*.us.trendnet.org

- Trend Micro Inc. -

Issued by AffirmTrust Certificate Authority - OV1

About this certificate

This digital certificate with serial number 8d:77:1f:0e:06:cb:d8:87:00:00:00:00:58:09:35:26 was issued on by AffirmTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trend Micro Inc.

Organization: Trend Micro Inc.
State / Province: Texas
Locality: Irving
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 8d:77:1f:0e:06:cb:d8:87:00:00:00:00:58:09:35:26
Serial Number (int): 188039660597834115490496383167557612838
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2d:a8:af:00:fb:69:3a:f1:1e:88:c4:37:17:d1:fe:6d:4b:29:55:8d
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4

Fingerprint (sha1): 84:c5:14:d2:0a:7d:eb:51:c8:58:84:5f:a1:bd:77:d9:19:b1:43:0e
Fingerprint (sha256): 1c:3d:e9:71:e9:db:d0:3b:07:16:69:2a:ec:22:d2:d4:b3:3b:09:d3:cf:7d:27:be:0f:36:59:8c:91:24:3b:c7

Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl

Check the revocation status for certificate *.us.trendnet.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.us.trendnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.us.trendnet.org
us.trendnet.org

Other certificates including the domain name trendnet.org

(limited to 100 certificates)
*.trendnet.org
liberalapi-tmp.sdi.trendnet.org
phvm-is-radius3.ph.trendnet.org
ca-ets-labvcenter.us.trendnet.org
phvm-gsd-sslaut.ph.trendnet.org
edc2kafkazk2.eu.trendnet.org
*.trendnet.org
*.trendnet.org
SJDC-NAV17WEBS2.us.trendnet.org
ie-lansweep-01.eu.trendnet.org
aws-billingapi.plsstg.trendmicro.com
edc2kafkaschema.eu.trendnet.org
SJDC-KAFKABK5.us.trendnet.org
*.trendnet.org
*.us.trendnet.org
jdc2-ise01.jp.trendnet.org
hubstg.trendmicro.com
sjc1-gfr-vip2.sdi.trendnet.org
itk8sd.tw.trendnet.org
us-ets-nexusproxystg.us.trendnet.org
PHVM-IS-AACTI.ph.trendnet.org
us-ets-fs01.us.trendnet.org
nj-594-rdgw.tw.trendnet.org
sjdc-infosec-arcmc.us.trendnet.org
horusapi-ibeta.sdi.trendnet.org
virtualsharesstg.trendnet.org
sjc1-tmus-ops.sdi.trendnet.org
virusRDP2.tw.trendnet.org
tw-ets-rgw06.tw.trendnet.org
ca-ot-yogi.us.trendnet.org
hrfoundation.trendnet.org
senna.aptinfra.tw.trendnet.org
nj-ets-labfs.tw.trendnet.org
*.terra-stg-vtr.vtr.trendnet.org
eunavposita.eu.trendnet.org
*.vtr.trendnet.org
infra.mars.trendmicro.com
minionapi-tmp.sdi.trendnet.org
de-ddwi-01.eu.trendnet.org
*.sdi.trendnet.org
kallitest.us.trendnet.org
*.us.trendnet.org
SJDC-KAFKAAPI1.us.trendnet.org
sjdc-scssoapp.us.trendnet.org
tw-ets-rgw08.tw.trendnet.org
virtualshares.trendnet.org
nj-ets-fs.tw.trendnet.org
SJDC-KAFKABK2.us.trendnet.org
tw-ets-rg03.tw.trendnet.org
kkbox.tw.trendnet.org
sjdc-nabuintapp.us.trendnet.org
cloudcntr.sdi.trendnet.org
OCSEG.TRENDNET.ORG
adc-lcmweb01.tw.trendnet.org
pr2g.baplsstg.trendmicro.com
EDC2VMNAVSITB18.eu.trendnet.org
nj-ets-labfs.tw.trendnet.org
regalpha.trendnet.org
apollo-reports.eu.trendnet.org
login-tmp.trendmicro.com
sjdckafkabk.us.trendnet.org
mybuddiy.us.trendnet.org
NJ-ETS-MSDN.TW.TRENDNET.ORG
ddan.tw.trendnet.org
SJDC-NAV17WEBS1.us.trendnet.org
tw-ets-vra.tw.trendnet.org
tw-ets-rg03.tw.trendnet.org
aws-iapi.plsbeta.trendmicro.com
phvm-gsd-sslaut.ph.trendnet.org
tw-ets-jksgw3.tw.trendnet.org
tw-magw.tw.trendnet.org
tw-ets-fs.tw.trendnet.org
aws-billingapi.plsprod.trendmicro.com
nj-ets-rgw.tw.trendnet.org
hrfoundation.trendmicro.com
aws-emsapi.plsprod.trendmicro.com
dozer.aptinfra.tw.trendnet.org
OCSEG.TRENDNET.ORG
submit.aptinfra.tw.trendnet.org
EDC2NAVSTG021.eu.trendnet.org
driapi-beta.sdi.trendnet.org
tw.trendnet.org
threatsearch.tw.trendnet.org
analyze.aptinfra.tw.trendnet.org
lmpi-beta.sdi.trendnet.org
edc2kafkazk5.eu.trendnet.org
TW-ETS-LABFS.tw.trendnet.org
tw-ets-ddwi.tw.trendnet.org
edc2kafkastream1.eu.trendnet.org
us-ets-nexusproxy.us.trendnet.org
aws-sdiadapter.plsbeta.trendmicro.com
edc2kafkazk4.eu.trendnet.org
tw-ds-labfs.tw.trendnet.org
SJDC-NABURADIUS.us.trendnet.org
www.vrli-sjdc.trendmicro.com
nj-rdsec-msdn.tw.trendnet.org
sjdc-gissmonjob.us.trendnet.org
sjdc-selenium.us.trendnet.org
pr2g-beta.trendnet.org
SJDC-KAFKAAPI2.us.trendnet.org

Certificate

The complete raw certificate details for *.us.trendnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0GB/eK3ezUL83vH7qGLJ
4S4UvcJPc3TtY+kdzO74hcNKkqrj7JwmVyhBp3uIfUflSjfWoIXwhpg8VhjDpOWp
8EnItuEtOIT4YSkpEIu4VLs16rbAbxhsv0ERicGgiP1bvfRkrlhr4d9qhXvYDLmw
qv14tH6KTwIcaLOzgATJMFiepF7wNtWlGskbcN0mFp0r4XhMuWm7MYS/oK6JE6rP
9LX8DYc6KFzGCreGgSuNpjynlUGw9TFSiSA3eYa+ZM+nAdWIO0GYF9jdXGNk6x3k
3r4Wc+8aweX44iuIKwz/W73BNT4YhlNLm6TvmkGOaExTU+JeO3eHSjqcV3PLbCYQ
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 188039660597834115490496383167557612838
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-17 11:52:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 12:22:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.us.trendnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26305152338285325891891395707056469625192468436611407145077676010538928298287271461075445687806791638527575120448009132385933673286448863416901210870161556350200916431222475195502579775519471889649004603505576361302721261501768935594713953523061674631220728276912671343727750830380331840288335953940604980978743473698789653359612267133911271754937726619649875475173751976555485631288541680854994594382647896842736958960371704331048305982984036564610041095261545606595749383572479195620664151871580107310182492181690323053576275610583940271547407106314364641029077003209273223642310908404735659633740743036899378466899
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.us.trendnet.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'us.trendnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2da8af00fb693af11e88c43717d1fe6d4b29558d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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