download.macwelt.de

Issued by Amazon

About this certificate

This digital certificate with serial number 0c:63:2a:7a:9c:fc:51:d3:79:9c:9f:ad:7d:81:41:cd was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=download.macwelt.de

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:63:2a:7a:9c:fc:51:d3:79:9c:9f:ad:7d:81:41:cd
Serial Number (int): 16465634914037815771861079866382303693
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:cb:48:e1:0d:62:9d:11:35:4f:1e:68:2d:36:0a:77:2b:b7:b0:fe
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 71:d7:03:1c:27:71:1e:35:70:b3:f6:c9:52:4b:f4:b0:d8:9a:90:2e
Fingerprint (sha256): 17:7a:9b:33:7d:65:34:6f:8f:b7:0b:a3:4b:35:b6:05:3e:36:ed:8d:0e:b1:f5:b5:d1:89:02:99:22:44:20:9a

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate download.macwelt.de

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for download.macwelt.de

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

download.macwelt.de
cf.downloads-mw.idg.zone

Other certificates including the domain name macwelt.de

(limited to 100 certificates)
cmp.channelpartner.de
magazin.macwelt.de
whitepaper.computerwoche.de
consent.planetradio.co.uk
*.macwelt.de
addefend.idg.zone
images.macwelt.de
*.macwelt.de
whitepaper.cio.de
mobil.pcwelt.de
amp.macwelt.de
images.macwelt.de
beta.computerwoche.de
*.macwelt.de
beta.computerwoche.de
api.pcwelt.de
amp.pcwelt.de
download.macwelt.de
mms.sp-prod.net
cmp.channelpartner.de
dg-0051-aa2de51.client-tls.adestra.com
macwelt.de
cmp2.channelpartner.de
mobil.pcwelt.de
magazin.macwelt.de
*.macwelt.de
dg-0051-aa2de51.client-tls.adestra.com
beta.computerwoche.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
magazin.macwelt.de
apps.macwelt.de
macwelt.de
beta.computerwoche.de
images.idg.zone
images.idg.zone
magazin.macwelt.de
beta.computerwoche.de
fia.pcwelt.de
magazin.macwelt.de
cmp2.channelpartner.de
beta.computerwoche.de
images.idg.zone
macwelt.de
macwelt.de
whitepaper.computerwoche.de
macwelt.de
amp.macwelt.de
cmp2.channelpartner.de
cmp.idg.tv
techrps.idg.zone
cmp.academics.at
cmp.academics.at
cmp2.channelpartner.de
cmp.academics.at
amp.pcwelt.de
macwelt.de
images.macwelt.de
images.macwelt.de
cmp.academics.at
images.idg.zone
macwelt.de
apps.macwelt.de
cmp.academics.at
beta.computerwoche.de
newsletter.pcwelt.de
images.idg.zone
shop.computerwoche.de
macwelt.de
magazin.macwelt.de
magazin.macwelt.de
cmp.idg.de
mms.sp-prod.net
amp.macwelt.de
cmp.idg.tv
macwelt.de
amp.pcwelt.de
whitepaper.computerwoche.de
macwelt.de
apps.macwelt.de
amp.pcwelt.de
cmp.academics.at
addefend.idg.zone
dg-0051-aa2de51.client-tls.adestra.com
whitepaper.cio.de
magazin.macwelt.de
mobil.macwelt.de
newsletter.pcwelt.de
whitepaper.cio.de
cmp2.channelpartner.de
api.pcwelt.de
techrps.idg.zone
*.macwelt.de
amp.macwelt.de
fia.pcwelt.de
techrps.idg.zone
macwelt.de
images.idg.zone
macwelt.de

