t-www.yves-rocher.at

- LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 7b:87:53:b0:be:d8:79:8b:a0:eb:b3:6c was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA

Organization: LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA
Organization unit: LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA
State / Province: Morbihan
Locality: LA GACILLY
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:87:53:b0:be:d8:79:8b:a0:eb:b3:6c
Serial Number (int): 38230256410470328647950250860
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 11:6b:5d:2e:38:78:d2:b7:94:fb:fe:c0:0d:83:47:da:de:2c:9f:72
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 26:6c:46:eb:10:64:0e:fc:80:74:eb:9f:74:ac:e5:4d:61:8d:19:48
Fingerprint (sha256): 12:6f:be:4a:02:16:66:e2:c7:e6:6d:2d:8b:dd:c2:43:5b:1a:c6:a0:27:5f:b8:c0:6d:05:24:dd:f4:86:3a:ec

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate t-www.yves-rocher.at

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for t-www.yves-rocher.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

t-www.yves-rocher.at
t-m.yves-rocher.de
t-www.yves-rocher.de
t-m-yves-rocher.at
t-www.yves-rocher.ch
t-m.yves-rocher.ch

Other certificates including the domain name yves-rocher.at

(limited to 100 certificates)
www.yves-rocher.fr
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
t-www.yves-rocher.at
search.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.fr
www.yves-rocher.de
news.yves-rocher.at
news.yves-rocher.at
secureorder.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
t-www.yves-rocher.at
secureorder.yves-rocher.at
t-www.yves-rocher.at
search.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
news.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
nl.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
secureorder.m.yves-rocher.fr
search.yves-rocher.at
secureorder.m.yvesrocher.com.tr
san-17-s50.tlsprovisioning.exacttarget.com
san-17-s50.tlsprovisioning.exacttarget.com
secureorder.m.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
nl.yves-rocher.at
nl.yves-rocher.at
www.yves-rocher.fr
www.yves-rocher.de
www.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
www.yves-rocher.fr
secureorder.yves-rocher.at
www.yves-rocher.de
nocdn-w.yves-rocher.at
secureorder.yves-rocher.at
search.yves-rocher.at
news.yves-rocher.at
www.yves-rocher.fr
secureorder.yves-rocher.at
secureorder.yves-rocher.at
www.yves-rocher.fr
san-17-s50.tlsprovisioning.exacttarget.com
secureorder.yves-rocher.at
san-17-s50.tlsprovisioning.exacttarget.com
nl.yves-rocher.be
news.yves-rocher.at
www.yves-rocher.fr
news.yves-rocher.at
secureorder.yves-rocher.at
www.yves-rocher.fr
prod.yves-rocher.de
search.yves-rocher.at
nl.yves-rocher.be
www.yves-rocher.fr
www.yves-rocher.fr
secureorder.m.yvesrocher.com.tr
secureorder.yves-rocher.at
www.yves-rocher.fr
nl.yves-rocher.be

Certificate

The complete raw certificate details for t-www.yves-rocher.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Q1K4Fj5/kAgpke4Ql7G
Qzqnh8+dlcSPibPSEctX6Lx4rau4LVA22CoRvDPaxia04/BpcSfwf5RkCRNmmzmB
B4X3bQeFR69Zn7RkmSf6+D8pjPerY0rwoOUNGdg+/i/5+IO5079tXfSG1w2A0/9w
qCW8hgvKsDrdsg7ML/2GkupItYfTa3KVNUasAHu7h0cYLs2VhLu+u/Nb5VhujIb6
M6MTtCZW712c6qsz6uqNM0+9eTF9PPWL0E2Fkp8VhucUSSYA52gE+O8796uqsOQM
Kyifl8GK40KDYH0D5kJEK8VNApMEdR38EoZKNjRhfXut9iE3TtbKdMoo6LUcYSjc
nQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 38230256410470328647950250860
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 15:21:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 15:21:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Morbihan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LA GACILLY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LABORATOIRES DE BIOLOGIE VEGETALE YVES ROCHER SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 't-www.yves-rocher.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29925033045989735417117273380743948169148804150455107902397292828079597439303262193828843329051284624817180105780816518497080246767718877959934352122675418014777234492589887313985673886797777311957949246908522156369912835255595382469017884194366534258356456147777510840014451289845004672186837718953109908157983368099613311776975522638294501264658867292411122411967504584009474540911054411627343491669552854808843066390725142586008230000696279744841401721149064275184049919983718084314016811590612285671246531139567653958551431237693357530143378670744527377423487641373910385267511332760188079730532376713173389597853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-www.yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-www.yves-rocher.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m-yves-rocher.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-www.yves-rocher.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 't-m.yves-rocher.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							116b5d2e3878d2b794fbfec00d8347dade2c9f72
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000161330f148f000004030048304602210086a3d7e451e80f60e1a4bac14e6fe9c17be1be98237c28038ec110bb5ff9dfed022100b80b4a633e7d94738bc13874f887494ffc8600eba8a2d9e3868d7d4b4f34ec660076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000161330f14d60000040300473045022046c241f4ae49cb05eb46c1068ed1e8cf602b403c903be16c467fdac12c4cb8f6022100f3ab9fffae7ba5365879faf89cca1fd1dc8b1e14c3550adc906a894653010fc1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161330f17510000040300483046022100d3fc8e87328609ef814fbee23d744a5610e9bd54286c6a6b401c113ed12d7fbe022100fc96c56be61e1d90d142138da691e75df0e23a618b6d2fba90776bacdffcebf2007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000161330f1a4a000004030046304402203fdd3963a25526daf5d417cd20e3c112e2571793930db7e93edb3560c6913a95022005d014ac21ab131c38bec059b8fe3de9e3155800358426f05929236141090d35
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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