origin.softwaredownloads.sap.com

- SAP SE -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:95:2b:7e:4b:59:68:ba:a9:c8:dc:71:54:22:ad:7c was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SAP SE

Organization: SAP SE
State / Province: Baden-Württemberg
Locality: Walldorf
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:95:2b:7e:4b:59:68:ba:a9:c8:dc:71:54:22:ad:7c
Serial Number (int): 15396042335236662441717157205519805820
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 99:cc:ef:93:93:55:7e:90:a5:c6:6f:5b:2d:cb:40:04:76:7f:58:2c
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 90:98:ec:3e:88:93:ef:af:15:bf:23:a0:99:df:10:d6:8b:b2:33:de
Fingerprint (sha256): 05:00:8c:5d:76:e0:c7:c8:ac:26:96:fa:e0:04:ab:a8:5b:c9:c9:f0:ad:9b:00:87:fe:9c:b9:3f:cc:67:f5:dc

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate origin.softwaredownloads.sap.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin.softwaredownloads.sap.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin.softwaredownloads.sap.com
softwaredownloads.sap.com
origin-az.softwaredownloads.sap.com
notesdownloads.sap.com
notesdownloads-az.sap.com
cert.softwaredownloads.sap.com
cert.notesdownloads.sap.com
origin.notesdownloads.sap.com

Other certificates including the domain name sap.com

(limited to 100 certificates)
iccsrm.sap.com
news.sap.com
service.education.sap.com
community.sap.com
connectdasg.sap.com
solutionexplorer-test.sap.com
access.co.sap.com
forums.sdn.sap.com
statuspage.io
lync.co.sap.com
service.sap.com
*.dm.ux.sap.com
experience.sap.com
liveaccess.sap.com
cloudportal.sap.com
rapid.sap.com
mna-onboard.sap.com
keycodepartner.sap.com
influence400.sap.com
applications2.sap.com
support.api.community-qa.sap.com
people-qa.sap.com
spotlight.sap.com
lync.co.sap.com
smpdlus.sap.com
alerts.nmppenergy.org
*.sapevents.sap.com
boardroom-demo.sap.com
*.services.sap.com
servicesdev.tdc.sap.com
store.sap.com
ga.support.sap.com
sapappcenter.com
apps.support.sap.com
akamaisecure.qualtrics.com
swdcdownloads.sap.com
activities.sap.com
scn-qa.sap.com
int.preprod-resolve.sap.com
fqa.b2b.sap.com
tradeworld.sap.com
leadhub.sap.com
status.melodydns.com
irpstatus.streamlineit.ca
connect.sap.com
status.activtrak.com
billview.sap.com
sqlanywhere-forum.sap.com
akamaisecure6.qualtrics.com
secure04.stage.lithium.com
relayserver.sap.com
hana.sap.com
socialsignin.sap.com
almsummit.go10.events.sap.com
dev-eddl.cdi.services.sap.com
impactstatus.validic.com
solutionexplorer-test.sap.com
impactstatus.validic.com
alpha-status.iole2e.iolportal.com
dlgce.sap.com
qas.b2b.sap.com
statuspage.io
statuspage.io
sdn.sap.com
statuspage.io
activities-stag.sap.com
secure04.stage.lithium.com
cw400.sdn.sap.com
www.sap.com
connectda.sap.com
cx.sap.com
www.experience.sap.com
people-stag.sap.com
statuspage.io
consolidation.community.sap.com
servicedesk-dev.sap.com
influence400.sap.com
estado.medios.com.ar
preview.api.community-qa.sap.com
people-stag.sap.com
open.sap.com
blogs-qa.sap.com
www.sme.sap.com
applications1.sap.com
servicedesk.sap.com
boardroom-demo.sap.com
origin.softwaredownloads.sap.com
estado.medios.com.ar
store.sap.com
uc16.janrainengage.com
akamaisecure7.qualtrics.com
training.sap.com
impactstatus.validic.com
blogs.sap.com
sqlanywhere-forum.sap.com
me.sap.com
events.sap.com
itc.sap.com
statuspage.io
mywtsmobilephl.sap.com

Certificate

The complete raw certificate details for origin.softwaredownloads.sap.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAua7VR9Tp90Lj5vRTmP6L
nXGI356etlfj3K7Yr8tgEeub0bSfoNU0ySiWFBtkuG4VOfDOAZp8KSsozbtqvYVL
W8qSiCvm58/Fqpt3lr7uf0Kc1kGW3zTJ0Uz5jNuAGlNFq2hsktsR+zQzNPokZ7/9
HLmlFGxQx6W/lTTAZYDC+LVbdmbQa9s3mpowaWKFCsP5P3HUUVQhw0lmZMWT44tE
eDIK/nCUvBwa/K9HSfPZMBP24R8ShhITfnVm8clnx0Lu4qiQEgfDrgeEQe1pD6HG
J21leunfhrx8iBmHJ4PknqIZ4xBbDVjknAZ9qa7hZXzTxM2VpCBe+1fnf2uIxYoW
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15396042335236662441717157205519805820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Württemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Walldorf'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAP SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin.softwaredownloads.sap.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23440299847018191408134371413059275117604745725095166741778849204315943196112796542223019396394713457737946098065675756829108965475004850332108819401622386723420455434067932756859289924930291369159674344894087080804708807470129608752604735848415207495802380895587920231163952464970355517978432834576384408527777264961646364144088349620366915955253756258728871430369207709250399411715655233734481719080329869080464580467939942749536849379251198691571836251976369737982393171271724977804550722207869112663832479346921342838660463696014358194831147260992613210055916181779028781758767349575063118717003732765127278728797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99ccef9393557e90a5c66f5b2dcb4004767f582c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.softwaredownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'softwaredownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-az.softwaredownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notesdownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notesdownloads-az.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.softwaredownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cert.notesdownloads.sap.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin.notesdownloads.sap.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b3daa67ad0000040300473045022100d3dca25996855bcbf65f3fe89f7a3fb116aa49d25ccb85e332dd6c8382c69dad02202ea2fd55e5f8d72eca0f7b1f443e8fe940007c4f849ab0063a9b3adf790f8de000760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b3daa67b9000004030047304502204f5216213762c332ac281732c2976b2dd612b5d1de7f2edc16a9f311cb52046c022100ab7666d47203c721f7db95d68fd28b0b8af1d2bf89add924a91182f3370c30cc007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b3daa679d0000040300463044022002cc527b575c5c77de6c545d441ef7ababb0fc5abb14d419365c1998acf6a8aa02203b381225a65b46855d25299e95eca7172b723826416ed076697f3dda9002026a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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