www.secomea.com

- SECOMEA A/S -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 58:fc:b9:3c:32:ea:a4:5a:9c:1e:9d:dc:b4:ba:99:ca was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

SECOMEA A/S

Company registration number: 31366038
Organization: SECOMEA A/S
Organization unit: IT
State / Province: Herlev
Locality: Herlev
Country: DK

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 58:fc:b9:3c:32:ea:a4:5a:9c:1e:9d:dc:b4:ba:99:ca
Serial Number (int): 118284279452647715065230228643022281162
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 92:7e:a8:67:fd:53:9c:17:e5:a1:17:91:9e:44:ac:6a:42:b8:5d:65
Fingerprint (sha256): 10:d2:75:3f:ff:42:2f:ce:6b:f0:68:53:8c:f1:3d:b4:2b:34:c9:6a:58:ff:f9:5e:70:58:92:10:75:8e:7b:07

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.secomea.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.secomea.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.secomea.com
secomea.com

Other certificates including the domain name secomea.com

(limited to 100 certificates)
sni185335.cloudflaressl.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
demo-gm.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm22.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm08.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
www.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
enterprise.status.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
gm52.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
test-gm.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
demo-license.secomea.com
boubyanstatus.mambu.com
gm07.secomea.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
kb.secomea.com
boubyanstatus.mambu.com
kb.secomea.com
secomea.com
sni.cloudflaressl.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
*.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
enterprise.status.secomea.com
sni185335.cloudflaressl.com
sni185335.cloudflaressl.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
enterprise.status.secomea.com
kb.secomea.com
boubyanstatus.mambu.com
*.secomea.com
boubyanstatus.mambu.com
boubyanstatus.mambu.com
sni185335.cloudflaressl.com
gm41.secomea.com

Certificate

The complete raw certificate details for www.secomea.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwpg4GASpC3Ge0AYNhsV
pH9EDeiXDeqlo27SkRvsVsBeU4rUXZPkAP7dQxAejF8igJR7uERUTMoHtExzYCKl
RNxX6Vfd8uNbuXmsCBREzI3332LnXUJdSMtCFmY0lg+Qgap0n1tbnyPP1pdhVnQp
cWgaLE+eSp1PlrQgqh+1h95FRpTMEVQwQLkxHU3DFlIh0ImdZFRFrT8kpmri0g3j
pHlZxE8QS8+s1iklOi//Nwf2nL8xM4y0aolfbEmivFYKL2Xt5k2sB9hL5sP8zZ85
O+KF5KTG9aoMBZ+5KIgJp3+X9ZmFTI+B5NVRt8TByte/kZ2KKCZQuFjKSYpKbqEB
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118284279452647715065230228643022281162
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-08-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '31366038'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DK'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Herlev'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Herlev'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SECOMEA A/S'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.secomea.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23106727600255499628317452898422390213657890288505262896549442266522997383153188512125186101206399316139687365221281545698808404091525790343819616075667201208334111614129600218388629549831455540589501918067844110564643411311545290412215933215959828630837558447765503729812334909124080406882532331553582571765317946310451697141327590455560295323876944646582749848533453001462866733768623861491495473670843237489776855639007405268388018539069083625553938133190534747241994188797083469056482556364430745497604256173055571259796031112472811648002143719980322905861650061671690074226650874080727973403800782339108151296481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.secomea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secomea.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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