rsa.api-inactive.test.latitudefinancial.com

- Latitude Financial Services Australia Holdings Pty Ltd -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:55:3a:65:3a:b8:74:fb:c3:bf:26:3e:32:53:f4:fb was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Latitude Financial Services Australia Holdings Pty Ltd

Organization: Latitude Financial Services Australia Holdings Pty Ltd
State / Province: Victoria
Locality: Docklands
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:55:3a:65:3a:b8:74:fb:c3:bf:26:3e:32:53:f4:fb
Serial Number (int): 12405581595014254301338957359667737851
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 58:a7:f0:ea:df:63:73:f2:3f:fc:94:6c:10:ef:a7:40:53:17:dc:0e
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 75:6a:fa:75:c0:24:8a:68:a5:ca:79:18:54:03:8c:4e:43:a1:87:7b
Fingerprint (sha256): 0e:12:97:8c:91:f7:01:da:9c:a0:b5:14:9c:75:91:4c:32:40:0b:90:a2:3e:fa:fc:51:92:b0:a8:a3:f3:98:b8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate rsa.api-inactive.test.latitudefinancial.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rsa.api-inactive.test.latitudefinancial.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rsa.api-inactive.test.latitudefinancial.com

Other certificates including the domain name latitudefinancial.com

(limited to 100 certificates)
connect.latitudefinancial.com
quote.latitudefinancial.com.au
shopify.api-inactive.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
private.api-inactive.latitudefinancial.com
api.sit.latitudefinancial.com
*.github.latitudefinancial.com
api.test.latitudefinancial.com
responsysassets.latitudefinancial.com
partner-auth.latitudefinancial.com
visa.api.latitudefinancial.com
di.latitudefinancial.com
shopify.api-inactive.test.latitudefinancial.com
merchanttraining.checkout.latitudefinancial.com
test-payments.latitudefinancial.com
incapsula.com
applyandbuy.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
imperva.com
imperva.com
auth.dev.latitudefinancial.com
imperva.com
rsa.api-inactive.latitudefinancial.com
latitudefinancial.com
assets.latitudefinancial.com
incapsula.com
pcc.api.dev.latitudefinancial.com
imperva.com
imperva.com
smetrics.latitudefinancial.com
rsa-enc.api.dev.latitudefinancial.com
orion.smartdochub.latitudefinancial.com
api-inactive.latitudefinancial.com
resources.latitudefinancial.com
imperva.com
sts.latitudefinancial.com
rsa.api-inactive.test.latitudefinancial.com
visa.api.dev.latitudefinancial.com
imperva.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
p.latitudefinancial.com
imperva.com
onlinepaymentintegration-sit.latitudefinancial.com
oscassets.latitudefinancial.com
*.orion-test.latitudefinancial.com
api.test.latitudefinancial.com
imperva.com
imperva.com
lsc.assets.latitudefinancial.com
imperva.com
p.latitudefinancial.com
imperva.com
api.test.latitudefinancial.com
imperva.com
merchanttraining.checkout.latitudefinancial.com
orion.coreadmin.latitudefinancial.com
api.test.checkout.latitudefinancial.com
api.latitudefinancial.com
imperva.com
responsysassets.latitudefinancial.com
latitudefinancial.com
p.latitudefinancial.com
connect.latitudefinancial.com
api.test.latitudefinancial.com
resources.latitudefinancial.com
oscassets.latitudefinancial.com
di.latitudefinancial.com
smetrics.latitudefinancial.com
eform.latitudefinancial.com
visa.api.test.latitudefinancial.com
incapsula.com
oscassets.latitudefinancial.com
imperva.com
statements.latitudefinancial.com
api-inactive.latitudefinancial.com
paymentportal.latitudefinancial.com
imperva.com
identity.latitudefinancial.com
checkout.latitudefinancial.com
mobile.assets.test.latitudefinancial.com
cards.latitudefinancial.com
partner-auth.test.latitudefinancial.com
mobile.assets.latitudefinancial.com
servicecentre.latitudefinancial.com
responsysassets.latitudefinancial.com
identity.latitudefinancial.com
imperva.com
imperva.com
cardapp-sandbox.latitudefinancial.com
assets.latitudefinancial.com
applyandbuy.latitudefinancial.com
cardapp.latitudefinancial.com
shopify.api.test.latitudefinancial.com
lsc.assets.latitudefinancial.com
api-inactive.test.latitudefinancial.com
privacy.latitudefinancial.com
pcc.api.dev.latitudefinancial.com
rsa.api-inactive.latitudefinancial.com

Certificate

The complete raw certificate details for rsa.api-inactive.test.latitudefinancial.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzogfdmwoRp0WLhy02nIx
pq2lGlieiAiCCA/C9mA8x13pUySoGo1Z37dvKI7+x10iRzH8qgFg80aiNAdEdsPb
8POlxcvBou5eVj826D2AbZNYDfVJuGb6Cg3ODlZedimUsj8jMKHWKBoyacrQrF/o
RNzHTIl/E7QkIUm6sUIGo2fkAC6vuyaNRlw9Idx3U8U/ZhXl5zljHa0QKbTW6QFp
3Tocj+hV/msdh7AIOtIOyuF9YIqekHfHKsI+fKrB9rMlYAive3CF4/lERdnRR8QK
76rMGa83VDaId2NZKIIhBgntd/yevRO3kcZG71yIrT8DVodmTvvBwxIKptq5ZCDh
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12405581595014254301338957359667737851
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Victoria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Docklands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Latitude Financial Services Australia Holdings Pty Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rsa.api-inactive.test.latitudefinancial.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26072215527131890689350301952436689664971532586636363918510791326992128365631753714559486825888105365933832745999042276534849765734604021580593729533880791085299067673743041175237895580048950377019622280421918309939232675797445623617917093885558694670569885742454217685620649067332965129337223990954663884453482441985876415129993519179065738121713433030894065048232200145335765940440419309768287571877800495845150914470785543960537774012441123499044315687634443472555738627381121178316628096145484414068819000047151807089336050892611811666324174956816015622361664172648281667862639023198878468833234284234027061797367
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							58a7f0eadf6373f23ffc946c10efa7405317dc0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rsa.api-inactive.test.latitudefinancial.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bacddd4cd0000040300473045022052efa6deaf42a133be2e2847decafd24d7024a71413d5b442703a188d4942940022100a07599933cfb0dcf596f7bbc8ee2bd5b7c09d3833431c821e16ba0449628cc3400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bacddd4d90000040300473045022100a7b31d01696830d89789b258a2e075225971cd5be2afb4f8054e78516c71c43e0220043db0987aa0128487d24c79e30195f628ec1974cb71a15f6622a56663baed260077003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bacddd52d0000040300483046022100fc523e1af25b70b6b45d9fcc7c635ba13a8a35dc05bd2d55885a0cccd08d480b022100ba1be460ed484fc5d9e956dc1d624d892eb48f02c0daf8e46f0aa376085f1c17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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