DV SSL/TLS Certificate for www.sto3.ru

Certificate is witin its validity period

Issued by GlobalSign nv-sa (GlobalSign GCC R3 DV TLS CA 2020)

About the www.sto3.ru DV SSL/TLS Certificate

This certificate with serial number 7c:88:a4:42:e6:01:a1:05:3f:95:d2:20 for www.sto3.ru was issued on by GlobalSign nv-sa.

With 5 subject alternative names, this certificate can be used to secure multiple FQDNs. This DV SSL/TLS Certificate is currently within its validity period but we haven't checked the revocation status of this certificate, you can do this simply on revocationcheck.com. We have found some issues with the compliance of this certificate, they are be shown below. We hope this DV SSL/TLS Certificate review for www.sto3.ru provides you with the detailed information you were looking for.


We have identified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This X.509 certificate will expire on

Certificate Details

Serial Number (hex): 7c:88:a4:42:e6:01:a1:05:3f:95:d2:20
Serial Number (int): 38541330831476382723892171296
Serial Number Length: 95 bits, 12 octets

Subject Key Identifier: 59:d3:11:b1:1e:c1:33:d4:97:3c:3f:e6:b9:56:aa:ce:f6:00:3f:47
Authority Key Identifier: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (SHA-1): 86:23:22:50:0f:88:62:f7:9f:28:43:26:8f:3d:cc:96:04:0c:44:28
Fingerprint (SHA-256): e3:92:fe:59:da:81:51:0b:78:4b:9b:d6:10:94:ae:8f:60:b2:69:a3:41:8e:de:78:ef:95:41:df:39:f3:7c:24

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation Information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate www.sto3.ru
5
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details of the X.509 certificate for www.sto3.ru

Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Key Encipherment
Digital Signature
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10
CA Certificate
This is not a CA certificate

