bf-tools.net

- BurdaForward GmbH -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0b:88:3a:65:1b:49:6e:48:03:60:a4:20:c4:54:6b:9f was issued on by DigiCert Inc.

With 25 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BurdaForward GmbH

Organization: BurdaForward GmbH
State / Province: Bayern
Locality: Muenchen
Country: DE

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:88:3a:65:1b:49:6e:48:03:60:a4:20:c4:54:6b:9f
Serial Number (int): 15328844716641104535734959646272940959
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f0:dd:12:90:8a:d1:71:36:d5:0c:99:18:e5:4d:7d:0f:b1:04:32:52
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): c0:ec:31:01:3c:87:bc:46:0f:15:ac:0e:07:01:49:ea:e4:33:1f:2c
Fingerprint (sha256): 09:ba:0a:36:5f:3a:02:3e:71:e1:07:4d:65:bd:74:1c:e8:fc:27:a4:d8:3e:de:27:2d:00:e7:d3:cb:7f:07:b9

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate bf-tools.net

25

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bf-tools.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bf-tools.net
m.videos-stg.huffingtonpost.bfops.io
welt.cardscout.de
autoren.netmoms.de
video-dev.huffingtonpost.bfops.io
m.videos-beta.huffingtonpost.bfops.io
autoren.finanzen100.de
video-beta.huffingtonpost.bfops.io
fol-staging.cardscout.de
videos-dev.huffingtonpost.bfops.io
www.cardscout.de
twc.bfops.io
emq.bf-tools.net
autoren-stg.netmoms.de
videos-stg.huffingtonpost.bfops.io
sloma-stage.bf-tools.net
www-staging.cardscout.de
a.bf-tools.net
videos-beta.huffingtonpost.bfops.io
m.videos-dev.huffingtonpost.bfops.io
welt-staging.cardscout.de
video-stg.huffingtonpost.bfops.io
www.amica.de
sloma.bf-tools.net
autoren-stg.finanzen100.de

Other certificates including the domain name bf-tools.net

(limited to 100 certificates)

Certificate

The complete raw certificate details for bf-tools.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzz3eRllSTxXTZA04WQvG
9QWPtjAN6//4pTvd5p8kkb4aZ1fh+E9/mapL3CfNGpUt5x1/b8fIIIhRVXjRahy+
/6OgHoNzUTYfiJpf9nWqVLa2ZDc3fC3SLYZMDf8Ou4yaVvUz+F1m7hiisrlo9wxj
4rs7DXen/YorUBErxYb/83oOjW90WpVVMs+aqhkg+onw5NaE5vnVVmqmrWejbmTB
LXU3XHW1CFk6nOAR+vgXarUbC2NfDx5gwXd3nwuiTcHHsUsb5KWSBxN3IfJyvqVV
YFa414DvFGi9k9rLHVjyG39x5d0D1pUn+ULiWdp177e89wAgar7lESuT03p/qpWj
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15328844716641104535734959646272940959
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Muenchen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BurdaForward GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bf-tools.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26161837504506025089663222590785342881841249927946310996091784143504540756271564092987189293328722565861926590562556406221278984236726932483992545852257428187858666237240471289166030143727271491272542686421812133932918724407821664613176454020353207944937200083144299165138256630580614287344345357488900075465266297698310482319355634561415872318351283680306429800114114955909624732554122725355402563445990619757750202624620211563326017968108156082352720727287319940708677695831434008182889414542398679885520393749971327232761411609661018795100407930748449993478714372965640819021508094428917701303163630959685495268101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f0dd12908ad17136d50c9918e54d7d0fb1043252
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (668 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren.finanzen100.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fol-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twc.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emq.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren-stg.netmoms.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma-stage.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'videos-beta.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.videos-dev.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'welt-staging.cardscout.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'video-stg.huffingtonpost.bfops.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.amica.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sloma.bf-tools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoren-stg.finanzen100.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001691f73c634000004030046304402202fa14892b3b787d90aa90a51472158ef10017d53edfd22354603720e985697c202205b4d06269f32f68be1619b1fb78ebd4382ed09793db34c0e077858aec421eeb60076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001691f73c772000004030047304502207aad9a0a670e9ad613d127c902d7210285af252d05d69bd3b2781dd68aea6c53022100a64f46f29fcde6de0cae1bd615e91f49aaffff2dbf60412aa54b6864b99b1b8f0076005ea773f9df56c0e7b536487dd049e0327a919a0c84a112128418759681714558000001691f73c649000004030047304502200cf40318fc6f53b4f9eb9a77fae9ab8ddbb4e6e1eb7e67a47c597a66d815fadc022100ecebad29469a81b2da550c6b04c89a6fbf1a79ee57b9eb48f156fb3e00063769
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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