partners.weber.saint-gobain.com

- Saint-Gobain India Private Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 03:c1:43:dc:91:96:4e:06:8a:74:fa:ae:16:9f:9b:3c was issued on by DigiCert Inc.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Saint-Gobain India Private Limited

Organization: Saint-Gobain India Private Limited
State / Province: Tamil Nadu
Locality: Sriperumbudur
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:c1:43:dc:91:96:4e:06:8a:74:fa:ae:16:9f:9b:3c
Serial Number (int): 4991173677748200913370714333912210236
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: f8:90:6d:99:3e:ba:29:4e:ca:7b:d7:03:f5:b9:9d:21:2e:c1:9b:03
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3f:6a:06:73:c1:c5:c3:00:c6:ca:aa:f3:4d:bc:38:77:a1:7e:de:d0
Fingerprint (sha256): 12:9e:6d:67:73:39:58:ed:2f:f9:c2:76:61:87:6b:01:dd:0f:5a:7c:12:37:c3:6b:05:ab:24:4a:50:3f:69:87

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate partners.weber.saint-gobain.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partners.weber.saint-gobain.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partners.weber.saint-gobain.com
www.partners.weber.saint-gobain.com
weberfrontapi.saint-gobain.com
partners.loyalty.saint-gobain.com
cconnect.saint-gobain.com
uat.weberfrontapi.saint-gobain.com
uat.weberloyalty.saint-gobain.com
uat.cconnect.saint-gobain.com
uat.partners.loyalty.saint-gobain.com

Other certificates including the domain name saint-gobain.com

(limited to 100 certificates)
imperva.com
mobilemail2.saint-gobain.com
imperva.com
www.chartercampaign.saint-gobain.com
*.extranet.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.saint-gobain.com
www.saint-gobain.com.tr
pprugmobileservice.saint-gobain.com
bimlibrary.saint-gobain.com
www2.plastics.saint-gobain.com
imperva.com
design-challenge.saint-gobain.com
ppmobilemail.saint-gobain.com
boost.glass.saint-gobain.com
multimedia.newsletter-im.saint-gobain.com
incapsula.com
store.processsystems.saint-gobain.com
*.website4sg.saint-gobain.com
mail5.saint-gobain.com
gec.saint-gobain.com
bimauthorization.saint-gobain.com
surveys.saint-gobain.com
www.blackpool-powertools.co.uk
incapsula.com
customersmdm-ceramics-int.saint-gobain.com
employee.saint-gobain.com
prosource.app.saint-gobain.com
uat.valueplus.saint-gobain.com
imdf-userguide.im.saint-gobain.com
securelogin.saint-gobain.com
*.fts.saint-gobain.com
www.saint-gobain.fr
www.repairservices.sefpro.com
pprugmobileapps.saint-gobain.com
incapsula.com
boost.sekurit.saint-gobain.com
www.saint-gobain.com
fr-partners.ras.saint-gobain.com
www.bearings.saint-gobain.com
valmobilemailpki.saint-gobain.com
valrugmobileapps.saint-gobain.com
mobilemail2.saint-gobain.com
www.refractories.saint-gobain.com
partners.weber.saint-gobain.com
www.bearings.saint-gobain.com
imperva.com
exch.saint-gobain.com
business-challenge-2018.saint-gobain.com
imperva.com
valrugmobileapps.saint-gobain.com
api.o365guestaccessreview.saint-gobain.com
midco.saint-gobain.com
sip.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
ftp.boost.sekurit.saint-gobain.com
sga-userguide.im.saint-gobain.com
mail6.saint-gobain.com
catalog.biopharm.saint-gobain.com
store.saint-gobain.com
api.cockpit.saint-gobain.com
uat.cloudgateway.saint-gobain.com
videos.saint-gobain.com
customer-eu.lifesciences.saint-gobain.com
store.processsystems.saint-gobain.com
imperva.com
mail10.saint-gobain.com
benelux-register.saint-gobain.com
go.nordic.saint-gobain.com
mdm-uatsupplier.im.saint-gobain.com
*.fts.saint-gobain.com
catalog.biopharm.saint-gobain.com
*.im.saint-gobain.com
webmail.saint-gobain.com
giws.saint-gobain.com
www2.plastics.saint-gobain.com
*.notilus.saint-gobain.com
surveys.saint-gobain.com
www.saint-gobain.com
valmobilemail.saint-gobain.com
www.saint-gobain.com
www.saint-gobain.com.tr
www.bearings.saint-gobain.com
mdm.saint-gobain.com
www.saint-gobain.com
partners.weber.saint-gobain.com
colibri.saint-gobain.com
www.bearings.saint-gobain.com
peg.saint-gobain.com
bimlibrary.saint-gobain.com
easyload.isogypfr.saint-gobain.com
imperva.com
bimlibrary.saint-gobain.com
www.saint-gobain.com.tr
www.blackpool-powertools.co.uk
flyover2019.saint-gobain.com
guest.saint-gobain.com
*.saint-gobain.com
marketing-development.saint-gobain.com

Certificate

The complete raw certificate details for partners.weber.saint-gobain.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GQBkahPVDhvCXHXwI9+
S1Dang7ki3IbGqjRKcEA18ODp7y6qXCMOHxoOMRLQUTdQkIJ0ZyAN9peU4ZjeH6k
Yh4rZkKkA+JE5K6v9txZuJVLuWme+PtNrkdM4DXGP/eQJIESHAuhxSsK2kwLa4UA
4RpjhGJOAxSDro/tZScKvZpuMdn2X+l/y7Bx5NytyCBQH0uNA18hFKUswwpB4Ft2
ZjZHZ5lVzdnPYb9k5OTkW4X6waLuukU97Gw086x/RO7IataQNcL62wNco+G1ayvV
nT10whifWn3f67y4qhLcO2Bdmifs9g4gf2dKjb6I5oVfTkGnt7nMlyRHRL3Oc32l
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4991173677748200913370714333912210236
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tamil Nadu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sriperumbudur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saint-Gobain India Private Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partners.weber.saint-gobain.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26811835512908902213152601395370911968095036975398867665574782471445196031074347729644821828697043287776770726060151561900281720225296139095915720929089747790828084582658317478691577873777711429487105214244372230165925160766860802626391048795083926272114752805346007505354891786575707508095590003728786582317655229179371439123529339142960686685745347885056994312703258350659010318005354635249566435205982027435831964581183972982867376099660447063591387008438550044042305561580010299651457630321894885259269286128301859141729742619527238960609901180919155900064057454961406834395284098295208583508858366823878579037537
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8906d993eba294eca7bd703f5b99d212ec19b03
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.weber.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.partners.weber.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'weberfrontapi.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.loyalty.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cconnect.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.weberfrontapi.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.weberloyalty.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.cconnect.saint-gobain.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uat.partners.loyalty.saint-gobain.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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