*.google.gy

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number fe:fc:d0:94:31:02:c4:5d:08:00:00:00:00:35:ec:79 was issued on by Google Trust Services.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fe:fc:d0:94:31:02:c4:5d:08:00:00:00:00:35:ec:79
Serial Number (int): 338936600219853130571366262942563953785
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f9:e1:f5:68:b0:0f:56:44:99:39:d5:e7:1b:d6:3e:c3:38:89:06:33
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): 58:c0:60:08:d4:70:a0:c4:94:d6:74:c3:8a:48:df:13:e5:9d:76:46
Fingerprint (sha256): 03:48:13:b8:5a:6c:f2:33:10:df:85:4e:da:08:d7:4c:8e:88:1f:5a:87:9c:1d:a3:f1:00:87:f3:0b:dc:6d:6d

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.google.gy

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.gy

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.gy
*.google.co.gy
*.google.com.gy
google.co.gy
google.com.gy
google.gy

Other certificates including the domain name google.gy

(limited to 100 certificates)
google.com
*.google.gy
google.com
google.com
google.com
*.googleapis.com
google.com
*.google.gy
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.gy
google.com
*.google.gy
*.google.gy
google.com
google.com
*.googleapis.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.googleapis.com
*.google.gy
google.com
google.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
google.com
google.com
google.com
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.googleapis.com
*.google.gy
google.com
google.com
google.com
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
*.googleapis.com
google.com
*.googleapis.com
*.googleapis.com
*.google.gy
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
google.com
google.com
google.com
*.google.gy
*.google.gy
google.com
*.google.gy
google.com
google.com
*.google.gy
google.com
google.com
google.com
*.google.gy
google.com
*.googleapis.com
*.googleapis.com
*.google.gy
*.google.gy
*.google.gy
google.com
*.google.gy
google.com
google.com
*.googleapis.com
google.com
google.com
google.com
google.com
google.com
*.google.gy
google.com
*.google.gy
*.google.gy

