business-patch-device.prod-us-east1.smbrm.avast.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 8d:23:b8:5c:01:63:08:e9:10:3a:5e:02:8a:d8:4f:f8 was issued on by Google Trust Services LLC.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=business-patch-device.prod-us-east1.smbrm.avast.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 8d:23:b8:5c:01:63:08:e9:10:3a:5e:02:8a:d8:4f:f8
Serial Number (int): 187606617048509091010268203678107717624
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 1a:e4:16:3c:ef:5a:57:fb:2e:9d:81:6e:ff:89:0e:12:b5:c4:9d:16
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 69:09:f3:25:c4:79:e0:70:11:ad:b9:a8:10:7d:e7:38:8f:12:83:4d
Fingerprint (sha256): 05:8b:30:7d:46:bf:5f:4a:76:df:d2:95:93:80:2c:99:da:92:a1:cd:cf:fb:f8:f9:4a:88:5d:d1:80:19:a6:a8

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/2jGZEFLNGG4
CRL Distribution Point: http://crls.pki.goog/gts1d4/5D8Er9BpTQc.crl

Check the revocation status for certificate business-patch-device.prod-us-east1.smbrm.avast.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for business-patch-device.prod-us-east1.smbrm.avast.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

business-patch-device.prod-us-east1.smbrm.avast.com
business-patch-prod-nyc.ff.avast.com
business-patch-prod.ff.avast.com
business-patch-device.prod.smbrm.avast.com

Other certificates including the domain name avast.com

(limited to 100 certificates)
*.avast.com
business-auth.dev-europe-west3.smbrm.avast.com
*.ff.avast.com
*.avast.com
*.avast.com
*.avast.com
foundation.avast.com
www3.avast.com
support.business.avast.com
campaign.avast.com
*.backup.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
partners.avast.com
business-vpn-device.dev-europe-west3.smbrm.avast.com
*.avast.com
shop.avast.com
www.avast.com
*.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
foundation.avast.com
*.avast.com
*.ff.avast.com
*.avast.com
buy-qa4.norton.com
dls.norton.com
*.avast.com
blog.avast.com
*.avast.com
*.avast.com
*.avast.com
nsone-proxy.ff.avast.com
vpscache.avast.com
maps.avast.com
*.avast.com
partners-int.norton.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
maps.avast.com
*.avast.com
ipm.store.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com
*.avast.com
shepherd.ff.avast.com
*.avast.com
www3.avast.com
ks.norton.com
*.avast.com
*.avast.com
web.backup.norton.com
*.avast.com
*.avast.com
*.avast.com
business-patch-device.prod-europe-west3.smbrm.avast.com
business-dm-device.prod-us-west1.smbrm.avast.com
subscriptions-test.avast.com
*.avast.com
*.avast.com
*.avast.com
update.bullguard.com
*.ff.avast.com
business-patch-device.prod-us-east1.smbrm.avast.com
*.avast.com
viruslab.avast.com
*.avast.com
*.avast.com
*.avast.com
*.avast.com
xls-int.norton.com
*.ff.avast.com
*.eu.main.dev.iden.avast.com
store.avast.com
software-cleanup.ff.avast.com
*.avast.com
*.avast.com
easycare.ch.fcm.travel
stage.www.avast.ua.cms.int.avast.com
*.avast.com
*.avast.com
*.avast.com
shop.avast.com
*.avast.com
*.ff.avast.com
alpha-license-dealer-test.ff.avast.com
*.avast.com
vcp-portal.ff.avast.com
www.avast.com
*.avast.com
san-ion.avast.com
*.avast.com
*.avast.com

