva-rest-api.test-lo.connected-services.tomtom.com
matter-ws.54879.orbis.tomtom.com
atom-ws.16233.orbis.tomtom.com
mock.preprod-ams.tomtom.com
22428.discos.orbis.tomtom.com
*.mapcontent-dev.tomtom.com
grafana.12772.discos-v2.orbis.tomtom.com
abddnktestev15-891.maps-pu-poi.tomtom.com
adas-tile-compiler-fca.mapcontent-dev.tomtom.com
preprod-fca-gsdp-sxm.services.tomtom.com
mep.tomtom.com
cert00017-azurecdn.akamaized.net
akamai-san18.exacttarget.com
api-blue.dev.horizon.tomtom.com
backend.pr-1.aqua.poi-dev.orbis.tomtom.com
preprod-kr-vag-hcp3.acs.services.tomtom.com
26587.discos.orbis.tomtom.com
cert00017-azurecdn.akamaized.net
atom-ws.16807.orbis.tomtom.com
17957.discos.orbis.tomtom.com

Certificate

The complete raw certificate details for 11851.discos.orbis.tomtom.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0vS27zO0Sli9Y2g56mB+
8qlgcj9exNiMmn76RhWR59z8Vilsh0WDeRctMdqy5xqYVFBwLbmqspZMu4RRAq0D
mkeDFUgk4wvan9K7s7/Aht1tjmNy/75c2tD9FMFNAXseZDDhyOrNQod6pGtcdSeV
Rwby9B4KzOhbpIOoquayE2t0H86aayr9hUWZckc5XcTEn6IzWc4fJ2kAzJkAcvJH
JwDqv49IdUgi5E/uNuBGEceAzpXssOD6i/4FaeAoqZblYQmzqhkB8wVUOktPsur8
kUc14bZ4yGCOzJJ8KJCM2MaQjJ0zhg9cknSwPaGVlXOtJN5mgsnua23ofW9xanBc
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 85078684657287064932256100817683586033
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IdenTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Trusted Certificate Service'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID Server CA O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 23:59:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-28 23:58:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TomTom International B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '11851.discos.orbis.tomtom.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26630717303489242403417418307878383940060835258682247650051641965804102865150199773561338129883457759743485876590804707634101645742063129327691212204634893651733070254565291651787151931870347761629223212772410304880373749956629231689012357974518194390140621579814759652910636213677668057305395089364848771550492239247273182967636801248392830035897217473295184688098264592008058685836068830118546056356722590484599644594269190281000443158854179602542109104962328850241532427878936911781621464341488425395506063369334645030747791289029625607787466553817005821910030000824132550117866585850019194429917179025202034531341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://commercial.ocsp.identrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/certs/hydrantidcaO1.p7c'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 89b89bb69eedfbb0c6bd0dec674e3ca3929d2df9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113839.0.6.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://validation.identrust.com/crl/hydrantidcao1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '11851.discos.orbis.tomtom.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'state-reader-20324.11851.discos.orbis.tomtom.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							856182e447d6f0fd1b528a624071a9138c7d6b5d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							016600750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f0319a51c000004030046304402207783673eeee7ead9027485115bb273db11c483b0a412e97fd3af139e6627ffe502207815693d5cb0629f9d939f0623d772dcd33830578e3fd2cb8023075f28465584007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f0319a5080000040300473045022034a0cbe1605a96a0d4d37003b68fe0f91996d36a22d16070f895c3acc189e0e30221009746e05551b2f63514cd050a459884367799b752e402084a99f55cc379d462e500750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f0319a51e000004030046304402201ecdf40258941efd5cb82b0c2576f0157bf5c32fd708fe8247f241f61f79be2d02206dbe99a69610dfa535f5575c00cad07da5113d600de716eda618f14f49156a04
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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