Subject Alternative Names

X.509 Certificate

The complete raw X.509 certificate details for www.sto3.ru in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHeDCCBmCgAwIBAgIMfIikQuYBoQU/ldIgMA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yNTAxMjgxMDM5MjJa
Fw0yNjAzMDExMDM5MjFaMBYxFDASBgNVBAMTC3d3dy5zdG8zLnJ1MIICIjANBgkq
hkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4rXwTM7QGUBKbVs+vOzZT3iP2imfmS0p
/hG7zoP1KBwaOLTy9fBo5/x2vrV7W4Wy71GR/vRtBpuoC7SwTVK+/a+hgKy83Rsn
dkAuPaIVmEhZ71FYeqZ0nQRmnGBGO7lJIyBV5enNsjAgjM5FukfvdtDctvwXBOu7
cfQA4q2uq9yf7A6rT5UsHYhFhuVMkfyThHZuAXZ04wD+LbxUqQpB35IOXTPhYt0h
/plUPhMoW9MLRvQSAAqxZspwNGfWff52ooO0c63EUlLPPFgN6DQ3ZSfnWGK71Iy9
cKpjuaDJAGgfn+VCJVIrLjrA7x55Xa5BAjSzk4aekXibfEIrqKwh9QYO/7aMPs4C
MniyE/1dRxkHUBDts/tD79qqMjtCYYJWv5iiD8a3ThurqGNwPCdjvaxybinrgzsX
H1zFX1ScnuINgF2UjNVq/j5r9IfQrMrcDcAltGcww5pxgPCSFUd/lEOwxe/kF3+o
qc4/AsM4W1LKkQNe7OzUVk5crZlkdmRLjBcP6sHavhZpkGkwEPgnf5Ph7yto2Bwl
CWDhgLHfhA5IN51JL5Aoa02EZlL4GO4sKqj1nY0Kl2dA5fSwFgwkjnhhy4FpIm/D
AN4w2igTgNPKiSujytoFk07CRXyzum4Ym90/birIeEZFTzGIzbNFU1xk3Zf7k4xn
k/7/+fJhd20CAwEAAaOCA4cwggODMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8E
AjAAMIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3Vy
ZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5
BggrBgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2
dGxzY2EyMDIwMFYGA1UdIARPME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEW
Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAEC
ATBBBgNVHR8EOjA4MDagNKAyhjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dz
Z2NjcjNkdnRsc2NhMjAyMC5jcmwwUAYDVR0RBEkwR4ILd3d3LnN0bzMucnWCFGF1
dG9kaXNjb3Zlci5zdG8zLnJ1ggxtYWlsLnN0bzMucnWCC293YS5zdG8zLnJ1ggdz
dG8zLnJ1MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAW
gBQNmMBzf6u9vdlHS0mtCkoMrD7HfDAdBgNVHQ4EFgQUWdMRsR7BM9SXPD/muVaq
zvYAP0cwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB2AGQRxGykEuyniRyiAi4A
vKtPKAfUHjUnq+r+1QPJfc3wAAABlKx+leUAAAQDAEcwRQIhANeHSWQKvwDuaQEx
XD/Njbc97TmeLdChcCp0AFCbj/7RAiAWbKYfUSPEn6RHEasNcQLNDocupnHdjocm
ui5b5S21XgB2AA5XlLzzrqk+MxssmQez95Dfm8I9cTIl3SGpJaxhxU4hAAABlKx+
lz0AAAQDAEcwRQIhAIfhS+4CbNTrX1VIU+ZVPMeD2Sxgm3gjbi5LBpaGSMhmAiAb
czwc3n5A4EnZius6fRp97x4P6VXH5iBeP02c53aUpQB3ACUvlMIrKelun0Eacgcr
aVxbUv+XqQ0lQLv83FHsTe4LAAABlKx+lqoAAAQDAEgwRgIhAOplhD20YMm8g74P
myz6Pl8SuxDvXRLGHYA7DqOjEScfAiEAgMdJNs9Zak6XyqYebZmlVxKAPo+CVuJY
GQM11kYeaqIwDQYJKoZIhvcNAQELBQADggEBAGN5agCMKA4RsJGm+RhD9yvMQreK
blXluLSwZJTvqeaZ22foblc+ZavTMPUZ+CuPHGZBpu7o10S5oCRMeHLNH5iNK/8c
NRb07Wi+4Jw3mMFJh+qT4CCATwqND4aaQMZnSR17ye5XwFi/M8z3PmV7nMovkdhN
mYbMJJvvPOq06l/yjU09M+wjXl7coBuVchgP7sn8NW9W1PZygIpIfyyCwoapLFvb
vjyBeYZFseE9v9zCSuELUqT3KAX4aOXUnSo3RMIn2hGFdFSnPn4GvNeRM1wuh6aT
n0BhEIDl6zYq6nZzKOjOUVOenMFm7G3TuhsMoiHRJnN75kqlfwaZnI4augY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 Decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38541330831476382723892171296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-28 10:39:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2026-03-01 10:39:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.sto3.ru'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL []
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924898953997344669181870177528682820078717729009114359570570661401717089868042328817428271497830147940664925014751257641592898777711525198660840433701202288779364907311161349548145699453222473052168809557942575156823002752516955456928063551795815619379300245402208849468824191144109368248581037450891986096917116834848210506057620171265863357751824748424030075233050978090885826705186502155766868517965745940379989786399786799521876511265762798304642126412917985668837088516415668897642704214650112810674371950657120654811306502606164048285738820006084003619725724798774578672891679733859125495576227578958580826350854088355306119017380582548700118285524588406301814107458971761028697841581567522120383741306453042297198111136108708997919417125851995420866989424021852118804125520809764198427095751134550070750491054017109467156940901992757524007004496969626509722866030151995830903297574176804505934748300295636530117122989964530210690101823080286042398752901825209346109039166888717573142187133465751822615695597800183154487760487739585071854154561329570120085583076555112622308135713701321589266073546323108380150095826094636059859274464920115503666584871631022508351959319509009067835135921957222699215189434984149928081266669421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sto3.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.sto3.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.sto3.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.sto3.ru'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sto3.ru'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59d311b11ec133d4973c3fe6b956aacef6003f47
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690076006411c46ca412eca7891ca2022e00bcab4f2807d41e3527abeafed503c97dcdf000000194ac7e95e50000040300473045022100d78749640abf00ee6901315c3fcd8db73ded399e2dd0a1702a7400509b8ffed10220166ca61f5123c49fa44711ab0d7102cd0e872ea671dd8e8726ba2e5be52db55e0076000e5794bcf3aea93e331b2c9907b3f790df9bc23d713225dd21a925ac61c54e2100000194ac7e973d000004030047304502210087e14bee026cd4eb5f554853e6553cc783d92c609b78236e2e4b06968648c86602201b733c1cde7e40e049d98aeb3a7d1a7def1e0fe955c7e6205e3f4d9ce77694a5007700252f94c22b29e96e9f411a72072b695c5b52ff97a90d2540bbfcdc51ec4dee0b00000194ac7e96aa0000040300483046022100ea65843db460c9bc83be0f9b2cfa3e5f12bb10ef5d12c61d803b0ea3a311271f02210080c74936cf596a4e97caa61e6d99a55712803e8f8256e258190335d6461e6aa2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11
 . . . . . . . . [c:0|t:5|false] NULL []
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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