*.aemedia.com
Issued by RapidSSL SHA256 CA
About this certificate
This digital certificate with serial number 3d:39:89:eb:90:34:c1:62:7b:29:46:0a:d0:07:77:83 was issued on by GeoTrust Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=*.aemedia.com
GeoTrust Inc.
Organization:
GeoTrust Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3d:39:89:eb:90:34:c1:62:7b:29:46:0a:d0:07:77:83Serial Number (int): 81381666017179863343206349455600613251
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f
Fingerprint (sha1): 45:1b:c0:ac:3a:00:e4:fa:fb:24:1a:8a:99:90:94:5e:3f:cc:ad:40
Fingerprint (sha256): 16:4b:72:00:db:3a:a0:85:c0:bf:e6:2d:61:98:e1:11:8e:4c:d1:db:d2:16:09:8e:83:84:b6:8a:76:fb:fb:8a
Issuing Certificate URL: http://gp.symcb.com/gp.crt
Revocation information
OCSP Server: http://gp.symcd.comCRL Distribution Point: http://gp.symcb.com/gp.crl
Check the revocation status for certificate *.aemedia.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.aemedia.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.aemedia.com
aemedia.com
aemedia.com
Other certificates including the domain name aemedia.com
(limited to 100 certificates)
sipem2.aemedia.com
sip.aemedia.com
*.aemedia.com
sipam1.aemedia.com
outlook.aemedia.com
portalcea.aemedia.com
sip.aemedia.com
sip.aemedia.com
lyncweb.aemedia.com
*.aemedia.com
sipem2.dentsuaegis.com
sipap1.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
LYNCWEB.aemedia.com
mail.aemedia.us
sip.aemedia.com
sip.aemedia.com
excmplatform.aemedia.com
sipap1.aemedia.com
lyncdiscover.dentsuaegis.com
sipem2.aemedia.com
extranet.excmplatform.aemedia.com
lyncweb.aemedia.com
remote.mysites.aemedia.com
sipem2.aemedia.com
*.aemedia.com
lyncdiscover.dentsuaegis.com
sipap1.aemedia.com
wireless.aemedia.com
*.aemedia.com
mail.aemedia.us
sip.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
lyncweb.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
*.springboard.aemedia.com
sip.aemedia.com
*.aemedia.com
outlook.aemedia.com
LYNCWEB.aemedia.com
*.aemedia.com
skypewebem1.dentsuaegis.com
sipap1.aemedia.com
clientextranet.aemedia.com
*.aemedia.com
sip.aemedia.com
extranet.aemedia.com
springboard.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
outlook.aemedia.com
sip.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
sipAM1.aemedia.com
outlook.aemedia.com
sipem2.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
*.aemedia.com
sipam1.aemedia.com
outlook.aemedia.com
portalcea.aemedia.com
sip.aemedia.com
sip.aemedia.com
lyncweb.aemedia.com
*.aemedia.com
sipem2.dentsuaegis.com
sipap1.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
LYNCWEB.aemedia.com
mail.aemedia.us
sip.aemedia.com
sip.aemedia.com
excmplatform.aemedia.com
sipap1.aemedia.com
lyncdiscover.dentsuaegis.com
sipem2.aemedia.com
extranet.excmplatform.aemedia.com
lyncweb.aemedia.com
remote.mysites.aemedia.com
sipem2.aemedia.com
*.aemedia.com
lyncdiscover.dentsuaegis.com
sipap1.aemedia.com
wireless.aemedia.com
*.aemedia.com
mail.aemedia.us
sip.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
outlook.aemedia.com
lyncweb.aemedia.com
outlook.aemedia.com
remote.excmplatform.aemedia.com
*.springboard.aemedia.com
sip.aemedia.com
*.aemedia.com
outlook.aemedia.com
LYNCWEB.aemedia.com
*.aemedia.com
skypewebem1.dentsuaegis.com
sipap1.aemedia.com
clientextranet.aemedia.com
*.aemedia.com
sip.aemedia.com
extranet.aemedia.com
springboard.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
outlook.aemedia.com
sip.aemedia.com
LYNCWEB.aemedia.com
sip.aemedia.com
sipAM1.aemedia.com
outlook.aemedia.com
sipem2.aemedia.com
LYNCWEB.aemedia.com
Certificate
