api.souko.bcos.biglobe.ne.jp

- BIGLOBE Inc. -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:44:5b:86:a1:f3:6d:b3:2f:c1:b8:ac:91:dd:b4:93 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BIGLOBE Inc.

Organization: BIGLOBE Inc.
State / Province: Tokyo
Locality: Shinagawa-ku
Country: JP

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:44:5b:86:a1:f3:6d:b3:2f:c1:b8:ac:91:dd:b4:93
Serial Number (int): 18964124493338273311581156910158427283
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:2c:9c:53:ef:9a:11:d6:eb:8e:48:72:8c:fe:ed:30:a9:58:3b:0f
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): fe:78:e6:ff:12:71:a6:1b:b1:6a:6d:03:6f:eb:a8:72:b5:c6:1f:d8
Fingerprint (sha256): 05:42:78:2e:27:bb:09:c4:c7:dc:ad:ae:cf:1c:d0:58:ee:97:fb:e0:94:41:02:81:f6:2c:c5:67:76:63:3a:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate api.souko.bcos.biglobe.ne.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for api.souko.bcos.biglobe.ne.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

api.souko.bcos.biglobe.ne.jp

Other certificates including the domain name biglobe.ne.jp

(limited to 100 certificates)
zm.auth.sso.biglobe.ne.jp
d-sps-payment-a.biz.biglobe.ne.jp
stgbingo2.sso.biglobe.ne.jp
bsportal-st.biglobe.ne.jp
broadband.biglobe.ne.jp
member10.biglobe.ne.jp
dev.wr.biglobe.ne.jp
api.webry.biglobe.ne.jp
my-test.biglobe.ne.jp
member1-test.sso.biglobe.ne.jp
jabber.im.biglobe.ne.jp
bch-acc.biglobe.ne.jp
my-staging.sso.biglobe.ne.jp
stgsec.biz.biglobe.ne.jp
cps.biglobe.ne.jp
softnavitest.biglobe.ne.jp
test-ebook.sso.biglobe.ne.jp
my.biglobe.ne.jp
softplaza-test.biglobe.ne.jp
swdic.adm.manabi.biglobe.ne.jp
api.sso.biglobe.ne.jp
vscan.sso.biglobe.ne.jp
ct.webengine.biglobe.ne.jp
webserver-hyouka.biglobe.ne.jp
biglobe.ne.jp
datakun-test.cms.biglobe.ne.jp
soudan.sso.biglobe.ne.jp
kandoreport-engineoltp.biglobe.ne.jp
api.souko.bcos.biglobe.ne.jp
outage-info-test.sso.biglobe.ne.jp
s3test.wr.biglobe.ne.jp
soudan.sso.biglobe.ne.jp
evltop-apiw.sso.biglobe.ne.jp
enc.moss.biglobe.ne.jp
dev-travel.biglobe.ne.jp
pandora-test.sso.biglobe.ne.jp
payment-stg.sso.biglobe.ne.jp
office-test.im.biglobe.ne.jp
kessai.biglobe.ne.jp
member1.sso.biglobe.ne.jp
vscan.biglobe.ne.jp
vassv.sso.biglobe.ne.jp
traffic-stg.biglobe.ne.jp
idol.anime.biglobe.ne.jp
go.biglobe.ne.jp
vasap01.sso.biglobe.ne.jp
epro.edi.biglobe.ne.jp
evltop-apip.sso.biglobe.ne.jp
knlink.biglobe.ne.jp
mu.biglobe.ne.jp
webtest2.awscoetest.biglobe.ne.jp
mailtest-member4.sso.biglobe.ne.jp
*.sonpo.host.wr.biglobe.ne.jp
pfalz.webryreader.biglobe.ne.jp
enc.moss.biglobe.ne.jp
test.living-and-ins.jp.sonpo.wr.biglobe.ne.jp
search.biglobe.ne.jp
cp5.sso.biglobe.ne.jp
32923.biglobe.ne.jp
*.cms-wr.biglobe.ne.jp
mad.biglobe.ne.jp
stbsea.biz.biglobe.ne.jp
sdpsmob.biz.biglobe.ne.jp
wa3.bcml.biglobe.ne.jp
sp.music.biglobe.ne.jp
sales.edi.biglobe.ne.jp
apass.miffy.manabi.biglobe.ne.jp
swdic.manabi.biglobe.ne.jp
office-d3.biglobe.ne.jp
awstestbingo.sso.biglobe.ne.jp
api2.sso.biglobe.ne.jp
doukouseiren.cms-wr.biglobe.ne.jp
test.soudanguide.sonpo.or.jp.sonpo.wr.biglobe.ne.jp
member.sso.biglobe.ne.jp
hpcheck.biglobe.ne.jp
tantouth.sso.biglobe.ne.jp
vasap01-staging.sso.biglobe.ne.jp
my-staging.sso.biglobe.ne.jp
bblog.sso.biglobe.ne.jp
money.biglobe.ne.jp
api2-stg.sso.biglobe.ne.jp
from-dcm.aladin.biglobe.ne.jp
api.souko.bcos.biglobe.ne.jp
ooarai-kansei.webrydisk.biglobe.ne.jp
seetest-bblog.sso.biglobe.ne.jp
stgsoudan.soudan.biglobe.ne.jp
cp2.sso.biglobe.ne.jp
member1-staging.biglobe.ne.jp
test.otasuke.biglobe.ne.jp
ask.form.sso.biglobe.ne.jp
test.broadband.biglobe.ne.jp
cp3.sso.biglobe.ne.jp
jp-t-jmelo.biz.biglobe.ne.jp
bsportal-st.biglobe.ne.jp
outage-info.sso.biglobe.ne.jp
test.biglobephone.biglobe.ne.jp
miffy.manabi.biglobe.ne.jp
testpush.www.biglobe.ne.jp
manage-test.office.biglobe.ne.jp
dev.sgm.biglobe.ne.jp

Certificate

The complete raw certificate details for api.souko.bcos.biglobe.ne.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZ3DDSAmWE7nB4MFM8AS
LVs3RsGuS2n0Nuwg3xqpxxrI3ZcE5584Kayd/V8K4w3Do5JlahffYRGGAZmSzQDi
dQmCy0scwq6acXDxUHILwrX/PxXSJYW2DWrFVqC1WWOtvlVPMejzu3PQulB1gLMB
KCQuIbd57g1/dzR53VE2O2qk8AL8E1RIzednggQ0t8VA5/DCXvvw0QArO4rbWVW+
QMFxgXmXhWola6aKl7nvtOYp5giRWFCiNqt9fGIbttTFwWjV0HEzBb572t/N/bev
JcVQO4DrQkfAjUC5ItLLyHajRmRLc8kiwaJqXvRJe1Ip4bbGcYIlyU7YDTRw1hSC
SwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18964124493338273311581156910158427283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tokyo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shinagawa-ku'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BIGLOBE Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'api.souko.bcos.biglobe.ne.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23936834940329639138517952310407408202093655051085782272210253601942083228100917762700243951044228486002817668919963950326700759478605853859521563949028511994972491012405537872039769096604896667774768852483769535966701248680756785588505556024873211516095790723814246157170011935491345009219273142253807745865829474693953453629870258577915138765122710405521341247215484733244728254061295445314528254544045021329593765363335677171949020510662707600070171308661671084181543788734598804019977449416941558485342931847895575881110700521354682007780752492631661102591438841493390252711395339202741935082717558456716019139147
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							482c9c53ef9a11d6eb8e48728cfeed30a9583b0f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.souko.bcos.biglobe.ne.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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