clodf0l800001syn9a24mgquk.log.test.iota-app.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number f1:af:e3:e7:49:73:3f:84:10:17:94:76:7b:ea:a9:d3 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=clodf0l800001syn9a24mgquk.log.test.iota-app.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): f1:af:e3:e7:49:73:3f:84:10:17:94:76:7b:ea:a9:d3Serial Number (int): 321257221365825622060490628074857736659
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 15:c1:9a:55:d1:49:e5:fb:0f:7d:49:23:20:21:25:c7:85:83:90:63
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): f6:a0:cd:55:d2:3c:66:10:c2:36:58:2d:c7:c3:80:48:b4:c1:ed:0b
Fingerprint (sha256): 0f:9d:c5:79:d9:07:71:37:2f:a6:89:60:f6:33:32:34:3e:97:38:fa:6d:6b:d3:89:0c:07:03:36:98:7f:bc:7f
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/ikS4JmSd2_kCRL Distribution Point: http://crls.pki.goog/gts1d4/kmlci6sou6A.crl
Check the revocation status for certificate clodf0l800001syn9a24mgquk.log.test.iota-app.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for clodf0l800001syn9a24mgquk.log.test.iota-app.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
clodf0l800001syn9a24mgquk.log.test.iota-app.com
Other certificates including the domain name iota-app.com
(limited to 100 certificates)
bi.datafocus.cloud
fb-trenchless.com
clodf0l800001syn9a24mgquk.log.test.iota-app.com
hsti-20.log.staging.iota-app.com
www.warpprism.com
bienesraicesaustin.com
eduardoymichelle.mx
clt2pwy0100045ps7c9rh4xzq.log.e2e.iota-app.com
alexjy.com
webdev.thumbify.de
dev.acaisoft.tech
hsti-3.log.staging.iota-app.com
amplespot.com
crew.stanpass.com
cubook.app
digitaldentaldesignlab.com
gideonsimons.com
earsiv.kerzz.com
www.academiabombers.com
clnd3td0r0000pcn99gbi2l59.log.test.iota-app.com
multipleintelligencehub.co.uk
schoolhubs.in
clmuityw30000abn95iu3bchw.tenant.test.iota-app.com
batriq.com.sa
www.desideratumcr.com
praha-inc.com
clt2ssy0n0004aqo7b3ngeezp.log.e2e.iota-app.com
www.guilhermebarbosa.dev
www.bluewind.media
wigginsllc.com
cln4k5q260000yyn92rstadqj.tenant.test.iota-app.com
estimate.merck.insand.co.kr
e-igjs.com
goa.live
zetailetisim.net
app.meerch.at
sklokanath.com
unbalance.kr
islandlifeexotics.com
app.sweetspot.io
artworkbyjocelyn.com
myjourneytracker.com
web.ton.surf
pawfinderapp.com
clodf3a4s0000mdn9ayuz39q6.tenant.test.iota-app.com
docs.hypegamer.gg
fb-trenchless.com
clodf0l800001syn9a24mgquk.log.test.iota-app.com
hsti-20.log.staging.iota-app.com
www.warpprism.com
bienesraicesaustin.com
eduardoymichelle.mx
clt2pwy0100045ps7c9rh4xzq.log.e2e.iota-app.com
alexjy.com
webdev.thumbify.de
dev.acaisoft.tech
hsti-3.log.staging.iota-app.com
amplespot.com
crew.stanpass.com
cubook.app
digitaldentaldesignlab.com
gideonsimons.com
earsiv.kerzz.com
www.academiabombers.com
clnd3td0r0000pcn99gbi2l59.log.test.iota-app.com
multipleintelligencehub.co.uk
schoolhubs.in
clmuityw30000abn95iu3bchw.tenant.test.iota-app.com
batriq.com.sa
www.desideratumcr.com
praha-inc.com
clt2ssy0n0004aqo7b3ngeezp.log.e2e.iota-app.com
www.guilhermebarbosa.dev
www.bluewind.media
wigginsllc.com
cln4k5q260000yyn92rstadqj.tenant.test.iota-app.com
estimate.merck.insand.co.kr
e-igjs.com
goa.live
zetailetisim.net
app.meerch.at
sklokanath.com
unbalance.kr
islandlifeexotics.com
app.sweetspot.io
artworkbyjocelyn.com
myjourneytracker.com
web.ton.surf
pawfinderapp.com
clodf3a4s0000mdn9ayuz39q6.tenant.test.iota-app.com
docs.hypegamer.gg
Certificate
