perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com

- Salesforce, Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0c:f2:a4:4e:ae:9f:a7:27:0b:e7:9e:be:53:11:31:2b was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Salesforce, Inc.

Organization: Salesforce, Inc.
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:f2:a4:4e:ae:9f:a7:27:0b:e7:9e:be:53:11:31:2b
Serial Number (int): 17210604338199494017234179377299796267
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:4c:d4:8b:ff:26:9f:0a:a8:fe:42:24:6c:b5:72:ae:4b:a5:d3:82
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 3d:21:bb:75:a6:a1:c1:0d:3d:ac:ac:73:70:a1:53:83:02:cb:d7:99
Fingerprint (sha256): 00:fd:25:5c:00:c3:5f:3c:24:9d:66:f1:65:92:74:11:20:8b:83:97:ad:ad:09:3f:ef:be:52:18:8a:2d:d3:24

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com
sdb9.perf1w.pc-rnd.pc-aws.salesforce.com
*.perf1w.my.pc-rnd.salesforce.com

Other certificates including the domain name force.com

(limited to 100 certificates)
*.cs109.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
sfdc-58ktaz.sandbox.vf.force.com
*.cs54.force.com
*.cs73.force.com
*.cs55.force.com
*.na151.force.com
*.cs3.force.com
*.na202.force.com
usa450.lightning.sfdc-lywfpd.force.com
*.cs18.force.com
*.cs54.force.com
*.na2.force.com
*.na85.force.com
test1-uswest2.sdb31.test8.s.pc-rnd.pc-aws.force.com
performance-us-01.scrt.sfdc.sh
embedded.demo.pardot.force.com
*.eu27.force.com
*.na12.force.com
viv3.force.com
*.na242.force.com
perf1-useast2.sdb25.perf2m.s.pc-rnd.pc-aws.force.com
*.cs30.force.com
*.na127.force.com
*.cs81.force.com
*.na14.force.com
sdb1.test1-uswest2.visual.fit1.pc-rnd.pc-aws.force.com
perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com
performance-us-02.scrt.sfdc.sh
*.na64.force.com
*.cs57.force.com
*.cs34.force.com
*.na72.force.com
salesforce.com
lo2.my.lightning-container.com
*.ap0.force.com
*.na36.force.com
*.cs81.force.com
*.na36.force.com
*.na107.force.com
*.na86.force.com
mobile1.t.force.com
*.eu46.force.com
*.cs4.force.com
*.na34.force.com
*.cs15.force.com
*.na152.force.com
*.cs15.force.com
*.cs173.force.com
*.eu25.force.com
*.na18.force.com
*.na74.force.com
*.na38.force.com
*.na137.force.com
*.na1.force.com
iad.my.lightning-container.com
*.na35.force.com
*.cs25.force.com
*.cs125.force.com
dev1-uswest2.hmr2.falcondevtip.c.pc-rnd.pc-aws.force.com
*.cs67.force.com
can8s.visual.sfdc-58ktaz.force.com
*.na121.force.com
*.na15.force.com
aus24s.lightning.sfdc-vwfla6.force.com
*.ap15.force.com
sec-b2b.my.salesforce.com
sfdc-vwfla6.lightning.force.com
*.eu26.force.com
ia7.file.force.com
sec-b2b.my.salesforce.com
*.cs344.force.com
*.na36.force.com
aus5.sfdc-vwfla6.force.com
*.ap5.force.com
*.eu28.force.com
ora2s.dev1-uswest2.content.dev1.pc-rnd.pc-aws.force.com
*.cs312.force.com
*.na38.force.com
usa358.sfdc-yfeipo.force.com
na44-blitz02.soma.salesforce.com
*.na208.force.com
*.na12.force.com
perf1-useast2.perf2o.ld.pc-rnd.pc-aws.force.com
*.ap123456.force.com
*.na76.force.com
*.eu15.force.com
test1-uswest2.sdb17s.test2.s.pc-rnd.pc-aws.force.com
*.ap56.force.com
*.na215.force.com
*.cs57.force.com
*.cs224.force.com
sfdc-lywfpd.secure.force.com
*.ap5.force.com
salesforce.com
viv2.force.com
sfdc-yfeipo.force.com
*.cs77.force.com
*.na36.force.com
*.eu30.force.com

Certificate

The complete raw certificate details for perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17210604338199494017234179377299796267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salesforce, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 846010383813290059189729135573286832142316088207438838592286782011197583481468740663581718488343701981107042847087708515444960396706596953973974912181548345428532582509702633752988316475081646923930004285065536842382069255484547221761141748248617006300409443821233378794247061691855809134760353008213410820324804672889757343534458180081809348140025529751506663749970870730543738973967017562034040603797744833974213199310904074019758861071531901318562368755686137115378387802207428408478051857612061850149433393432011555052839267168888189324198411942590587598910057988304435939161404910050175249991496074748444865510093027059148317179744650194952494254765986907124424007715455014436116566420975875014909442072544400974142335702168085078141784728224701964667311083290860840798155640325255977220878342154026755781130953192957557094421640815113146543706637863949681543559908838341194324374490738465822898395422352376056274747173149778539493379403121374427847625434872086276224493567004495225521344835412485827435200917677728392840406103226940844173454090039346740518534091518000613875288694807031032265099845728365603796528293166168472978793709878842949957978002129232577140601695663712950959036219314296794974364996457913964564967976219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							584cd48bff269f0aa8fe42246cb572ae4ba5d382
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'perf1-useast2.sdb9.perf1w.s.pc-rnd.pc-aws.force.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdb9.perf1w.pc-rnd.pc-aws.salesforce.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.perf1w.my.pc-rnd.salesforce.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							01660076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018fb76e1b350000040300473045022067854d8180aff5bbc552588a979fdf7cb23ec5e962b109fb6938c2c2d6a782ad022100cf6d820b5d9198730e2627294192b14ca78f6758c5afb6ef148b1d131faa99300075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018fb76e1b35000004030046304402204a58602a631fd7ec26bbaeee862cd0fb40a233ae893774e8f13ff5eed3abf09302206c1925b79929b6c7c47e548713c859361899b65d372d41f5774b3af77e72d90b007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018fb76e1b490000040300463044022044df0e1f41a75c6f314777fd3ec67d4affa153204805cca3584644eb200a924e02206e1d432c2995bec16cb948ca59e82e47b5273ddfb57113bfdf020b3061f40133
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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