*.investorhq.businesswire.com

- Business Wire, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:83:3f:ab:87:46:a5:40:55:00:2c:74:c0:d5:fd:60 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Business Wire, Inc.

Organization: Business Wire, Inc.
Organization unit: Web
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:83:3f:ab:87:46:a5:40:55:00:2c:74:c0:d5:fd:60
Serial Number (int): 17961446215358670271966270877752229216
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: a6:34:9b:58:d9:85:62:d9:d4:ae:2f:5a:26:61:cb:0b:e7:da:a5:f4
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 55:20:36:9c:66:1d:42:d3:59:cd:6e:3e:8d:34:9e:92:72:7f:86:61
Fingerprint (sha256): 1a:60:d8:5f:ba:7f:b3:cf:05:3e:5d:9f:b3:ee:b0:96:f2:c4:b8:ee:9d:52:16:29:db:64:09:20:bb:fb:0b:32

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.investorhq.businesswire.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.investorhq.businesswire.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.investorhq.businesswire.com
investorhq.businesswire.com

Other certificates including the domain name businesswire.com

(limited to 100 certificates)
bw-webproxy-v1.dev.aws.businesswire.com
platform.int.aws.businesswire.com
acsc2.businesswire.com
membership.businesswire.com
*.test.businesswire.com
careers.businesswire.com
platform-internal.test.aws.businesswire.com
pr.businesswire.com
careers.businesswire.com
api-docs-web-v2r1.int.aws.businesswire.com
ir.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
news-search.aws.businesswire.com
platform.dev.aws.businesswire.com
mtadmz2.nyprod.businesswire.com
platform-internal.dev.aws.businesswire.com
interactive.businesswire.com
*.businesswire.com
newstrak-testing.dev.aws.businesswire.com
*.hqprod.businesswire.com
pr.businesswire.com
platform-internal.int.aws.businesswire.com
*.businesswire.com
platform-duffytest.sandbox.aws.businesswire.com
*.test.newshq.businesswire.com
www-origin.staging.aws.businesswire.com
yahoo-feed.aws.businesswire.com
apidocs.int.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com
connect.businesswire.com
resources.businesswire.com
es.dev.aws.businesswire.com
platform-v2.dev.aws.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
etools.osimail3.us
snrtrak.aws.businesswire.com
www.businesswire.com
membership.businesswire.com
secure.businesswire.com
newsroom.businesswire.com
api-docs-web-v2r1.dev.aws.businesswire.com
www-origin.dev.aws.businesswire.com
platform.aws.businesswire.com
*.newshq.businesswire.com
www.businesswire.com
careers.businesswire.com
*.investorhq.businesswire.com
blog.businesswire.com
etools.osimail3.us
platform.prod.aws.businesswire.com
apidocs.int.aws.businesswire.com
*.newshq.businesswire.com
snrtrak-proxy-v1.dev.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
access.businesswire.com
www.test.businesswire.com
platform-internal.int.aws.businesswire.com
bw-webproxy-v1.int.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
platform.sandbox.aws.businesswire.com
platform.sandbox.aws.businesswire.com
test-aws.businesswire.com
services.businesswire.com
odysseyresorts3.test.newshq.businesswire.com
tradeshow.businesswire.com
go.sandbox.aws.businesswire.com
newsroom.businesswire.com
etools.osimail3.us
bw-webproxy-v1.test.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
*.qa.investorhq.businesswire.com
*.test.investorhq.businesswire.com
*.newshq.businesswire.com
etools.osimail3.us
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
*.test.newshq.businesswire.com
newsroom.businesswire.com
mtadmz1.scprod.businesswire.com
apidocs.int.aws.businesswire.com
mtadmz1.nyprod.businesswire.com
platform-internal.int.aws.businesswire.com
newsroom.businesswire.com
akamai-logs-v2r1.dev.aws.businesswire.com
*.investorhq.businesswire.com
etools.osimail3.us
cmwb-e.test.investorhq.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
platform-internal.int.aws.businesswire.com
investAka2.investorhq.businesswire.com
connect5.dev.aws.businesswire.com
education.businesswire.com
platform-internal.int.aws.businesswire.com
www.businesswire.com
av.dev.aws.businesswire.com
snrtrak.sandbox.aws.businesswire.com

Certificate

The complete raw certificate details for *.investorhq.businesswire.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA563Kp+IMc5U90xkLaLi1
NRP2rrePdFsaDdu8K613wTncijxyDjhn8km9zpuAPR3KrBRHF5n6St1LV0e0Ad3B
8nv9FgXuwZvZCXfqqspUs79JTuBTE5SHFQnJyRXmiqjdlmHB6UWqfdEcKMJmzlNQ
ZBbbEf6rQiFQiWLwruyGGtGWVG4IpThFTd4Q7Wrm6E0tySppr1NWSJGoXyiBF6xD
Xzmbm6GJ6yENvA2BPU0YtBKKgkDpsuV9B8av8Lj/s6GDnPeyFr4sqyMouEOgFxSf
uUGAlWh49cp9Lc/GgkRTUlbACkp5Uk8ZgZxVF6OwTBlX6bSFRXumNeXEZ2gRE3kM
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17961446215358670271966270877752229216
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Wire, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.investorhq.businesswire.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29246748291125208888347856572971248122543584670240202302525391677668859118014184220873938435137506588928307861142479134222434087441900214614216783992573904841769751391207037824414790856789909980512805571476131718127061970393550134159041322804263700463996417093778089580488762458873751343176779429860739586699469750151720810343143136111254985025319104103141203652812412868357267516201115634126607087000505740847131157004945842074688617400524043838408129814588420809660956981921884604884461154780634487336325269369468891661612304992526355749757204320404286027196010513773854110263729220392362445495617004339696143764519
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a6349b58d98562d9d4ae2f5a2661cb0be7daa5f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.investorhq.businesswire.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'investorhq.businesswire.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000171374c46cc0000040300463044022052a05d499021752451be16c3ea9940ac4c4651c90cd8971cb41011494e0fdeb4022058846a2cb9c6f604ab49a786713ec971df7b026bbcf178490e81c959b112c0cd007600eec095ee8d72640f92e3c3b91bc712a3696a097b4b6a1a1438e647b2cbedc5f900000171374c47430000040300473045022100efeff1f71775c6d1eb8bb022e386bc607d87f7582946368f95347c074369da8202206dc6bc1e352f8d43620eb74e2b2f722c1cab4f22c965b6a8ca78d9c1d8d9fd15
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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