memberadvantagemortgage.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number be:ec:2c:e6:5b:0d:aa:db:13:95:d8:b3:a9:0b:ce:48 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=memberadvantagemortgage.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): be:ec:2c:e6:5b:0d:aa:db:13:95:d8:b3:a9:0b:ce:48Serial Number (int): 253779611934427832899300542520828350024
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: c4:22:5c:67:00:1b:2a:55:74:95:a9:ad:d3:dc:7d:73:65:0a:8d:d2
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): af:14:a2:d4:6b:2c:82:72:b0:26:63:f0:8e:88:ae:6c:d3:a3:cf:32
Fingerprint (sha256): 0b:de:ea:b7:8e:97:a9:a0:f4:ee:05:9d:67:b1:fb:d5:83:ab:1e:a5:c6:e5:98:87:e6:65:0d:2e:bf:2b:66:e2
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/qVyOl34HbP0CRL Distribution Point: http://crls.pki.goog/gts1p5/dfiVkccM-Qk.crl
Check the revocation status for certificate memberadvantagemortgage.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for memberadvantagemortgage.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
memberadvantagemortgage.com
*.memberadvantagemortgage.com
*.memberadvantagemortgage.com
Other certificates including the domain name memberadvantagemortgage.com
(limited to 100 certificates)
www.borrowercenter.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
api.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
www.memberadvantagemortgage.com
www.memberadvantagemortgage.com
*.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
api.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
api.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
api.memberadvantagemortgage.com
api.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
*.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
www.memberadvantagemortgage.com
memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
api.memberadvantagemortgage.com
www.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
api.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
api.memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
www.memberadvantagemortgage.com
www.memberadvantagemortgage.com
*.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
api.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
api.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
api.memberadvantagemortgage.com
api.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
calc.memberadvantagemortgage.com
*.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
www.memberadvantagemortgage.com
memberadvantagemortgage.com
memberadvantagemortgage.com
www.borrowercenter.memberadvantagemortgage.com
memberadvantagemortgage.com
api.memberadvantagemortgage.com
www.memberadvantagemortgage.com
memberadvantagemortgage.com
www.memberadvantagemortgage.com
api.memberadvantagemortgage.com
Certificate
The complete raw certificate details for memberadvantagemortgage.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFmTCCBIGgAwIBAgIRAL7sLOZbDarbE5XYs6kLzkgwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMDI5MTQwNDMwWhcNMjQwMTI3 MTQwNDI5WjAmMSQwIgYDVQQDExttZW1iZXJhZHZhbnRhZ2Vtb3J0Z2FnZS5jb20w ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVL3+IjZmKEUuTPcD9/LWG m6Lelnotip7opv7UMCBr1HJ70uc7AuuNG2ztgYgdcYx/WMLqte3SXOszjdw7o/Wy hMeZ1PwxenlcBHHLRoVZeuy0wZ5fFjW+L/EKEIM5YqbXcevitoh5a/AR2M8/DaeA HcVEpEuFLUc2DurpesVI9AP2CKnxmM5msB6+4xrbQyGuCflzZySml2kBuJ+/k2As 6Ny4X75gQE7+WpBZImbrXNKf/uyP+B3shuuLNGxu5dixKolYlB2/ZrrUAPHQEmN0 PhSDwo/s3mb79hZpdmdNSrOY84wZzrGcq2N8LDlJzJWColkksfrDq/l9iTiOk/XJ AgMBAAGjggKgMIICnDAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH AwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUxCJcZwAbKlV0lamt09x9c2UKjdIw HwYDVR0jBBgwFoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBq MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9xVnlP bDM0SGJQMDAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMv Z3RzMXA1LmRlcjBFBgNVHREEPjA8ghttZW1iZXJhZHZhbnRhZ2Vtb3J0Z2FnZS5j b22CHSoubWVtYmVyYWR2YW50YWdlbW9ydGdhZ2UuY29tMCEGA1UdIAQaMBgwCAYG Z4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2Ny bHMucGtpLmdvb2cvZ3RzMXA1L2RmaVZrY2NNLVFrLmNybDCCAQMGCisGAQQB1nkC BAIEgfQEgfEA7wB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAAB i3v3DxgAAAQDAEYwRAIgatE/6pEO1wbVwGDoFsq+9Z5XUAW9VdvL37fK+7hYrD4C IHqoLP5kNG61ad80bvA6r1HGzlxYm6TW1RngNcCrCTLpAHYA2ra/az+1tiKfm8K7 XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLe/cPUwAABAMARzBFAiEAxsVSso42vKPF VGeQGm3wdDzMlApCgdG1mewxWg0+q4QCIBJ7u2X8FqOVh/xuEmgy9AvUB5TLP222 XNq/Tw/SKmkWMA0GCSqGSIb3DQEBCwUAA4IBAQAXYguirdfoRDfmJ66QNRfsxDAk P4SvgcexUI2lg4qHircJZkXKEcj0+jfQ7YURtGdVnvECZzl5wnqaFLR/KUxXCe0E XTSOD6MTO1OqEOTct2j/TFpzaUdY3RQeyH/8OGvMXs3Ul0IAse5EDdQiHvLVqFSL kDkvo2uL+UE8AuLtNiHS16SQbhIkZwkWx0RSCD089Ld5A+BIgsUDOQcHVnoWrRIs oOzS6yN/nkIsHe3c+yp/FB1n6JmpLLLTgwxngHRp/N4GdqwZkHsEqHgiNrW6116H N+h6d1lazaTzdB4h9UFvFeTM8nw5q8ltXhx+2dS29XB4jKWltmKI9Ib3eeWY -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S9/iI2ZihFLkz3A/fy1 hpui3pZ6LYqe6Kb+1DAga9Rye9LnOwLrjRts7YGIHXGMf1jC6rXt0lzrM43cO6P1 soTHmdT8MXp5XARxy0aFWXrstMGeXxY1vi/xChCDOWKm13Hr4raIeWvwEdjPPw2n gB3FRKRLhS1HNg7q6XrFSPQD9gip8ZjOZrAevuMa20Mhrgn5c2ckppdpAbifv5Ng LOjcuF++YEBO/lqQWSJm61zSn/7sj/gd7IbrizRsbuXYsSqJWJQdv2a61ADx0BJj dD4Ug8KP7N5m+/YWaXZnTUqzmPOMGc6xnKtjfCw5ScyVgqJZJLH6w6v5fYk4jpP1 yQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 253779611934427832899300542520828350024 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-29 14:04:30 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-27 14:04:29 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'memberadvantagemortgage.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26912181181997437634698671803561829913848532059260731835786003980959454465984973143808847341732160484379990183473869278215669003007555222132865643199571396767432589365106258019103766853375773931168824882879626908096758820796900266735349817401039710890712471715863791291858187374519437252734270887808359076488531148611401017646742911921886127119699286602507099440524315083144744676842285865926856703837405950698216690273893641501842210556821416548195060000884939834358732849076367916579625992171368961467355925539251407943699274903269406425389293824521061968763011952798591449068836940671322123942971928529828154963401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) c4225c67001b2a557495a9add3dc7d73650a8dd2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/qVyOl34HbP0' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'memberadvantagemortgage.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.memberadvantagemortgage.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/dfiVkccM-Qk.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b7bf70f18000004030046304402206ad13fea910ed706d5c060e816cabef59e575005bd55dbcbdfb7cafbb858ac3e02207aa82cfe64346eb569df346ef03aaf51c6ce5c589ba4d6d519e035c0ab0932e9007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b7bf70f530000040300473045022100c6c552b28e36bca3c55467901a6df0743ccc940a4281d1b599ec315a0d3eab840220127bbb65fc16a39587fc6e126832f40bd40794cb3f6db65cdabf4f0fd22a6916 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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