*.netris.ru

Issued by SSL.com DV CA

About this certificate

This digital certificate with serial number af:28:1e:05:b8:3b:16:d3:2c:94:33:3d:0c:a2:9f:f1 was issued on by SSL.com.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.netris.ru,OU=Domain Control Validated

SSL.com

Organization: SSL.com
Organization unit: www.ssl.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): af:28:1e:05:b8:3b:16:d3:2c:94:33:3d:0c:a2:9f:f1
Serial Number (int): 232823200062147269202764489010584920049
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:cc:56:8d:0b:ec:2a:a6:ac:0e:32:0f:92:ff:00:ac:f4:5d:9d:1c
AuthorityKeyId: 46:9a:fd:fc:51:5e:7c:54:53:52:e2:99:e3:b3:32:ef:93:1a:7f:56

Fingerprint (sha1): 20:d8:b3:33:f6:22:8a:03:f9:3c:ce:20:42:5a:f1:c0:71:b6:2e:b9
Fingerprint (sha256): 06:c0:e1:8d:2d:ac:a0:ea:d1:ce:ea:6d:11:31:6e:f3:c8:58:32:7b:15:6c:4e:16:83:92:11:07:17:27:1a:04

Issuing Certificate URL: http://crt.ssl.com/SSLcomDVCA_2.crt

Revocation information

OCSP Server: http://ocsp.ssl.com
CRL Distribution Point: http://crl.ssl.com/SSLcomDVCA_2.crl

Check the revocation status for certificate *.netris.ru

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.netris.ru

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.netris.ru
netris.ru

Other certificates including the domain name netris.ru

(limited to 100 certificates)
smart-tv.netris.ru
*.netris.ru
*.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
*.netris.ru
net-mailsvr.netris.ru
smarttv.netris.ru
*.netris.ru
smarttv.netris.ru
net-mailsvr.netris.ru
*.netris.ru
*.netris.ru
net-mailsvr.netris.ru
smarttv.netris.ru
smarttv.netris.ru
net-mailsvr.netris.ru
*.netris.ru
smart-tv.netris.ru
*.netris.ru
net-mailsvr.netris.ru
*.netris.ru
*.gitlab.netris.ru
smart-tv.netris.ru
video.netris.ru
net-mailsvr.netris.ru
*.netris.ru
*.netris.ru
net-mailsvr.netris.ru
smarttv.netris.ru
video.netris.ru
*.netris.ru
net-mailsvr.netris.ru
netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
video.netris.ru
video.netris.ru
*.gitlab.netris.ru
e-mail.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru
net-mailsvr.netris.ru

