origin-content.govdelivery.com

- GovDelivery, Inc. -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 3f:83:1c:c8:7b:89:37:4e:6a:3d:f9:74:9b:1c:ee:db was issued on by Symantec Corporation.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

GovDelivery, Inc.

Organization: GovDelivery, Inc.
Organization unit: Technical Operations
State / Province: Minnesota
Locality: Saint Paul
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:83:1c:c8:7b:89:37:4e:6a:3d:f9:74:9b:1c:ee:db
Serial Number (int): 84422138414251707733887521499343810267
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): d0:ac:b6:13:6e:64:11:2d:ee:35:46:fb:cf:3b:34:ca:72:34:a3:5e
Fingerprint (sha256): 0d:2b:4e:00:dc:8d:5f:78:f5:bb:f9:3c:bb:5d:a4:e4:4e:a0:c4:3a:47:ee:1a:93:3b:97:1e:20:3e:ce:8a:a8

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate origin-content.govdelivery.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-content.govdelivery.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-stage-content.govdelivery.com
content.govdelivery.com
stage-content.govdelivery.com
int-content.govdelivery.com
qc-content.govdelivery.com
origin-content.govdelivery.com

Other certificates including the domain name govdelivery.com

(limited to 100 certificates)
carpepm.almonds.com
it.uahs.arizona.edu
statuspage.io
subscriberhelp.govdelivery.com
nartc.fcm.arizona.edu
calendar.sdzsafaripark.org
3fadmin.govdelivery.com
statuspage.io
streetfilms.org
5715161717407744-fe2.pantheonsite.io
banking-business-review.com
cdn-test.battlefields.org
5742636757417984-fe1.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
eu1-status.mulesoft.com
chns120.courseresource.yale.edu
5715161717407744-fe2.pantheonsite.io
208.lsnc.net
banking-business-review.com
5649952705347584-fe1.pantheonsite.io
govde-cm01.govdelivery.com
hub.meed.com
208.lsnc.net
yakamafish-star.net
eu1-status.mulesoft.com
dev.wellness.yale.edu
info-dev.calperformances.org
5699714196439040-fe2.pantheonsite.io
streetfilms.org
good.gsm.cornell.edu
5645056174194688-fe3.pantheonsite.io
nistmep.blogs.govdelivery.com
5718016125829120-fe1.pantheonsite.io
dev.embody.yale.edu
govdelivery.co.uk
expeditions.sandiegozoo.org
eu1-status.mulesoft.com
club.kjzz.org
statuspage.io
5729201025974272-fe1.pantheonsite.io
dev.wellness.yale.edu
statuspage.io
statuspage.io
academi.ufc.com
5645056174194688-fe3.pantheonsite.io
host2.openminds.com
local3599.com
5715161717407744-fe2.pantheonsite.io
communityadvancementfirm.com
208.lsnc.net
api.govdelivery.com
5718016125829120-fe1.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
5742636757417984-fe1.pantheonsite.io
5649952705347584-fe1.pantheonsite.io
208.lsnc.net
statuspage.io
*.govdelivery.com
5729201025974272-fe1.pantheonsite.io
vpn-prod.granicus.com
5742636757417984-fe1.pantheonsite.io
5718016125829120-fe1.pantheonsite.io
alumnimail.albion.edu
5645056174194688-fe3.pantheonsite.io
5638203017003008-fe2.pantheonsite.io
*.blogs.govdelivery.com
2fadmin.govdelivery.com
corporatestatus.tyro.com
5638203017003008-fe2.pantheonsite.io
status.govdelivery.com
5699714196439040-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
about.govdelivery.com
5638203017003008-fe2.pantheonsite.io
banking-business-review.com
inside.gc.cuny.edu
5659118702428160-fe2.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5645056174194688-fe3.pantheonsite.io
5699714196439040-fe2.pantheonsite.io
nartc.fcm.arizona.edu
eu1-status.mulesoft.com
content.govdelivery.com
statuspage.io
connect.iadb.org
abong.ufcespanol.com
origin-content.govdelivery.com
5715161717407744-fe2.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
statuspage.io
5746664899870720-fe3.pantheonsite.io
statuspage.io
5715161717407744-fe2.pantheonsite.io
eu1-status.mulesoft.com
statuspage.io
5649952705347584-fe1.pantheonsite.io
5729201025974272-fe1.pantheonsite.io
acadmintest.cuofco.org
5718016125829120-fe1.pantheonsite.io
5742636757417984-fe1.pantheonsite.io

Certificate

The complete raw certificate details for origin-content.govdelivery.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzh0whY/CYp72F7QZVe2d
2XOQy/BH4KvXSBEx4O7rX2g5EHEO4h/7P5IztHs8qm7LEgc+IIlG3t9XRlWmI2xu
IqRWddnDaS16tfRP45hvFQVyg0vW3WY+4zuJSjrBh+Ub4RZdnQq34LxWpLApmhEx
KedC8TapU3zLhaQ3BaJsPn8CpozZr13PjpKGjJnnvLctj3Pq5wxCArA952+D2t2k
gRcA6AMbiGpNMrNHHSflWDXUiXnP42GKNcJEg8QPl5Vy3peKgZkRyeH3PfgrI8j4
oTI+VUcqI/uC6OZi0ChJDdnYuRjGjsGCC/UA68Lu987c0iSzCGSwb04Ieen83gdN
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84422138414251707733887521499343810267
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Saint Paul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GovDelivery, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technical Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'origin-content.govdelivery.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26019484720657707558241596910681901724474631668416063962111313286362219676917137954836720535279490199784252029837689341361152049489278514183417395008683723311766999571273987813924073229881629926872846045233522155981793420574580790147823385333351571132831278967997097045281565255486570498976338587185893528498321050419789408070377310763952530776320166509119098306553350654653747907629979988429519422963465950115583707288173955310099217265070880821430259880167632969906380862496275070812013730600934765354416334945775380202620009116248909328502599058401955321628627148131538039524831761500437607853295728703600790556067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-stage-content.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'content.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-content.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'int-content.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qc-content.govdelivery.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-content.govdelivery.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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