global.factiva.com

- Dow Jones and Company -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 09:31:e6:d2:13:4c:cb:f4:55:4e:36:14:10:86:bf:65 was issued on by DigiCert Inc.

With 11 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dow Jones and Company

Organization: Dow Jones and Company
State / Province: New Jersey
Locality: Princeton
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:31:e6:d2:13:4c:cb:f4:55:4e:36:14:10:86:bf:65
Serial Number (int): 12222156106228473986085415022049541989
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 51:00:e4:f1:0b:57:79:f8:d9:d3:6c:cf:9e:ef:e3:37:bb:a4:d9:6a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 0e:58:91:b0:6e:e2:84:b7:ef:86:2b:35:38:04:2d:30:0e:60:dd:df
Fingerprint (sha256): 0d:bf:ff:1e:83:9f:9c:85:f4:6d:10:89:1b:43:eb:39:b5:8d:c8:be:0e:2e:aa:26:64:65:97:bf:ba:fd:c9:ba

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate global.factiva.com

11

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for global.factiva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

global.factiva.com
djlogin.dowjones.com
signin.wsj.com
reader.factiva.com
origin-global.factiva.com
origin-djlogin.dowjones.com
origin-signin.wsj.com
origin-reader.factiva.com
global.web.prod.pib.dowjones.io
signin.web.prod.pib.dowjones.io
djlogin.web.prod.pib.dowjones.io

Other certificates including the domain name factiva.com

(limited to 100 certificates)
MOBILE.FACTIVA.COM
MANAGENV.INT.FACTIVA.COM
pfafeed.factiva.com
globalx.int.factiva.com
fce.int.factiva.com
global.factiva.com
suggest.factiva.com
accounts.dowjones.com
select.factiva.com
suggest.int.factiva.com
partner.factiva.com
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
select.int.factiva.com
global.beta.factiva.com
utilityhandlers.stg.factiva.com
securepartner.factiva.com
accounts.dowjones.com
newsplus.wsj.com
u1.utilities.int.factiva.com
ssl.wsj.com
labs.int.factiva.com
taxonomy.developer.beta.factiva.com
developer.factiva.com
www.factiva.com
IWORKS.BETA.FACTIVA.COM
ssl.wsj.com
reader.beta.factiva.com
global.beta.factiva.com
pfa-fmt.factiva.com
rss.factiva.com
newsplus.wsj.com
viewer.factiva.com
MEMBERSHIP.DEVELOPER.BETA.FACTIVA.COM
origin-global.factiva.com
customer.int.factiva.com
u1.utilities.factiva.com
DEVELOPER.BETA.FACTIVA.COM
IWORKS.BETA.FACTIVA.COM
MARKETDATA.DEVELOPER.BETA.FACTIVA.COM
INTEGRATE.FACTIVA.COM
*.stg.dowjones.com
salesworks.factiva.com
global.factiva.com
pfafeed.factiva.com
suggest.dowjones.com
REGISTRATION.DEVELOPER.FACTIVA.COM
REGISTRATION.DEVELOPER.FACTIVA.COM
salesworks.beta.factiva.com
djce.factiva.com
developer.beta.factiva.com
www.dowjones.co.jp
DEVELOPER.INT.FACTIVA.COM
u4.utilities.factiva.com
insight.factiva.com
pfa-fmt.factiva.com
utilityhandlers.factiva.com
*.dowjones.com
delivery.rnc-feeds.dowjones.io
m.int.factiva.com
DJCE.FACTIVA.COM
global.factiva.com
accounts.dowjones.com
publisherportal.factiva.com
TRACK.DEVELOPER.FACTIVA.COM
djlogin.beta.dowjones.com
companyprofile.developer.factiva.com
pfa.factiva.com
READER.FACTIVA.COM
GLOBAL.FACTIVA.COM
www.factiva.com
utilityhandlers.factiva.com
pps.factiva.com
publisherportal.factiva.com
pfa-fmt.factiva.com
integrate.factiva.com
MEMBERSHIP.DEVELOPER.FACTIVA.COM
global.beta.factiva.com
salesworks.int.factiva.com
pfa-ei.factiva.com
PFA-FMT.FACTIVA.COM
logos.factiva.com
accounts.dowjones.com
search.developer.factiva.com
widgets.factiva.com
*.dowjones.com
u5.utilities.factiva.com
suggest.int.factiva.com
global.int.factiva.com
integrate.stg.factiva.com
accounts.dowjones.com
rss.factiva.com
accounts.dowjones.com
BRIEFINGS.FACTIVA.COM
global.stg.factiva.com
*.factiva.com
global.factiva.com
developer.stg.factiva.com
mrm.int.factiva.com
ewb.factiva.com
pfafeed.factiva.com

Certificate

The complete raw certificate details for global.factiva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/fLaSHGvi2zu9NBZ5G+B
2r2YU3wZarAWwtsBPcrJkYKGjxOvoMwB7gVWjLyfxr5k1eBRmTK+2yaNNEdFMIOf
tCdzOsJ9ssgWGt7fqbmYi4KmdTH7A4rnKAl5Wn9RqVZqphCM/U2F1YUjk2zcRpbR
xmbo/ezPqYOu/IE7G8OMjt01o7bpjFpIHVnPStIyOSV5LPUhT4Hmaq4pwmPD8DPu
9JZj5GHxXs5n0pFsnoj6gjylwBDzNPCyQKWYd437L+PQnOHMIaVB6nB5RzIQEjAM
hkr+6+S7QCYcI89jBiSlBzExodqhBaSMHrfcF3qFwTs8j5AjtmrjNGaKHhiNOanR
WwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12222156106228473986085415022049541989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Princeton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dow Jones and Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'global.factiva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 32058046270292981836406292175594751761803324584885068921273528100082174279825960652419172796025743010058226659885117047077881382925370210048895557077267706544835484123875631787436536201053464098335319549034268409026770997248381701981046739058716181150630149691925378459366865440758604663118539705226368015769596007954496043838393923208717077579983808860094135429035552208010172700660069360564475553481951925134710422647781805919148114560923426108822792042818796092362983091612135555430244787427475501644918629899758356748214790329549876158278455730728765685155774137318568686977620642069679039954580828798603162669403
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5100e4f10b5779f8d9d36ccf9eefe337bba4d96a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (288 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djlogin.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reader.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-global.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-djlogin.dowjones.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-signin.wsj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-reader.factiva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'global.web.prod.pib.dowjones.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'signin.web.prod.pib.dowjones.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'djlogin.web.prod.pib.dowjones.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000172be1293680000040300463044022051a9b4c94494ba2d4d597be76859bd8c62a16130ca512ad9f4f1da3a2bfec5f402207a39077c913a266d75b720a890b5b92571bf4303ffa4508a5104c01f245eb3170077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000172be1293920000040300483046022100b0ef1335d76d99fb2bd38ec0dcdc947c0cb054ca24113bad2dd3b54ee6753a620221009422ac5a15255bc0e4305f56bfff70b942976f91c4212075ec7a936c3ca54d46
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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