The complete raw certificate details for *.aemedia.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFajCCBFKgAwIBAgIQPTmJ65A0wWJ7KUYK0Ad3gzANBgkqhkiG9w0BAQsFADBC MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE3MDQyMTAwMDAwMFoXDTE4MDYyMDIzNTk1 OVowGDEWMBQGA1UEAwwNKi5hZW1lZGlhLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAOobiKfx2TEyHUJwmiUpdLuoyk1Y3pEw9wRsFbwEho/Ey/nz eWw84c3l7AMfNrRQxTMy99NwugBd/BKN3McN8Nz0MasxYZ7QBb+wNcvhaLQzntSU aNRrMm2jD0d3p1Qjr/YrEAn0RDVHtXKA73R9ZKlH8Eymm/3ckD6B/xbIAVAGicu+ 9T3/SSfYXougVaD1LCnf03GJyOOdOhPXJxue2iULu7qkILpd33+3bYCWU1eD3UQ7 aLuiFykGuBpbMEwFfmHjSVSQL1tNCcter4ABjbmYXWN3DqkoA7T3LiP7XudoRo5c WJtTuX3W5u27lGVbO6K9ZKq40W0dqo1BIpS5zOcCAwEAAaOCAoQwggKAMCUGA1Ud EQQeMByCDSouYWVtZWRpYS5jb22CC2FlbWVkaWEuY29tMAkGA1UdEwQCMAAwKwYD VR0fBCQwIjAgoB6gHIYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcmwwbwYDVR0g BGgwZjBkBgZngQwBAgEwWjAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cucmFwaWRz c2wuY29tL2xlZ2FsMCwGCCsGAQUFBwICMCAMHmh0dHBzOi8vd3d3LnJhcGlkc3Ns LmNvbS9sZWdhbDAfBgNVHSMEGDAWgBSXwidQnsLJ7AyIMsh8reKmAU/abzAOBgNV HQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMFcGCCsG AQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2dwLnN5bWNkLmNvbTAmBggr BgEFBQcwAoYaaHR0cDovL2dwLnN5bWNiLmNvbS9ncC5jcnQwggEDBgorBgEEAdZ5 AgQCBIH0BIHxAO8AdgDd6x0reg1PpiCLga2BaHB+Lo6dAdVciI09EcTNtuy+zAAA AVuQIjQIAAAEAwBHMEUCIHcK96M3mX2DgUE+PNVVccrTMrnCX2EPdVCl47wyUy2f AiEA6sOXuDf+SyJbNiYD2npyPv8Haz0qJ2P+LnTEp08QHKEAdQCkuQmQtBhYFIe7 E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVuQIjRYAAAEAwBGMEQCIHkLNOU2eCi3 +oaE/66Hyg/dndE1bNEcp4z8JULbOGSVAiByfswj++qWrQWqdZj+ifJ8hK1MDpP7 iTX8MoHdA4SWCTANBgkqhkiG9w0BAQsFAAOCAQEAXeRAA/+tsL39tOa9mGWdBcKY otPEfAe9npRbU2qiuHqy0cRUL0lsMgTwsrtnXwvf14cOZtdg8rxDS3nKoQ9T+2Kt FFLeeVrrNVscOSSysBJlulpBhmYBLYIDf3OcwQnv0gce5QuIyC0VVH6mzFVk8Xpw cDQgptO5LHixU4zP0mpjaog+Q2AUivVqyroF8aFZEozgkwt6b+vxAiaUNHV52706 lbPGijhWmj37maYIAJJLbCcQoj44imoVR8wpdTk2Bi+j4C/iSjQSU1L2j1se/aKe LU6X4q+0aXGFHSqnIYJ+c1IN/h1P4S3FM4/WpUINm680dgD4O6vv02ZR21bWDw== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6huIp/HZMTIdQnCaJSl0 u6jKTVjekTD3BGwVvASGj8TL+fN5bDzhzeXsAx82tFDFMzL303C6AF38Eo3cxw3w 3PQxqzFhntAFv7A1y+FotDOe1JRo1GsybaMPR3enVCOv9isQCfRENUe1coDvdH1k qUfwTKab/dyQPoH/FsgBUAaJy771Pf9JJ9hei6BVoPUsKd/TcYnI4506E9cnG57a JQu7uqQgul3ff7dtgJZTV4PdRDtou6IXKQa4GlswTAV+YeNJVJAvW00Jy16vgAGN uZhdY3cOqSgDtPcuI/te52hGjlxYm1O5fdbm7buUZVs7or1kqrjRbR2qjUEilLnM 5wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 81381666017179863343206349455600613251 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-21 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-20 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aemedia.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29553340791104790953580025101434629015989611204741750964400845896204632795927865909711646927757013877436245609940000372701798941284658477645710493214654511589170196332813893846820974788915705499774418806611801475498633078073590539163561226981168677380676664052931699094113184779363481176565186266288010814843101825867578999590961979540103691544803983429733757357778396492402945135916091110109124426559350030903140417543532213432972916712163469283580477421090671432363477595622929274129357399555680269925066979195508325549573092900149105268892966738708862322429002179715583144901525884729727085712486805228414660365543 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aemedia.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aemedia.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015b9022340800000403004730450220770af7a337997d8381413e3cd55571cad332b9c25f610f7550a5e3bc32532d9f022100eac397b837fe4b225b362603da7a723eff076b3d2a2763fe2e74c4a74f101ca1007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b9022345800000403004630440220790b34e5367828b7fa8684ffae87ca0fdd9dd1356cd11ca78cfc2542db3864950220727ecc23fbea96ad05aa7598fe89f27c84ad4c0e93fb8935fc3281dd03849609 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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