Certificate

The complete raw certificate details for *.google.gy in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFzzCCBLegAwIBAgIRAP780JQxAsRdCAAAAAA17HkwDQYJKoZIhvcNAQELBQAw
QjELMAkGA1UEBhMCVVMxHjAcBgNVBAoTFUdvb2dsZSBUcnVzdCBTZXJ2aWNlczET
MBEGA1UEAxMKR1RTIENBIDFPMTAeFw0yMDAzMjQwNjM5MDBaFw0yMDA2MTYwNjM5
MDBaMGUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpDYWxpZm9ybmlhMRYwFAYDVQQH
Ew1Nb3VudGFpbiBWaWV3MRMwEQYDVQQKEwpHb29nbGUgTExDMRQwEgYDVQQDDAsq
Lmdvb2dsZS5neTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJwOJ6L9
KGnBRlIoguzgD2RzDBMgS7X+kkpIYkBWZSaHl2RMf0ngqJGWbLfPif4JJ0rHaR9e
rNl2UHaCVVVZw2im4cXZLyzFl0o7eFZ7e0xiianwypXSdC67/OIOsIXK24ees/4E
l9x8tcBfg7YvvY2DHleRDTexJ7pgTDu7fG1j3lqZL+/z1ZtfwcR9T9KrwX8ji3r8
1h6MEyBLCYMxn8tlkdjAacijYG5AMRm6O+lkci4NVe13nlDkTMZn1+fAZ1XbEYZu
RdzcjpvNhUSFqzaKoXU8hMG7gAEau6em2eGzDwNLeIOgvKzzzypPigO5wulvPMM2
0PC+1y7tTnFL0ZkCAwEAAaOCApswggKXMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUE
DDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBT54fVosA9WRJk5
1ecb1j7DOIkGMzAfBgNVHSMEGDAWgBSY0fhuEOvPm+xgnxiQG6DrfQn9KzBkBggr
BgEFBQcBAQRYMFYwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0
czFvMTArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nL2dzcjIvR1RTMU8xLmNy
dDBfBgNVHREEWDBWggsqLmdvb2dsZS5neYIOKi5nb29nbGUuY28uZ3mCDyouZ29v
Z2xlLmNvbS5neYIMZ29vZ2xlLmNvLmd5gg1nb29nbGUuY29tLmd5gglnb29nbGUu
Z3kwIQYDVR0gBBowGDAIBgZngQwBAgIwDAYKKwYBBAHWeQIFAzAvBgNVHR8EKDAm
MCSgIqAghh5odHRwOi8vY3JsLnBraS5nb29nL0dUUzFPMS5jcmwwggEFBgorBgEE
AdZ5AgQCBIH2BIHzAPEAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQ
XgAAAXELevx7AAAEAwBIMEYCIQCZpsajF/EBEjiztALGt5A84mSU5J+91q0BguTF
o9kSXwIhAPIwatQGHVNXBmhZFbRiud5yYI+dzs1p5VjeC6mulraaAHYAXqdz+d9W
wOe1Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFxC3r8swAABAMARzBFAiEAnhzt
XqtuuKFtJdUbrzx1PMb6GDP/sWwTKAzj3c0Y1tYCIFudgDjOQzK/Qdu4yVdcswCp
ka3X36AvvMOPoCEhszhpMA0GCSqGSIb3DQEBCwUAA4IBAQBIDNKWXh4gaE1Yp6px
HfuIBasWVkWSzpYXRFTB7iO7JlPhRPCQ7rAe7v7WZhhmBByhLILsoESFRt9wYivC
a4D/aJSIjjtYsoxiUG5n0MZ2zcaoKUfWLJVVFGKZChmpnx1t6lihNqWvTInX9zjn
T2vYKiwF/q7p+7YgNXP+pgOzUjqeDykxX0o320pA1Lh1yX2ksQT/5FtaTo7HWdr/
O0IJr3iIWUY8YB6YjTXFoqfjr+B4CZ874T53AfijG954ONbfzdY7cRKHim5Wb0Ho
cBn5mM/TSLeTCXnqA/uxYU6TpKnZR+rD7Tf6CBDIvZ/UuUkmKDapLP2T2juQnDq/
od0b
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA4nov0oacFGUiiC7OAP
ZHMMEyBLtf6SSkhiQFZlJoeXZEx/SeCokZZst8+J/gknSsdpH16s2XZQdoJVVVnD
aKbhxdkvLMWXSjt4Vnt7TGKJqfDKldJ0Lrv84g6whcrbh56z/gSX3Hy1wF+Dti+9
jYMeV5ENN7EnumBMO7t8bWPeWpkv7/PVm1/BxH1P0qvBfyOLevzWHowTIEsJgzGf
y2WR2MBpyKNgbkAxGbo76WRyLg1V7XeeUORMxmfX58BnVdsRhm5F3NyOm82FRIWr
NoqhdTyEwbuAARq7p6bZ4bMPA0t4g6C8rPPPKk+KA7nC6W88wzbQ8L7XLu1OcUvR
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338936600219853130571366262942563953785
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 06:39:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 06:39:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.gy'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19700155581902916122359675717728316805270103362767224507134490104174666338002840122566189989465687091599481196865807958139543127430596777685992696927965347246165268377391255941977440074518246695669763600464692559585330931789573997916019676265275588093098692005101556016318349858696084788864956189429296013892267934817363567880561369283075707383100644854711701986837684667121220851549870580375994098057925248054993454540092237703407180617072804843800771811039261875443968669481037973540594607283507408271171379430072785104216882763227679035405386362559116159948092536520424590026657411173566253684438892155086035472793
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f9e1f568b00f56449939d5e71bd63ec338890633
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.co.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.co.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.gy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.gy'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001710b7afc7b000004030048304602210099a6c6a317f1011238b3b402c6b7903ce26494e49fbdd6ad0182e4c5a3d9125f022100f2306ad4061d535706685915b462b9de72608f9dcecd69e558de0ba9ae96b69a0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001710b7afcb300000403004730450221009e1ced5eab6eb8a16d25d51baf3c753cc6fa1833ffb16c13280ce3ddcd18d6d602205b9d8038ce4332bf41dbb8c9575cb300a991add7dfa02fbcc38fa02121b33869
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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