*.avg.com

- AVG Netherlands B.V. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 05:96:02:8f:7d:e3:24:04:d4:6c:b2:bc:ec:28:0d:c9 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AVG Netherlands B.V.

Organization: AVG Netherlands B.V.
Organization unit: IT
Locality: Amsterdam
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:96:02:8f:7d:e3:24:04:d4:6c:b2:bc:ec:28:0d:c9
Serial Number (int): 7425036441111472834947553295405157833
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bf:f3:11:8b:34:60:8b:fc:56:34:c0:8e:ab:46:79:26:a1:f3:ad:d3
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 40:0a:e6:31:5b:5d:91:c1:78:3e:cc:b4:bd:99:1e:15:45:7f:d5:8d
Fingerprint (sha256): 0c:f2:74:36:c1:f7:e0:77:85:b8:7c:20:d8:08:c3:8e:f9:7f:24:f7:c3:47:f2:04:e2:46:bb:a0:ae:31:a8:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g1.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g1.crl

Check the revocation status for certificate *.avg.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.avg.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA512 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.avg.com
avg.com
mockup.avg.com

Other certificates including the domain name avg.com

(limited to 100 certificates)
business-auth.dev-europe-west3.smbrm.avast.com
*.avg.com
estatus.facturame.mx
release-notes.avg.com
bsmtp-relay-prod-dmz-brq001.mgm.avg.com
*.avg.com
study.cz.avg.com
estatus.facturame.mx
ua-cloud-stage.avg.com
buy-qa4.norton.com
webtuneup.avg.com
*.avg.com
dls.norton.com
click.emails.avg.com
*.avg.com
partners-int.norton.com
san.avg.com
cloudcare-billing.avg.com
ua-cloud-test.avg.com
san-ion.avast.com
*.avg.com
estatus.facturame.mx
ks.norton.com
web.backup.norton.com
*.avg.com
*.avg.com
shop.avg.com
subscriptions-test.avast.com
bconsole-test.avg.com
*.ocm.avg.com
partners.avg.com
*.avg.com
san.avg.com
estatus.facturame.mx
xls-int.norton.com
*.cloudcare.avg.com
somni.avg.com
san-ion.avast.com
*.my.sso.avg.com
*.avg.com
renewus.avg.com
*.avg.com
somni.avg.com
*.avg.com
*.avg.com
tps.avg.com
ua-cloud.avg.com
*.cloudcare.avg.com
signal.avg.com
labs.avg.com
*.avg.com
my-web-test.avast.com
estatus.facturame.mx
study.avg.com
*.avg.com
estatus.facturame.mx
stage-signal.avg.com
*.update.avg.com
avg.com
business-auth.prod.smbrm.avast.com
www9.avg.com
*.avg.com
support.avg.com
sip-01.avg.com
estatus.facturame.mx
study.avg.com
ccrmm.avg.com
estatus.facturame.mx
estatus.facturame.mx
my-web-stage.avast.com
san.avg.com
id.avast.com
estatus.facturame.mx
ks-int2.norton.com
*.cloud.avg.com
integrationbugs.avg.com
mts.norton.com
vpnportal.avg.com
zas-api.avg.com
community.cloudcare.avg.com
support.avg.com
*.avg.com
ncs-spoc-int1.norton.com
*.ccrmm.avg.com
*.avg.com
platformdashboard.avg.com
whatsmyip.mw-rmm.barracudamsp.com
*.avg.com
shop.avg.com
us03.ccrmm.avg.com
activation.avast.com
akamai-san46.exacttarget.com
sni.cloudflaressl.com
*.download.avg.com
san.avast.com
*.avg.com
status.cloudcare.avg.com
share.avg.com
estatus.facturame.mx
vpn.avg.com

Certificate

The complete raw certificate details for *.avg.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAzK1MsImArXi1H3xHFXXf
x3zGvNvGY8Q4eIN8jDqxpKHvzPSzF5o6JEl8JFCGJRnktu4kRyVkSTfoiWlEm0+H
HVIFJCXwxcrETTYHZVCdz4DJUFhC+yGW/yGiaECfha0T7EIr9/7Ud6ay/ZBPkChL
PonNhgAylZ1e2JLtiDSDbYCKajHv5R3G0nWk86n67hTLuKgKXEOky6xzBDaHQmYg
/FBWhGdu67BAvUYZW4+Z80wl/tCzKhvyD9sEqi8PJRawS1ozfWr+7zJYWvSk8PXv
VIhkwB3U3A7fQruw/zT5o/TrQVuCmrCg4yJ+1I7rFYyoSitt+rLGDQIkWYanDknA
LCzmAbhHa6Mb9lQ5BnI+V7JDslOU2PPpYnavQwLM7E+azHIxu0wZyIXWp0oKeclv
w/qn1yT6d2kGBQ3f+u4mrN+LWK0/R1CtG/zOQG66WynyNlqJEnzMVreBrFOHGdtk
Bthol6U4eqb5U2hbniNtHMEIDkpcmUJAaiva2n93WGHQRroYMQRucHJhbzeT9R01
25i+Gb2+Yt6MHdgOen32TGM92TEULPPXgAfoWn6EV7pZ6sYE/vzMJX5rh2/L0z7v
NPRu7lr9n2ICox+je8OVHag9KMGCq3/rOBqw6w1BRJC1VwIwTrH/Fbotxf+qdAFU
H0zlZl8VjGCFjn4YN0YUTIcCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7425036441111472834947553295405157833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AVG Netherlands B.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.avg.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 835009110804275769811781156797045896558444323977490698476606544231229768230579141857525794185501713655436532526125487987276608033002453147885514985430337250196223224377966117513287416686973423631270247289666182381441715737398908613043787323840161999807282150366849280153536964309803045781885862393957750827062219051270155644296039339864188908984551770326509265061319271967907351717120175433144037229681837252875318616820781280607260143147429970478498249326345581448736380000892238531645952944397266339427620188501904177961265664386318278071605384459583429296589050687296035665954700852573575583053709508640131466953898620839088040217685380310029800989154657785076811455316088663139919227413118993179271789469936258177190069999596563855858668480520226928808221824440331780181920276228071040825309954553688618402619241162714163301718504319748817767094864031189413695040403878240079367344944183995495811909543560111985347424141175327599219451196273357871587130385372131927789306385951102948050888525859880149300732558809148578201161576604915944459777578398652189457575514447534017443884517849689313469653828818378250947048995305787131914831822818519807207030688531681403100188382839617744551766098372015058063558059655229195505884220551
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bff3118b34608bfc5634c08eab467926a1f3add3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mockup.avg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.13 (sha512WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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