Certificate

The complete raw certificate details for business-patch-device.prod-us-east1.smbrm.avast.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIRAI0juFwBYwjpEDpeAorYT/gwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjMwOTAxMTMwNzA3WhcNMjMxMTMw
MTQwMTIxWjA+MTwwOgYDVQQDEzNidXNpbmVzcy1wYXRjaC1kZXZpY2UucHJvZC11
cy1lYXN0MS5zbWJybS5hdmFzdC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDwL5ipi13zYqLXrCr3ZYUInhu7qoXqSBV4HMXsS7p0RAjKZngIFIVu
3IUqfq8maj7vBm9uStob1VJIapEN+FwpQiEHfNyP/+M7yypm0eGSr4uJ1MATXHX3
GpU4gk9ezMeo7YKSFa7fmbtPIMQo7bvvPIaemKYl8vsSBZ7XnRoIs2P50aLfOq8R
HF3YXfflwsyfdYbQn4KH4ByW7P8NJOAFvAaw/QoIhVjg3KFIF12YJ4pIqj49/jzk
hO0jXblq8hYvi2svP2Nj/qR4A3rTOp1WOaDJzXkean7gfuuY+VThUS7XBziy/Xvp
VhwLPKzizHGzYeZwY70HZva8k+7mQKaFAgMBAAGjggMQMIIDDDAOBgNVHQ8BAf8E
BAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUGuQWPO9aV/sunYFu/4kOErXEnRYwHwYDVR0jBBgwFoAUJeIYDrJXkZQq5dRd
hpCD3lOzuJIweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilodHRwOi8vb2Nz
cC5wa2kuZ29vZy9zL2d0czFkNC8yakdaRUZMTkdHNDAxBggrBgEFBQcwAoYlaHR0
cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjCBtAYDVR0RBIGsMIGp
gjNidXNpbmVzcy1wYXRjaC1kZXZpY2UucHJvZC11cy1lYXN0MS5zbWJybS5hdmFz
dC5jb22CJGJ1c2luZXNzLXBhdGNoLXByb2QtbnljLmZmLmF2YXN0LmNvbYIgYnVz
aW5lc3MtcGF0Y2gtcHJvZC5mZi5hdmFzdC5jb22CKmJ1c2luZXNzLXBhdGNoLWRl
dmljZS5wcm9kLnNtYnJtLmF2YXN0LmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAM
BgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5n
b29nL2d0czFkNC81RDhFcjlCcFRRYy5jcmwwggEDBgorBgEEAdZ5AgQCBIH0BIHx
AO8AdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYpREa85AAAE
AwBHMEUCIEyfBE/FFSPeMCylNDrwiSHoSzJF8pxI4nliqWGML+9rAiEA1eXsuBoq
9JSPaEnp4dVingS3m9tC1Vbf9ji7mv7Z1oQAdQCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAYpREa8wAAAEAwBGMEQCIDeyVml5sMAgDllcXc5Vi6Of
03CJts8z63uF8wvPwspAAiBntKucv/fS+KjpUHNJi6I02sztMQ4Z5H5TJWeJ3dXP
pzANBgkqhkiG9w0BAQsFAAOCAQEAajSAUyQ+9WCMPdCZZSosK+F7TjyQdr5xXL7R
TI8KkNbq7m9MG/WH0ImNBDn4Sou1Xs9sGTkrur0C3lA/CYK3hyHqSsvLJ4y3WXhR
lVIBouu0MsTetlP9ymTOYqra/QqDuZUKbXJPyp+KLNKqNnTS8epXoNvzE8ONOUQ5
Fy0mBQcZwBhavVAEOWOtxaXKunN1wIIDIJkuZEIhEO4eBJNlZroQBCQr5gSj5Ap0
qtkVLmbe9JDGE6LfnWm5TR/hmUgREwDK8ZplGEJSduN3hfHVsiF1Uw1MgdQXEvfZ
V9QatEsUC747XIF1/oKrWPm278a7dj9SWjyiVwhe/jnelwMFlA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8C+YqYtd82Ki16wq92WF
CJ4bu6qF6kgVeBzF7Eu6dEQIymZ4CBSFbtyFKn6vJmo+7wZvbkraG9VSSGqRDfhc
KUIhB3zcj//jO8sqZtHhkq+LidTAE1x19xqVOIJPXszHqO2CkhWu35m7TyDEKO27
7zyGnpimJfL7EgWe150aCLNj+dGi3zqvERxd2F335cLMn3WG0J+Ch+Acluz/DSTg
BbwGsP0KCIVY4NyhSBddmCeKSKo+Pf485ITtI125avIWL4trLz9jY/6keAN60zqd
Vjmgyc15Hmp+4H7rmPlU4VEu1wc4sv176VYcCzys4sxxs2HmcGO9B2b2vJPu5kCm
hQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 187606617048509091010268203678107717624
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 13:07:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-30 14:01:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'business-patch-device.prod-us-east1.smbrm.avast.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30320663820411919419973267484481918298024876351403255595681122724746411275049180279108439376056846346759779725062319052974792809661080492173349035148591170007397489958463371788106157327102225499593336348052356045096896676259615486731535009086870525333567274064866620509804837676958386562203752578286907056650247562101017318985822416388620742628076085589476246307064409539057367051032275691407089178313210918810472296130316747733063519573142951558568887667215242577790160963323240362028037902285785259575298798424325975191374800658419244672398230218803065406660611525038567755767325435212509733735987083008609949361797
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1ae4163cef5a57fb2e9d816eff890e12b5c49d16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/2jGZEFLNGG4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (172 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-patch-device.prod-us-east1.smbrm.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-patch-prod-nyc.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-patch-prod.ff.avast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'business-patch-device.prod.smbrm.avast.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/5D8Er9BpTQc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018a5111af39000004030047304502204c9f044fc51523de302ca5343af08921e84b3245f29c48e27962a9618c2fef6b022100d5e5ecb81a2af4948f6849e9e1d5629e04b79bdb42d556dff638bb9afed9d684007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018a5111af300000040300463044022037b2566979b0c0200e595c5dce558ba39fd37089b6cf33eb7b85f30bcfc2ca40022067b4ab9cbff7d2f8a8e95073498ba234dacced310e19e47e53256789ddd5cfa7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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