*.google.com.kh

- Google LLC -

Issued by GTS CA 1O1

About this certificate

This digital certificate with serial number 35:23:fa:6c:2b:dc:d4:37:02:00:00:00:00:52:a9:ad was issued on by Google Trust Services.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Google LLC

Organization: Google LLC
State / Province: California
Locality: Mountain View
Country: US

Google Trust Services

Organization: Google Trust Services
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 35:23:fa:6c:2b:dc:d4:37:02:00:00:00:00:52:a9:ad
Serial Number (int): 70635893339266545948097252462441965997
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: e5:a6:ab:7a:b1:04:f9:90:53:80:db:b5:20:57:f5:7d:44:d7:fa:64
AuthorityKeyId: 98:d1:f8:6e:10:eb:cf:9b:ec:60:9f:18:90:1b:a0:eb:7d:09:fd:2b

Fingerprint (sha1): d5:c2:15:6c:53:ef:28:3d:d2:06:72:18:e4:1b:aa:a2:33:da:f8:7a
Fingerprint (sha256): 08:2f:a6:ba:f8:db:a8:b5:98:d7:22:77:d7:ca:cd:40:e9:fa:60:b7:ec:2f:eb:a6:2a:dd:ec:d0:8e:a4:cb:8c

Issuing Certificate URL: http://pki.goog/gsr2/GTS1O1.crt

Revocation information

OCSP Server: http://ocsp.pki.goog/gts1o1
CRL Distribution Point: http://crl.pki.goog/GTS1O1.crl

Check the revocation status for certificate *.google.com.kh

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.google.com.kh

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.google.com.kh
google.com.kh

Other certificates including the domain name google.com.kh

(limited to 100 certificates)
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
*.googleapis.com
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.googleapis.com
google.com
google.com
google.com
*.googleapis.com
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
google.com
*.googleapis.com
*.google.com.kh
*.google.com.kh
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
*.googleapis.com
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
*.google.com.kh
*.google.com.kh
*.google.com.kh
google.com
google.com
*.google.com.kh
*.google.com.kh
google.com
*.google.com.kh
google.com
google.com
google.com
*.google.com.kh
google.com
*.googleapis.com

