admin.connect.opel.com

Issued by Amazon

About this certificate

This digital certificate with serial number 09:b3:41:6a:15:a2:b1:2b:8d:cd:4f:08:92:dd:4f:8e was issued on by Amazon.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.connect.opel.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:b3:41:6a:15:a2:b1:2b:8d:cd:4f:08:92:dd:4f:8e
Serial Number (int): 12893799861247308723559753366498004878
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 0f:51:1a:e5:e0:2e:3a:20:37:5b:d0:2d:84:98:2a:1b:9c:c0:d0:be
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 81:ec:de:7d:a0:7b:64:c2:cb:4a:f3:3c:73:92:69:21:61:33:3d:af
Fingerprint (sha256): 14:3c:bc:b3:d7:ce:13:bf:2c:7f:6b:86:7d:09:98:6f:fa:e5:2b:a9:ab:bd:40:d8:30:88:58:32:f5:b7:c3:a2

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate admin.connect.opel.com

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.connect.opel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.connect.opel.com
admin.connect.opel.at
admin.connect.opel.es
admin.connect.opel.pl
admin.connect.opel.cz
admin.connect.vauxhall.co.uk
admin.connect.opel.is
admin.connect.opel.gr
admin.connect.opel.it
admin.connect.opel.ch
admin.connect.opel.se
admin.connect.opel.hu
admin.connect.opel.ie
admin.connect.opel.si
admin.connect.opel.sk
admin.connect.opel.no
admin.connect.opel.de
admin.connect.opel.fi
admin.connect.opel.be
admin.connect.opel.pt
admin.connect.opel.ro
admin.connect.opel.nl
admin.connect.opel.lu
admin.connect.opel.hr
admin.connect.opel.fr
admin.connect.opel.dk

Other certificates including the domain name opel.com

(limited to 100 certificates)
*.opel.com
tis2web.service.opel.com
www.opelusadoscertificados.pt
abarth.pt
s.opel.com
prd.connect.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
uat-admin.connect.opel.com
dev.connect.opel.com
uat.connect.opel.com
aemdevms4-connectivity.alfaromeo.com
aemstagems4-connect.alfaromeo.com
www.opel.cz
rusipvmns0001.rus.opel.com
media.gm.com
www.gm.com
new-odnm.opel.com
wpg-wpfarm2-prdl2x.opel.com
aemstagems4-connect.alfaromeo.com
pat.connect.opel.com
dev.services-store.dsautomobiles.com
prechat.opel.com
abarth.pt
prd-admin.connect.opel.com
rusipvmova010.ad.opel.com
dpromo.abarth.it
rusitvmcrd011.rus.opel.com
www.opelusadoscertificados.pt
gf.preprod.opel.com
rusipvmova003.ad.opel.com
trn-admin.services-store.dsautomobiles.com
inf.connect.opel.com
gmid.opel.com
pat.services-store.dsautomobiles.com
pat.connect.opel.com
lm2insciv002-vl1729.lm2.opel.com
www.buick.com
ppr.connect.opel.com
abarth.pt
abarth.pt
www.asconnect.opel.com
rusipvmova006.ad.opel.com
spoepc.xw.gm.com
pat.services-store.dsautomobiles.com
www.opel.cz
dev-admin.connect.opel.com
trn.services-store.dsautomobiles.com
aemstagems4-connect.alfaromeo.com
www.gm.com
abarth.pt
rimpsa.opel.com
inf.connect.opel.com
dev.services-store.dsautomobiles.com
sip-hr.mpsa.com
gsa.rus.opel.com
sip-hr.mpsa.com
www.buick.com
dev-admin.services-store.dsautomobiles.com
rusipvmpsa1189.ad.opel.com
spoepc.xw.gm.com
pat.connect.opel.com
media-professional.peugeot.ru
abarth.pt
aemdevms4-connectivity.alfaromeo.com
CRMIT.ext.opel.com
accessr.opel.com
dev-admin.connect.opel.com
pat.services-store.dsautomobiles.com
abarth.pt
services-store.peugeot.fr
dev.connect.opel.com
www.buick.com
abarth.pt
ipgidvmdev117.ipg.opel.com
iessapdt4.opel.com
spoepc.xw.gm.com
www.buick.com
www.opel.cz
rusipvmpst152.rus.opel.com
dpromo.abarth.it
aemdevms4-connectivity.alfaromeo.com
www.opel.cz
admin.connect.opel.com
sip-hr.mpsa.com
www.gm.com
www.opel.cz
pat.services-store.dsautomobiles.com
dev.connect.opel.com
sip-be.mpsa.com
lm2ipvmpsa056.lm2.opel.com
abarth.pt
mves.opel.com
cps.opel.com
admin.connect.opel.com
www.opel.cz
sip-be.mpsa.com
ipgitvmtst182.itpg.opel.com
dev-admin.connect.opel.com
pat-admin.connect.opel.com

Certificate

The complete raw certificate details for admin.connect.opel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtM8/4J29eq00W4Ns7GlQ
xHh+gWZFqQgytpJWl1DHeuCoSrfm0vLba3NFuTuySm/5CyoNGd7upSzZ2BmMX2e2
8C+yZeiank3WmS72BKUHhe6LbzkDRy8Bi8s28nD/PnsBfrT61Vp2we3Rxw9wZUqG
NffgPnKgiZ3sl6n0Fpan9nGF0409xFIFxrAkjQGYejlW3w07ieblBftmCS6zYqoq
hwNRBWEWkS2K5XTLS4SnpWn4NDSDXZXebhnA9pMXhwk+T+eQjD59w63hcgaKncXk
2lZpQDPxBr76+S8ZwBB444w1LduFztXeebtI86YYd5aesEVymkxXTCwlHV69uBQi
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12893799861247308723559753366498004878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.connect.opel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22825093441747257583087838914594763919371037384565973374435267360590836734132224023623514765581030281390467593348273772477650416690873765134291989616612429780172159976148012498473683659910620425018093812316094034512622129034174335418265749186626325890658617992644128946361919115046158353676039595443585132672673123777443126054715021527819117513079490857535781212647223215563392293702171230933071984953781589870245430775519655167429125474681062415407137028506839864549881117364693104295569891692141007091377345620576513863606335020439111832639496543109076871548143171828862329828828988915059022716356695072142106305161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0f511ae5e02e3a20375bd02d84982a1b9cc0d0be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (610 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.cz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.vauxhall.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.is'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.gr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.hu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.si'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.sk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.no'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.pt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.lu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.hr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.connect.opel.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d4700000177e1202c47000004030047304502210091db698f3443efb14b9f665fb6edb5ec37ced6072f07b3853d263d4b73ef5b4e022068aaf1ddbb897014d22bf8a0eb96f83f3c0c23c9da1452c73909b05f5dbe49090076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f0200000177e1202c590000040300473045022070bfc6467856f700011e00e5941e051620bdbb1f9dfc2adc15ab60bcee214caa022100c5b8bbcecb372c82e0cd9dacd590da79c124e96ca9a89e8d58f6eaca3fc18892
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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