ssgtm-it.hyundai.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number a0:49:97:4a:82:8d:32:48:12:db:df:b9:26:30:4d:03 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ssgtm-it.hyundai.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): a0:49:97:4a:82:8d:32:48:12:db:df:b9:26:30:4d:03
Serial Number (int): 213058585543397506804476017970173201667
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 71:82:a4:42:eb:38:db:2e:3c:a3:02:1f:13:74:57:d1:bc:a5:a4:67
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 4b:e2:05:62:c2:23:c6:64:46:11:8c:2e:7b:15:2f:cb:ff:9b:24:de
Fingerprint (sha256): 10:2b:05:41:80:e5:70:f4:2f:7c:9e:54:c3:30:e5:39:38:ee:33:1e:29:dc:31:81:e6:77:5c:73:79:fc:74:85

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/e3UV2IyJU1U
CRL Distribution Point: http://crls.pki.goog/gts1d4/14ud8AuodEY.crl

Check the revocation status for certificate ssgtm-it.hyundai.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssgtm-it.hyundai.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssgtm-it.hyundai.com

Other certificates including the domain name hyundai.com

(limited to 100 certificates)
press.motorsport.hyundai.com
dashportal.hyundai.com
support11b.cdnetworks.net
*.hyundai.com
hscvid-admin.hyundai.com
stg.cn-ccapi.hyundai.com
support11b.cdnetworks.net
hms.hyundai.com
dcm.hyundai.com
press.motorsport.hyundai.com
visit.hyundai.com
support.cdnetworks.net
ps-dcxt-id.hyundai.com
hubc2.hyundai.com
visit.hyundai.com
www.hyundai.com
adm-brand.hyundai.com
dcmpass.hyundai.com
cloud.gs.hyundai.com
secure4s.scene7.com
ssgtm-no.hyundai.com
prd.eu-ccapi.hyundai.com
mtalk.hyundai.com
wellbeing.hyundai.com
hslcs.hmc.co.kr
ieas.hyundai.com
stg.cn-ccapi.hyundai.com
org1-trucknbus.hyundai.com
eum.campus.hyundai.com
app.kari.hyundai.com
web.icps.kia.com
*.hyundai.com
support11b.cdnetworks.net
org2-admin.hyundai.com
support.cdnetworks.net
dealer.hyundai.com
prd.eu-ccapi.hyundai.com
*.hyundai.com
ssgtm-sk.hyundai.com
dcm.hyundai.com
gsw.hyundai.com
tst.ieas.hyundai.com
hubc1.hyundai.com
support.cdnetworks.net
image.e.atmosphere.tv
*.hyundai.com
m.bluemembers.hyundai.com
support18.cdnetworks.net
hmg.vpki.kr-svchub.hyundai.com
ver-bluelinkmobile.hyundai.com
*.hyundai.com
adminKR.trucknbus.hyundai.com
support.cdnetworks.net
support.cdnetworks.net
vspace.hyundai.com
ssocsis.hyundai.com
cdts.hyundai.com
*.hmckmc.co.kr
adminKR.trucknbus.hyundai.com
cdts.hyundai.com
citystore.hyundai.com
support.cdnetworks.net
stg.ind.hyundai.com
hubc4.hyundai.com
sip.kia.com
image.e.atmosphere.tv
dcxt-gs.hyundai.com
m.gbic.hyundai.com
dcxt-gs.hyundai.com
artlab.hyundai.com
gwcm.hyundai.com
outlook.hmc.co.kr
kids.hyundai.com
eu.drivingexperience.hyundai.com
gds.hyundai.com
e-report.hyundai.com
imagebank.hyundai.com
dev-young.hyundai.com
cdts.hyundai.com
support18.cdnetworks.net
isecuhard.hyundai.com
eu.drivingexperience.hyundai.com
*.hyundai.com
www.asan-chungjuyung.com
*.hyundai.com
motorsport.hyundai.com
*.developers.hyundai.com
support18.cdnetworks.net
mtalk.hyundai.com
ssgtm-it.hyundai.com
vars.hyundai.com
support.cdnetworks.net
support11b.cdnetworks.net
visit.hyundai.com
m.truck-bus.hyundai.com
ssgtm-de.hyundai.com
support.cdnetworks.net
eu.campus.hyundai.com
m.bluemembers.hyundai.com
interview.hyundai.com