Certificate

The complete raw certificate details for *.google.com.kh in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnTCCBIWgAwIBAgIQNSP6bCvc1DcCAAAAAFKprTANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEeMBwGA1UEChMVR29vZ2xlIFRydXN0IFNlcnZpY2VzMRMw
EQYDVQQDEwpHVFMgQ0EgMU8xMB4XDTE5MTIyMDEzMTU0MVoXDTIwMDMxMzEzMTU0
MVowaTELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3JuaWExFjAUBgNVBAcT
DU1vdW50YWluIFZpZXcxEzARBgNVBAoTCkdvb2dsZSBMTEMxGDAWBgNVBAMMDyou
Z29vZ2xlLmNvbS5raDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK0o
8ydarSG8MQjk5thOXW7VapxpIt7Fl3RPOUeAMGzrujV6axoJ9XxvWa+moYW6+Zx1
mRr7ItQKONhum1zLwhd5B+SjfdmCQD7VdIesuh+wXPwblSr/yxlnEwjhgGAxMzCJ
muxoIyGtKbKpCjRriHexOMf/mt1m5dh7M/ZjgIdrN1u0jyhH4oe1zkbOrlqK+l5L
c5DCEhP+WP8vhvgCjPYLiEJFpilm1uuEJepiVbmWu08Z23x9H0Gc6YQMM7Vq3RVZ
103hGclqe3cJtJeEcM+R7iAF1uzVf+vBjJ+7Ij/je2auN8lzYHch5oXBkIK1ME8V
s/sldIJJq3p0Z4Udd4MCAwEAAaOCAmYwggJiMA4GA1UdDwEB/wQEAwIFoDATBgNV
HSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTlpqt6sQT5
kFOA27UgV/V9RNf6ZDAfBgNVHSMEGDAWgBSY0fhuEOvPm+xgnxiQG6DrfQn9KzBk
BggrBgEFBQcBAQRYMFYwJwYIKwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnBraS5nb29n
L2d0czFvMTArBggrBgEFBQcwAoYfaHR0cDovL3BraS5nb29nL2dzcjIvR1RTMU8x
LmNydDApBgNVHREEIjAggg8qLmdvb2dsZS5jb20ua2iCDWdvb2dsZS5jb20ua2gw
IQYDVR0gBBowGDAIBgZngQwBAgIwDAYKKwYBBAHWeQIFAzAvBgNVHR8EKDAmMCSg
IqAghh5odHRwOi8vY3JsLnBraS5nb29nL0dUUzFPMS5jcmwwggEGBgorBgEEAdZ5
AgQCBIH3BIH0APIAdwCyHgXMi6LNiiBOh2b5K7mKJSBna9r6cOeySVMt74uQXgAA
AW8jqgLKAAAEAwBIMEYCIQD4HJSzFhnIaMfnO6IjNdjZxNM04DE+aQEvj/SShsud
+gIhAPpcbsBVEFsLaRfsKMVgKhbiscK6QfcZG5mnJuOLiO7sAHcAXqdz+d9WwOe1
Nkh90EngMnqRmgyEoRIShBh1loFxRVgAAAFvI6oC+AAABAMASDBGAiEAuPgeHCiv
3Z9/SIDdBbCXODiKGq0C81vuqAyJIKOWfBYCIQDhchbkrSxw7o2Tg8pgSPlp2xQ+
i1eU62FSN+d5/AbUvjANBgkqhkiG9w0BAQsFAAOCAQEATNWOWt+1Z2BR1GthTDMK
HrimQDRsg5T5mN72Ip7yN8qgBGyaQyZI07TpTspkzW6NFwDYy1FqdXQ1yFGIWWgk
Vldkme5FKg8UYyLOEo2EnCplZ2ZP/pqmvd2pnEj7c9MNQtZA3vpDj5bk8J5sIKam
6Csc9rBjE8UUD8sSEgAJWzcSsWkrCOyibLYuUOYtvEH+o1AkXf2QLRuyxCVKPLhB
Aj3oAz9XsrMl/PHPvp8yCBWwWXwYJ0U9K3pKfgRQ2pyWAL/omQ0p/EXwC/dfevvg
ebD281nYvi3U3Z4Dwk6ew6pHsNwQXnTa5O8YCFOnPFNNPvZXxqBLKpndF7XFdjTo
Kw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSjzJ1qtIbwxCOTm2E5d
btVqnGki3sWXdE85R4AwbOu6NXprGgn1fG9Zr6ahhbr5nHWZGvsi1Ao42G6bXMvC
F3kH5KN92YJAPtV0h6y6H7Bc/BuVKv/LGWcTCOGAYDEzMIma7GgjIa0psqkKNGuI
d7E4x/+a3Wbl2Hsz9mOAh2s3W7SPKEfih7XORs6uWor6XktzkMISE/5Y/y+G+AKM
9guIQkWmKWbW64Ql6mJVuZa7TxnbfH0fQZzphAwztWrdFVnXTeEZyWp7dwm0l4Rw
z5HuIAXW7NV/68GMn7siP+N7Zq43yXNgdyHmhcGQgrUwTxWz+yV0gkmrenRnhR13
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 70635893339266545948097252462441965997
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1O1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-20 13:15:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 13:15:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.google.com.kh'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21859419867606544448588831177126650351752135228210117716648635318752182016215639607669908113397647985947976924897657124918523844205234802127202743981275412440267450051323366979109433855536317533226317331344015231656205615404477173603126161247786549875055296075777492582051249086329300732045309267349935251139133299664319031072694361017765622061617685383967435991698618503981436222183911548017394338400312185374295485299310060082771791961089576885663108224994761141038361902307094671639826625050829877183717734557725487885214171033143020682013924047436615331909450922863577128465991504382651917403070752393655593301891
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e5a6ab7ab104f9905380dbb52057f57d44d7fa64
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 98d1f86e10ebcf9bec609f18901ba0eb7d09fd2b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1o1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/gsr2/GTS1O1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.google.com.kh'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'google.com.kh'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.pki.goog/GTS1O1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016f23aa02ca0000040300483046022100f81c94b31619c868c7e73ba22335d8d9c4d334e0313e69012f8ff49286cb9dfa022100fa5c6ec055105b0b6917ec28c5602a16e2b1c2ba41f7191b99a726e38b88eeec0077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016f23aa02f80000040300483046022100b8f81e1c28afdd9f7f4880dd05b09738388a1aad02f35beea80c8920a3967c16022100e17216e4ad2c70ee8d9383ca6048f969db143e8b5794eb615237e779fc06d4be
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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