Certificate

The complete raw certificate details for download.macwelt.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiTCCBHGgAwIBAgIQDGMqepz8UdN5nJ+tfYFBzTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTA3MDMwMDAwMDBaFw0yMDA4MDMx
MjAwMDBaMB4xHDAaBgNVBAMTE2Rvd25sb2FkLm1hY3dlbHQuZGUwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMmECSjpKONPnrJ282O9V0fuPLhGVpqI3C
3Zy15/qO4XDzMoTnIfRhcwC0NmiF1ZU9H38Wb8L2ftzBVT2bJ8tsWIPgT/8LPWss
QRzdUXmVTMQfwbWLB7dzUBoeWm4Hx//LjvDK+1M6puf2jdLuXeTWw7It9pP7cj5s
n09XazvN5pQSXez6NDSG+JNzjXw9aw6EIq2o0qGGqggVPSGi6DctfuOnwjYkCJ2h
ehhA9y8vyBsfTrRgYqt8LU8XljhPDHE0RriBs+Jx9X4ELThpRv5Sr/O/FXBGpEgs
Ura/ygPMJMsSQ342XFl+4qa/GumcgOFM6p3GIItmSdcqV49ssKjZAgMBAAGjggKZ
MIIClTAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQU
wstI4Q1inRE1Tx5oLTYKdyu3sP4wOAYDVR0RBDEwL4ITZG93bmxvYWQubWFjd2Vs
dC5kZYIYY2YuZG93bmxvYWRzLW13LmlkZy56b25lMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq
aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1Ud
IAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI
KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr
BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu
Y3J0MAwGA1UdEwEB/wQCMAAwggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdgC72d+8
H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWu1dmjVAAAEAwBHMEUCIAKD
WK8GngnlyZXgrt3l1PC8KXL6aEIoD1hk6rGOpTkLAiEA8iZDy/qP8ffv1se7io4D
hT/LvhmR0k2f1jvKMxBeWPwAdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/
XqCDDwAAAWu1dmkeAAAEAwBHMEUCIBsO7z2WJ9ybHJvZ2SaKByVzuemNBg7vBry0
5tNen3UrAiEAn8KrJN9AEkvC5jLA/bKwGzPTWxnVrPaOpaqo8fQVfhcwDQYJKoZI
hvcNAQELBQADggEBAJ/2f8xKPU1od6S6soRw1EqIn66wEBZKjion3DoLB/JdACcB
ufFaAM42xD8CCsIaV1MOnfwKkdS/K9y4Mfwcm2u4owQlX6SlRSZvI2Sggw6oKy3V
0a+eQdqc9l1qruHoX3+z9fTiXzQcxvlT/oo4GLsHJuSYRZiC2dqVhs4Kyl5RKY6c
AHEkjW0FT+JROW9Ru+eM0/2T8qZTC5ghbr7rSab8K4AVI+xsdpcG/wnSWQwqeEw6
s+Co0rJakYaWDUy0rZ8c49T9Yv2E5TjoeNm8vY7BNjOlX3ehNY0+vLzaEHw51TQY
vzBAJEyexYq3R6nUOxBJ31GHj9k8adjq3CPhsUg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzJhAko6SjjT56ydvNjvV
dH7jy4RlaaiNwt2ctef6juFw8zKE5yH0YXMAtDZohdWVPR9/Fm/C9n7cwVU9myfL
bFiD4E//Cz1rLEEc3VF5lUzEH8G1iwe3c1AaHlpuB8f/y47wyvtTOqbn9o3S7l3k
1sOyLfaT+3I+bJ9PV2s7zeaUEl3s+jQ0hviTc418PWsOhCKtqNKhhqoIFT0houg3
LX7jp8I2JAidoXoYQPcvL8gbH060YGKrfC1PF5Y4TwxxNEa4gbPicfV+BC04aUb+
Uq/zvxVwRqRILFK2v8oDzCTLEkN+NlxZfuKmvxrpnIDhTOqdxiCLZknXKlePbLCo
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16465634914037815771861079866382303693
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'download.macwelt.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25827692588995602240354104701744150339963154945039014945827263537765070306075736771894038383626298099806997611593479581907450805453822824200950741291053159748284466193248704388988819370982574690863113256115634832516964813096401650167913444091884944892235025552699724678746619338985995354599090936712105866416427919314911487380422926176447349688320922412223527663180916693646731501794726034560978170509008717883982359637699707683914853935334845201441538314151134754785255265865083496639066162537083777116892644158070468409918954272085305299148647160891102089770879377698638838145088152904822065453786653905728796928217
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2cb48e10d629d11354f1e682d360a772bb7b0fe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'download.macwelt.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cf.downloads-mw.idg.zone'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016bb57668d500000403004730450220028358af069e09e5c995e0aedde5d4f0bc2972fa6842280f5864eab18ea5390b022100f22643cbfa8ff1f7efd6c7bb8a8e03853fcbbe1991d24d9fd63bca33105e58fc0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016bb576691e000004030047304502201b0eef3d9627dc9b1c9bd9d9268a072573b9e98d060eef06bcb4e6d35e9f752b0221009fc2ab24df40124bc2e632c0fdb2b01b33d35b19d5acf68ea5aaa8f1f4157e17
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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