lt.gcom.grainger.com

- W.W. Grainger Inc. -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:a5:0c:5f:b5:8c:ac:ae:5f:6f:7b:2a:40:67:83:d0 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

W.W. Grainger Inc.

Organization: W.W. Grainger Inc.
State / Province: Illinois
Locality: Lake Forest
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a5:0c:5f:b5:8c:ac:ae:5f:6f:7b:2a:40:67:83:d0
Serial Number (int): 15478487907069855691861446816596198352
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ef:01:50:e2:35:ad:4d:aa:58:44:4a:78:c0:1a:21:1a:f6:22:3e:7c
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 8d:40:e5:d2:25:c6:0f:8e:e3:01:08:c1:e6:d1:33:9e:6a:96:d0:8a
Fingerprint (sha256): 0b:88:c1:21:3b:a9:56:7d:00:49:c1:8d:d4:a4:95:95:56:ff:55:63:22:4c:dc:41:41:c1:35:f8:d9:91:c3:d2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate lt.gcom.grainger.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lt.gcom.grainger.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lt.gcom.grainger.com
m.new.grainger.com
1.gc1.co
s.gc1.co
hylt2.gc1.co
hylt.gc1.co
images.grainger.com
2.gc1.co
new.grainger.com
m.hylt.gcom.grainger.com

Other certificates including the domain name grainger.com

(limited to 100 certificates)
prmsdsap753.us.grainger.com
apiportal.grainger.com
lt.gcom.grainger.com
devmail.grainger.com
SF-SSO-QA.grainger.com
siplyncexternal.grainger.com
n7nac007.7300.grainger.com
dvlchbap01.dev-sap.grainger.com
prlchbap05.prod-sap.grainger.com
sf-bobj-altdev.grainger.com
smpconnect.sap.grainger.com
lt.gcom.grainger.com
prmsdsap402.gcad.grainger.com
mex-hylt.gcom.grainger.com
sbcmutare.grainger.com
b2b.origin.aws.grainger.com
jacksongroup.grainger.com
prlbmdm01.prod-sap.grainger.com
by.essl.optimost.grainger.com
praadmap001.us.grainger.com
customsigns.grainger.com
vexweb.grainger.com
invest.grainger.com
vexout.grainger.com
benman.grainger.com
ggsisp.grainger.com
lt.gcom.grainger.com
lt.gcom.grainger.com
ggsisp.grainger.com
n7nac007.7300.grainger.com
b2balt.grainger.com
jobs.grainger.com
t5-vex.grainger.com
eweb.grainger.com
ocswebfarm.grainger.com
experiencedone.sap.grainger.com
secureauth.grainger.com
prlchbap014.prod-sap.grainger.com
secure.scene7.com
prapsnap012.us.grainger.com
salesforce-sso-prod.grainger.com
lyncweb01.grainger.com
drlhybap500.gcom.grainger.com
cwa.grainger.com
migration.grainger.com
niles1.ebiz.grainger.com
PRMALTAP0004.us.grainger.com
www.grainger.com
www.meetme.grainger.com
b2bconnect.grainger.com
apigw.grainger.com
inventory.qa2-sap.grainger.com
www.grainger.com
inventory-omni.qa2-sap.grainger.com
jacksongroup.grainger.com
portalxi.sap.grainger.com
webremote.grainger.com
prafnsap008.us.grainger.com
dvzenoss.grainger.com
e.grainger.com
pw3nlb01.sap.prod.aws.grainger.com
pingf.grainger.com
prmsdsap402.gcad.grainger.com
tableauqa.sapad.grainger.com
keepstockselectiontool.grainger.com
prgcmalb01.gcom.grainger.com
sipexternal.grainger.com
prafnsap007.us.grainger.com
keepstockselectiontool.grainger.com
portalau.sap.grainger.com
q2gcmalb01.gcom.grainger.com
experiencedone.sap.grainger.com
ocswebfarm.grainger.com
www.grainger.com
ca.gcom.grainger.com
secure.scene7.com
by.essl.optimost.grainger.com
secures.scene7.com
devmail.grainger.com
lt.gcom.grainger.com
portalau.sap.grainger.com
lt.gcom.grainger.com
*.sap.grainger.com
lt.gcom.grainger.com
prmsdsap022.us.grainger.com
qaledap01.qa2-sap.grainger.com
prasmtap021.grainger.com
ext-prmznsap001.grainger.com
prmsdsap495.us.grainger.com
tableauqa.sapad.grainger.com
keepstocksecure.grainger.com
ebopsweb.sap.grainger.com
owa.grainger.com
qaqpslb01.gcom.grainger.com
sf-bobj-dev.grainger.com
secure.scene7.com
mail.grainger.com
prlchbap09.prod-sap.grainger.com
keepstocksecure.grainger.com
lt.gcom.grainger.com

Certificate

The complete raw certificate details for lt.gcom.grainger.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA64/bTJYLSHhsuJU+XXBF
x5wR30/4T8PNqjOhRgl2CPua4E/T82agep+R0Lph8XkJolLocQzu40D1fc+KgwRP
EKTApSXOhkyY0GDxfNzy32XCvZKPAxNA7L4uZbSpl9f/OIA1nOzExrxjdTbxJ/t1
YtanmHmvPavR54B1swpHCn9NhleLxGP6tAeTlL/OlJY5CsoQnVa5wsgP0dkaHDp7
K54epJ099KBFCFnD+Vw8qH1XJlu0AWMxdrQs0KMNk+aWIs+0ZSoW1M4gRxraXKKp
iia1cauWRa+5Y9pBRNNohJ14sUJjZ9hoKsCIflEp7w6fgwr7lTvv4zepFr9+DDOF
mQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15478487907069855691861446816596198352
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lake Forest'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'W.W. Grainger Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lt.gcom.grainger.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29736940018815208058136455399875007782154432988628951888579845650615467628359676520386518987636822888715732477627986553216698416551393728729766711626031533503549691328959995337369149784204426360134208922587809575208426767138974129826933144132032603474907898168930852813661691538748709429684246508811803001423321708579574827264231695801050900965748563576406384941193373679020770274418425954048686939681366210011789584363551301658051035638096359936997960002094649746673097313844397816573952390400035825261727558535152551279403369943141717247658684571694798081950727634448436783588908892206652691992859221295736437310873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ef0150e235ad4daa58444a78c01a211af6223e7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (167 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lt.gcom.grainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.new.grainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '1.gc1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 's.gc1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hylt2.gc1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hylt.gc1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.grainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '2.gc1.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'new.grainger.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm.hylt.gcom.grainger.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00608978f803d35d8cc7254862caf019fda7aa684fda3182a7831c55e5ed781093d4e7721d9720fdfef37b952e7c492324329bb238599094c0336c7b1d2001ea7f9316740f0925e821744f36b734b99a0d93d718147533cc4658874566a86ba28045778de3d8943cba05bc45287819fde8e08f1763d0674789c4473d839fb1cbe05ebb3458caf65a2dfae0f9326269661293f0888c5a12412a917f276a47aa0136a04b921c3c174dd5efbdb9a9d4b59851a989b2f4ef33885e30d7cbb8eba64d948b7c9a620ed2513d53dbfc2852e1a9a983e53265a85aa2a21fc901edc4dec3d34cf993810ef500d0bc67e11741a2d4eb35da49fe9e80ca35cd69584ca93645a0