Certificate

The complete raw certificate details for *.netris.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFozCCBIugAwIBAgIRAK8oHgW4OxbTLJQzPQyin/EwDQYJKoZIhvcNAQELBQAw
TTELMAkGA1UEBhMCVVMxEDAOBgNVBAoTB1NTTC5jb20xFDASBgNVBAsTC3d3dy5z
c2wuY29tMRYwFAYDVQQDEw1TU0wuY29tIERWIENBMB4XDTE4MDkxNzAwMDAwMFoX
DTE5MDkxNzIzNTk1OVowOTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRh
dGVkMRQwEgYDVQQDDAsqLm5ldHJpcy5ydTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOsfsl6+TlA7xCs0UUR/QbkdJU76g7vbNoeiJ/Lo/Ot9XVFAsZ9N
aWBMTZhD9EilKGLAO2YixbRlcJjvrSNuE1ZlBiqVoiZXS2bmGBnt/JuSAllv4bqn
vlmjo3GAfOks0TJsskcbm06bJtFksPFFTTd7dfcfiaxUsFIFKZOvtGHQOxrtPRt6
sigZua4lQM6gKkB/Py1pi42pgvyZMN8ezvlYefO/JtG4grlKXycm64hD28auk0FE
UxLZiO/H93ZSM5BnDFtME6syyTz0L8wIIXUiod1hta+sqkaU2MJLtoNrn7iW2Hdh
0NCweelUqy9Mw+riboTptXYiXMhBianjhfkCAwEAAaOCApAwggKMMB8GA1UdIwQY
MBaAFEaa/fxRXnxUU1LimeOzMu+TGn9WMB0GA1UdDgQWBBSkzFaNC+wqpqwOMg+S
/wCs9F2dHDAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwSgYDVR0gBEMwQTA1BgorBgEEAYKpMAEBMCcw
JQYIKwYBBQUHAgEWGWh0dHBzOi8vY3BzLnVzZXJ0cnVzdC5jb20wCAYGZ4EMAQIB
MDQGA1UdHwQtMCswKaAnoCWGI2h0dHA6Ly9jcmwuc3NsLmNvbS9TU0xjb21EVkNB
XzIuY3JsMGAGCCsGAQUFBwEBBFQwUjAvBggrBgEFBQcwAoYjaHR0cDovL2NydC5z
c2wuY29tL1NTTGNvbURWQ0FfMi5jcnQwHwYIKwYBBQUHMAGGE2h0dHA6Ly9vY3Nw
LnNzbC5jb20wIQYDVR0RBBowGIILKi5uZXRyaXMucnWCCW5ldHJpcy5ydTCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB2AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDE
e4l6qP3LAAABZecHdv0AAAQDAEcwRQIhAOdLm2lqYwhhrEcJ4TRPUBg5d8iyaNCv
cpLSLUPVAcVsAiA9iIFg1zuizVn33dTqWP4DLcdBaX/zEMvX4WI0s74M2wB2AHR+
2oMxrTMQkSGcziVPQnDCv/1eQiAIxjc1eeYQe8xWAAABZecHdw8AAAQDAEcwRQIh
AONGkXhxweqSVFlx1pWFtBydbsFd+xA9wlBDuEcCCwwaAiALGWAmv3HVCaXaNU9O
AWWpCznD466Cfpd9LVuQ4U8sWTANBgkqhkiG9w0BAQsFAAOCAQEAKqpgh/mI6D5k
l1UTwE+bbC3lfbDXxvoWKfD4t+yobKeMztwD7C5gigeRKi3guhcc1vdM+pNbjO3Q
35q3SmdukaNIagGCe+6a0ojcir8KaNUdCmPr7llAV7TgZuvZgy47erMgJ5gL9hNT
7JqzGWZ721r9+x6Jcpl3G8ZtRWViMOzwF9T5OOZEHgTdyAdiLcymp3lpbAmsp7Mu
wv+KXsBUDZCduOaszWMqLokGeQx5K4CcRImcYfygRs3MI7O+Z5oZR2lJcZaijhvL
mrQLi5+xQS6nnObDCBV3R+PbI8LxxCY9Ypv5ibrfaTCUdB9aw6tQnlcGPCW4rt3A
+Dvinp6PxQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6x+yXr5OUDvEKzRRRH9B
uR0lTvqDu9s2h6In8uj8631dUUCxn01pYExNmEP0SKUoYsA7ZiLFtGVwmO+tI24T
VmUGKpWiJldLZuYYGe38m5ICWW/huqe+WaOjcYB86SzRMmyyRxubTpsm0WSw8UVN
N3t19x+JrFSwUgUpk6+0YdA7Gu09G3qyKBm5riVAzqAqQH8/LWmLjamC/Jkw3x7O
+Vh5878m0biCuUpfJybriEPbxq6TQURTEtmI78f3dlIzkGcMW0wTqzLJPPQvzAgh
dSKh3WG1r6yqRpTYwku2g2ufuJbYd2HQ0LB56VSrL0zD6uJuhOm1diJcyEGJqeOF
+QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 232823200062147269202764489010584920049
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ssl.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SSL.com DV CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-17 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.netris.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29681631921024596572017718591299874963958797044289301469196893050654846126635381504553515795590643617210282806518131777468551883219330772095429488196253068160838642274989038808690731412259818247011175576256519205605903545274510846145990231271811334614066364788867857094511140065771284279822721970601213892200803294555126433662533659592034798607193132631121822904986597561374378114206375957851077276231228851352735744154635748199393035564563627260944127094259291479945693550131418449840291665405479874165139956266331139822075277763467345239659802902796027454612336192909517489511179610942719893457585158082627977315833
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 469afdfc515e7c545352e299e3b332ef931a7f56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4cc568d0bec2aa6ac0e320f92ff00acf45d9d1c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.ssl.com/SSLcomDVCA_2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (84 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.ssl.com/SSLcomDVCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.netris.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netris.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000165e70776fd0000040300473045022100e74b9b696a630861ac4709e1344f50183977c8b268d0af7292d22d43d501c56c02203d888160d73ba2cd59f7ddd4ea58fe032dc741697ff310cbd7e16234b3be0cdb007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000165e707770f0000040300473045022100e346917871c1ea92545971d69585b41c9d6ec15dfb103dc25043b847020b0c1a02200b196026bf71d509a5da354f4e0165a90b39c3e3ae827e977d2d5b90e14f2c59
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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