The complete raw certificate details for clodf0l800001syn9a24mgquk.log.test.iota-app.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFojCCBIqgAwIBAgIRAPGv4+dJcz+EEBeUdnvqqdMwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwMjIyMDkyNTQ1WhcNMjQwNTIy MTAxNjE3WjA6MTgwNgYDVQQDEy9jbG9kZjBsODAwMDAxc3luOWEyNG1ncXVrLmxv Zy50ZXN0LmlvdGEtYXBwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAJvwvLAF0m57ExVp//qkfJS4YOmzMaky5lWe+BATz+rqy2DsqeaPyO8OIZft gw3h9qEDxXrdEXONmzgfiEDhDVgA2WGylPLnPsuU2q5dKz/9m8DycG0vz0TXUBg3 Uhhdla+hrHaMv6Xim8RCQj22CXy9xrylfNn8fNeREjzznOSkInkiYPukMlqJJqV/ tpJXmCcaLeS3txR4GRhsYpdEY5kX0Yuqq34gFSyZbipSjzvv00BsF2vlFtpqIXxw wsUVGObbcx8T0fjz8aBldz4zshgP/W2wEELOLWGiIUGKQCXxAkDbJXCPqtQgDtfj /Z2wKPnfCnmV0WVkYCFeVbcy2mECAwEAAaOCApUwggKRMA4GA1UdDwEB/wQEAwIF oDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQV wZpV0Unl+w99SSMgISXHhYOQYzAfBgNVHSMEGDAWgBQl4hgOsleRlCrl1F2GkIPe U7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBr aS5nb29nL3MvZ3RzMWQ0L2lrUzRKbVNkMl9rMDEGCCsGAQUFBzAChiVodHRwOi8v cGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMDoGA1UdEQQzMDGCL2Nsb2Rm MGw4MDAwMDFzeW45YTI0bWdxdWsubG9nLnRlc3QuaW90YS1hcHAuY29tMCEGA1Ud IAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYr aHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L2ttbGNpNnNvdTZBLmNybDCCAQMG CisGAQQB1nkCBAIEgfQEgfEA7wB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2k PTBI1/urAAABjdBZjdwAAAQDAEYwRAIgLkOUozUs89UirLh/S5xSdtVuyORge0Nz 8zMMmoHRbd4CIAweMyBaTWM+NEXXEilDZAKt9i86IGrz1xIPukoy5J4AAHYA7s3Q ZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGN0FmM2AAABAMARzBFAiEA 1PsJIBWPHHLuf+Bs27I/260uSjRlLMSySwFZnbXKCLgCIAYnOvYcNfyWmC9KTyN6 xdiWJWq7uz8kfmFWXCPc2WyaMA0GCSqGSIb3DQEBCwUAA4IBAQAo+oFj1EsUGQst Mo9nAo8eEyaSlKttmvf2hD5zwN8CkbueIOAcLmVOMdWA9HYy31vJ9hWT/rMOqPH1 v4pscaAldjB7dqvorccMISJqyuGSz9eurgtem538b8XbwN4ZvydLJjsvevhJql4O 8tB/ln8rzwaqOjtGt8z24p638NFVOVz/hYQG0yMCSA5A/GjPjDh94ImXrhqSyoMt xZ1HzuOO/tywmTwgVDdJl+VRHLYKsOscu19IT0iN5OjmwyOoWUZxpjAUbTbh22Tv K1SyrMQ6xdEffKYThnO1g45v5+3616m00kH/WoRkqN2cpwms8AGxdxA95DQxr40M WzMSQiat -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/C8sAXSbnsTFWn/+qR8 lLhg6bMxqTLmVZ74EBPP6urLYOyp5o/I7w4hl+2DDeH2oQPFet0Rc42bOB+IQOEN WADZYbKU8uc+y5Tarl0rP/2bwPJwbS/PRNdQGDdSGF2Vr6Gsdoy/peKbxEJCPbYJ fL3GvKV82fx815ESPPOc5KQieSJg+6QyWokmpX+2kleYJxot5Le3FHgZGGxil0Rj mRfRi6qrfiAVLJluKlKPO+/TQGwXa+UW2mohfHDCxRUY5ttzHxPR+PPxoGV3PjOy GA/9bbAQQs4tYaIhQYpAJfECQNslcI+q1CAO1+P9nbAo+d8KeZXRZWRgIV5VtzLa YQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 321257221365825622060490628074857736659 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 09:25:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-22 10:16:17 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clodf0l800001syn9a24mgquk.log.test.iota-app.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19685649138917820464950713038947899838493659926087721653367981729951160143372919170549999898554935256798247381364960224528354513552911782316543927175186542840227694117903162784624738186107881052948868121280625467315137222960848608219102301791708908170942082342177921401717610812184843801614285983928373136762182850281678445407552541284835113606108269847430012044021448092611197403488227376042093355112511514676915205598600883152129479538963037738370137965080906941245515241697449051494543261108244346209006728063981937126878331976812888375718981862237382955001256164314399914146848095381266961950800303017677028514401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 15c19a55d149e5fb0f7d4923202125c785839063 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/ikS4JmSd2_k' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clodf0l800001syn9a24mgquk.log.test.iota-app.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/kmlci6sou6A.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018dd0598ddc000004030046304402202e4394a3352cf3d522acb87f4b9c5276d56ec8e4607b4373f3330c9a81d16dde02200c1e33205a4d633e3445d71229436402adf62f3a206af3d7120fba4a32e49e00007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dd0598cd80000040300473045022100d4fb0920158f1c72ee7fe06cdbb23fdbad2e4a34652cc4b24b01599db5ca08b8022006273af61c35fc96982f4a4f237ac5d896256abbbb3f247e61565c23dcd96c9a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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