*.hqprod.businesswire.com

- Business Wire, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 06:c3:6b:7a:de:88:bf:60:6e:4f:69:7b:59:80:dd:4d was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Business Wire, Inc.

Organization: Business Wire, Inc.
Organization unit: IT Department
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:c3:6b:7a:de:88:bf:60:6e:4f:69:7b:59:80:dd:4d
Serial Number (int): 8990045814658193936611379762979462477
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b9:2b:f0:24:ea:7c:32:7f:d0:78:6b:50:73:34:50:b7:21:62:6b:62
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 1d:ec:00:21:bd:44:6d:34:e9:7e:42:72:ca:44:9f:81:2f:4d:e5:52
Fingerprint (sha256): 08:0f:5e:59:74:8b:5d:ef:e9:10:23:16:9b:a5:a6:4c:5d:a1:56:96:65:bf:ba:03:a4:14:5b:92:50:37:cb:07

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.hqprod.businesswire.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hqprod.businesswire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hqprod.businesswire.com
*.hqbeta.businesswire.com
*.hqint.businesswire.com
hqprod.businesswire.com
hqbeta.businesswire.com
hqint.businesswire.com

Other certificates including the domain name businesswire.com

(limited to 100 certificates)
bw-webproxy-v1.dev.aws.businesswire.com
platform.int.aws.businesswire.com
acsc2.businesswire.com
membership.businesswire.com
*.test.businesswire.com
careers.businesswire.com
platform-internal.test.aws.businesswire.com
pr.businesswire.com
careers.businesswire.com
api-docs-web-v2r1.int.aws.businesswire.com
ir.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
news-search.aws.businesswire.com
platform.dev.aws.businesswire.com
mtadmz2.nyprod.businesswire.com
platform-internal.dev.aws.businesswire.com
interactive.businesswire.com
*.businesswire.com
newstrak-testing.dev.aws.businesswire.com
*.hqprod.businesswire.com
pr.businesswire.com
platform-internal.int.aws.businesswire.com
*.businesswire.com
platform-duffytest.sandbox.aws.businesswire.com
*.test.newshq.businesswire.com
www-origin.staging.aws.businesswire.com
yahoo-feed.aws.businesswire.com
apidocs.int.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
connect.businesswire.com
resources.businesswire.com
es.dev.aws.businesswire.com
platform-v2.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
etools.osimail3.us
snrtrak.aws.businesswire.com
www.businesswire.com
membership.businesswire.com
secure.businesswire.com
newsroom.businesswire.com
api-docs-web-v2r1.dev.aws.businesswire.com
www-origin.dev.aws.businesswire.com
platform.aws.businesswire.com
*.newshq.businesswire.com
www.businesswire.com
careers.businesswire.com
*.investorhq.businesswire.com
blog.businesswire.com
etools.osimail3.us
platform.prod.aws.businesswire.com
apidocs.int.aws.businesswire.com
*.newshq.businesswire.com
snrtrak-proxy-v1.dev.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
access.businesswire.com
www.test.businesswire.com
platform-internal.int.aws.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
platform.sandbox.aws.businesswire.com
platform.sandbox.aws.businesswire.com
test-aws.businesswire.com
services.businesswire.com
odysseyresorts3.test.newshq.businesswire.com
tradeshow.businesswire.com
go.sandbox.aws.businesswire.com
newsroom.businesswire.com
etools.osimail3.us
bw-webproxy-v1.test.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
*.qa.investorhq.businesswire.com
*.test.investorhq.businesswire.com
*.newshq.businesswire.com
etools.osimail3.us
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.test.newshq.businesswire.com
newsroom.businesswire.com
mtadmz1.scprod.businesswire.com
apidocs.int.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
platform-internal.int.aws.businesswire.com
newsroom.businesswire.com
akamai-logs-v2r1.dev.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
cmwb-e.test.investorhq.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
investAka2.investorhq.businesswire.com
connect5.dev.aws.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
www.businesswire.com
av.dev.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com

Certificate

The complete raw certificate details for *.hqprod.businesswire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5MINC1InpCuFXtbggG1
w1D3zE2Z3r0vZP9SUUmme05ynPyaEn1usK4hFYj6Ntpm25MxKvfDdj+84Ef6796c
BxxWwDh5TSHWJLHq84Pk2rT1GyZXoU5Mn4CBZLBCsJs3rWiDIKSY4aODlWjgmM9/
LWxgrjPth01oolbGeNQgU1CndofFw4md5Ax/aqAzy/vCHo5JmNBdtK65MSqRQwns
C92lbXGEGcyEaK8YcC42VvMbjmpP9/f+Ki+f+6RB4w49nbkpPRsRg/rEhlJodwoU
GVoorXUsgEHRchoq5F0XoFj82W8YoXYytfvPx31qKBJ/6JcWNogM8cXrtlbLJbmp
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8990045814658193936611379762979462477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Wire, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hqprod.businesswire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21154301133560084663595158495672785657184804691468874860724435491151851550524258213804667376337832612635105268498020123488625535153479916894993146149636274970464711165842776511465121075388563099822884452344195638605181673996579872314764972933877494061156945572102598632047200806922604918914817917351963359792310495592224344547468102385939684248650299967837493608403712908111204394637177442379902964772338321912289916988229068657277224087721891012046564630269100924895321214987457569792206438109116555238484310603436009766853727029055623859906039977911467742603532555676570168592457150518195542773063782079539818637813
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b92bf024ea7c327fd0786b50733450b721626b62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (157 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqprod.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqbeta.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hqint.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqprod.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqbeta.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hqint.businesswire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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