Certificate

The complete raw certificate details for ssgtm-it.hyundai.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbjCCBFagAwIBAgIRAKBJl0qCjTJIEtvfuSYwTQMwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjQwNDI5MDYwMjMyWhcNMjQwNzI4
MDY1NDA0WjAfMR0wGwYDVQQDExRzc2d0bS1pdC5oeXVuZGFpLmNvbTCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAIwZ+5FDUmvfQBkdLR9KeCb6tnebjg/j
ko1LMEW2VsrvpxLjQsT2sEOOc+ExBcZxiA7eN+J9qVHKUBc21HstmhZaZh3M+nwA
R7DfKJ6EzD6BbTQ8HUHh9JSDPMLDD1uNCN8ynXvbRSkV/wNA/riI7I74JSM2Cvjt
/p6wr3RTORLl24ahLUcUD6dQPI9ZE4576rem9EO/ofAIYACQiyduK7mLFJZ1/Yoj
dDEPBaBrij1JorxUJcSbVlrhH8l7F7MOGrtU009cxvbJFlKctc5xu1/cr81fOtPM
/HC7591YBKSX3ErsaC4ngqcdx7OfQkimGQX4OKGJ2yuHeLBMlXjxgJ0CAwEAAaOC
AnwwggJ4MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBRxgqRC6zjbLjyjAh8TdFfRvKWkZzAfBgNVHSME
GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L2UzVVYySXlKVTFV
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu
ZGVyMB8GA1UdEQQYMBaCFHNzZ3RtLWl0Lmh5dW5kYWkuY29tMCEGA1UdIAQaMBgw
CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov
L2NybHMucGtpLmdvb2cvZ3RzMWQ0LzE0dWQ4QXVvZEVZLmNybDCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0
AAABjyipkkoAAAQDAEgwRgIhAJaep+xYsXNZbOYwYzJRySFE/y1R2Cl8HvYCwCGK
HHs5AiEAhL2YlgASy3FY+CUNaUASqxPcI28ikdv6l/F3XJDG/IQAdgBIsONr2qZH
NA/lagL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY8oqZYqAAAEAwBHMEUCIQCK+eh7
btNvivYQnqGt7sfxYunZf8wTN8YHy4O6KnZYRQIgGoVIAYlUDEJI/dKI17Ilk3qN
vab8S2GGgNYAXhG0QNMwDQYJKoZIhvcNAQELBQADggEBADowtZCdE2n9mqLT0hy8
2xdg9eVaCN8VANumJ1zJyIYq+hb44FN0jjZnyOlWGzUmL6e75UZ1LW+/C1pc2b5k
iKUOATB6A5pRAWpHNWjmwlH1uoVXRTtkR2e151x5n2LMSBpvkKzzagaBDPPoGhdV
SIlL4Qq+TAclrlTsrtpuYlbA6bJXz9ijrzLrsCfNoxf44sEXsewK8OVkrLQJa+ab
pS5XZaRHYCJ1RXPhtkq6Nz8qbdCf6NgPGbLm5Wi6WtSYjBqKFKVIswRtk257f0Xh
IlXy5KICVC9ni8X4HREeOfqExP0ptE5o91NiRRuQDlqNVqZIebj5AUkZRYrOqF50
ID4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBn7kUNSa99AGR0tH0p4
Jvq2d5uOD+OSjUswRbZWyu+nEuNCxPawQ45z4TEFxnGIDt434n2pUcpQFzbUey2a
FlpmHcz6fABHsN8onoTMPoFtNDwdQeH0lIM8wsMPW40I3zKde9tFKRX/A0D+uIjs
jvglIzYK+O3+nrCvdFM5EuXbhqEtRxQPp1A8j1kTjnvqt6b0Q7+h8AhgAJCLJ24r
uYsUlnX9iiN0MQ8FoGuKPUmivFQlxJtWWuEfyXsXsw4au1TTT1zG9skWUpy1znG7
X9yvzV8608z8cLvn3VgEpJfcSuxoLieCpx3Hs59CSKYZBfg4oYnbK4d4sEyVePGA
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 213058585543397506804476017970173201667
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-29 06:02:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-28 06:54:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssgtm-it.hyundai.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17686175234893175902510311640187085415773811932446580942465964615066702502633618913416024547625040432691265132550241930418299625175311670146113809800921303695047008394493379010114646862507192488006686272191860956999691116055734976136265912461789017713561410803402817359497956771262797233881464861007806735181636840166392975471518969085569626370353700750978862422918226781834744886414130691263726360576967643291533655285712894828503690872833015787025266551627406037971764650054923731798688300094350549856184874229578612447647553222073624726059282241114246056001618171658921431754668847420029354989967419703264441106589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7182a442eb38db2e3ca3021f137457d1bca5a467
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/e3UV2IyJU1U'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssgtm-it.hyundai.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/14ud8AuodEY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f28a9924a0000040300483046022100969ea7ec58b173596ce630633251c92144ff2d51d8297c1ef602c0218a1c7b3902210084bd98960012cb7158f8250d694012ab13dc236f2291dbfa97f1775c90c6fc8400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f28a9962a00000403004730450221008af9e87b6ed36f8af6109ea1adeec7f162e9d97fcc1337c607cb83ba2a76584502201a85480189540c4248fdd288d7b225937a8dbda6fc4b618680d6005e11b440d3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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