us-ets-nexusproxystg.us.trendnet.org

- Trend Micro Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number c0:33:07:b1:8b:63:e0:4e:00:00:00:00:58:08:a0:ad was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trend Micro Inc.

Organization: Trend Micro Inc.
State / Province: Texas
Locality: Irving
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): c0:33:07:b1:8b:63:e0:4e:00:00:00:00:58:08:a0:ad
Serial Number (int): 255476738373880273663313745967044927661
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 64:d0:36:01:31:11:5d:3a:b6:3a:83:e7:11:27:a4:67:01:c3:07:0d
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 30:46:8d:fb:9a:94:6b:d9:f1:c7:05:92:db:93:32:dc:61:14:a4:a4
Fingerprint (sha256): 0d:77:d0:99:ad:6b:cb:a2:c2:8c:85:32:f6:1a:9f:a2:5a:0a:6c:b1:29:dc:4f:03:5d:27:2a:78:10:a6:83:97

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate us-ets-nexusproxystg.us.trendnet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for us-ets-nexusproxystg.us.trendnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

us-ets-nexusproxystg.us.trendnet.org

Other certificates including the domain name trendnet.org

(limited to 100 certificates)
*.trendnet.org
liberalapi-tmp.sdi.trendnet.org
phvm-is-radius3.ph.trendnet.org
ca-ets-labvcenter.us.trendnet.org
phvm-gsd-sslaut.ph.trendnet.org
edc2kafkazk2.eu.trendnet.org
*.trendnet.org
*.trendnet.org
SJDC-NAV17WEBS2.us.trendnet.org
ie-lansweep-01.eu.trendnet.org
aws-billingapi.plsstg.trendmicro.com
edc2kafkaschema.eu.trendnet.org
SJDC-KAFKABK5.us.trendnet.org
*.trendnet.org
*.us.trendnet.org
jdc2-ise01.jp.trendnet.org
hubstg.trendmicro.com
sjc1-gfr-vip2.sdi.trendnet.org
itk8sd.tw.trendnet.org
us-ets-nexusproxystg.us.trendnet.org
PHVM-IS-AACTI.ph.trendnet.org
us-ets-fs01.us.trendnet.org
nj-594-rdgw.tw.trendnet.org
sjdc-infosec-arcmc.us.trendnet.org
horusapi-ibeta.sdi.trendnet.org
virtualsharesstg.trendnet.org
sjc1-tmus-ops.sdi.trendnet.org
virusRDP2.tw.trendnet.org
tw-ets-rgw06.tw.trendnet.org
ca-ot-yogi.us.trendnet.org
hrfoundation.trendnet.org
senna.aptinfra.tw.trendnet.org
nj-ets-labfs.tw.trendnet.org
*.terra-stg-vtr.vtr.trendnet.org
eunavposita.eu.trendnet.org
*.vtr.trendnet.org
infra.mars.trendmicro.com
minionapi-tmp.sdi.trendnet.org
de-ddwi-01.eu.trendnet.org
*.sdi.trendnet.org
kallitest.us.trendnet.org
*.us.trendnet.org
SJDC-KAFKAAPI1.us.trendnet.org
sjdc-scssoapp.us.trendnet.org
tw-ets-rgw08.tw.trendnet.org
virtualshares.trendnet.org
nj-ets-fs.tw.trendnet.org
SJDC-KAFKABK2.us.trendnet.org
tw-ets-rg03.tw.trendnet.org
kkbox.tw.trendnet.org
sjdc-nabuintapp.us.trendnet.org
cloudcntr.sdi.trendnet.org
OCSEG.TRENDNET.ORG
adc-lcmweb01.tw.trendnet.org
pr2g.baplsstg.trendmicro.com
EDC2VMNAVSITB18.eu.trendnet.org
nj-ets-labfs.tw.trendnet.org
regalpha.trendnet.org
apollo-reports.eu.trendnet.org
login-tmp.trendmicro.com
sjdckafkabk.us.trendnet.org
mybuddiy.us.trendnet.org
NJ-ETS-MSDN.TW.TRENDNET.ORG
ddan.tw.trendnet.org
SJDC-NAV17WEBS1.us.trendnet.org
tw-ets-vra.tw.trendnet.org
tw-ets-rg03.tw.trendnet.org
aws-iapi.plsbeta.trendmicro.com
phvm-gsd-sslaut.ph.trendnet.org
tw-ets-jksgw3.tw.trendnet.org
tw-magw.tw.trendnet.org
tw-ets-fs.tw.trendnet.org
aws-billingapi.plsprod.trendmicro.com
nj-ets-rgw.tw.trendnet.org
hrfoundation.trendmicro.com
aws-emsapi.plsprod.trendmicro.com
dozer.aptinfra.tw.trendnet.org
OCSEG.TRENDNET.ORG
submit.aptinfra.tw.trendnet.org
EDC2NAVSTG021.eu.trendnet.org
driapi-beta.sdi.trendnet.org
tw.trendnet.org
threatsearch.tw.trendnet.org
analyze.aptinfra.tw.trendnet.org
lmpi-beta.sdi.trendnet.org
edc2kafkazk5.eu.trendnet.org
TW-ETS-LABFS.tw.trendnet.org
tw-ets-ddwi.tw.trendnet.org
edc2kafkastream1.eu.trendnet.org
us-ets-nexusproxy.us.trendnet.org
aws-sdiadapter.plsbeta.trendmicro.com
edc2kafkazk4.eu.trendnet.org
tw-ds-labfs.tw.trendnet.org
SJDC-NABURADIUS.us.trendnet.org
www.vrli-sjdc.trendmicro.com
nj-rdsec-msdn.tw.trendnet.org
sjdc-gissmonjob.us.trendnet.org
sjdc-selenium.us.trendnet.org
pr2g-beta.trendnet.org
SJDC-KAFKAAPI2.us.trendnet.org

Certificate

The complete raw certificate details for us-ets-nexusproxystg.us.trendnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZfz7IFqBcQhsD/JvbIC
5lzlvhQOFZaH7SZIiRWVfaMa2mFUVGZaGqOoVa5uB4CPZXHn0UDOVByZ58N9/Gfn
7oBC6Y1cZ0R+5JBcaMtzAPWyqo1VKX6UkLL9D/QncffDSK4NFLaWns3UKUCn4A9i
Q1nd2nY4Q/qHaACOcK+Au7/z/Bsjzvna7tWhJu9jC3UQG8MsHlqkwytrFrUlfYRr
tNDdHQVELwTvJYB4RYAI49Ab4wFX7pW4tBs6sICPAxpxeCD1QBFt8tmqJPMQRmcl
ry9rgb6HWnETElJNvaCIvsfr21lDJasYTIbFBTFlHO9eOl5C67bMmKUT83lmEket
xwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 255476738373880273663313745967044927661
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 23:36:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-23 00:06:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'us-ets-nexusproxystg.us.trendnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23933970370550644988589779652262845856650168010607754860738962166231925752967474110294494985722257137711669808959782371018179870453014001393121148623562594677758879760417843442268906762524693223625433916734181440570260692597614137153606310963287300162343863659033788440817566673646119947144633116659122319647115100448028515560980154844695267514877801451910138589666214988361114062813708279683142042345502845733873848010251044139173592609557655779725216940056749335383357090975261460114494418509266237003246228260826014579750262015926957632782147427544060187043705742706305069069098850647195029582909546322558219431367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us-ets-nexusproxystg.us.trendnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64d0360131115d3ab63a83e71127a46701c3070d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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