*.nordenta.dk

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 46:b5:f7:98:7a:ce:c2:01:cd:c3:56:ae was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.nordenta.dk

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 46:b5:f7:98:7a:ce:c2:01:cd:c3:56:ae
Serial Number (int): 21883935498119994328408610478
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: bc:f5:3f:4b:f8:8f:48:5d:65:d6:19:23:14:5d:a9:8d:de:be:50:40
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): dc:6f:fa:10:14:27:f6:17:4a:46:82:82:a5:b1:2e:14:26:7f:ee:46
Fingerprint (sha256): 23:90:b4:2c:11:be:f8:4d:15:20:9d:a8:23:0f:58:9b:6a:b9:70:bc:01:49:63:e0:9a:07:ec:08:12:39:11:f1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.nordenta.dk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.nordenta.dk

Public Key Algorithm

RSA

Key Size

3072

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.nordenta.dk
nordenta.dk

Other certificates including the domain name nordenta.dk

(limited to 100 certificates)
www.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.nordenta.dk
*.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
*.nordenta.dk
www.nordenta.dk
www.licscadenta.no
vpn.nordenta.dk
www.nordenta.dk
*.nordenta.dk
vpn.nordenta.dk
www.licscadenta.no
www.licscadenta.no
*.nordenta.dk
*.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.nordenta.dk
www.licscadenta.no
edge.nordenta.dk
citrix.nordenta.dk
www.nordenta.dk
edge.nordenta.dk
www.licscadenta.no
www.licscadenta.no

Certificate

The complete raw certificate details for *.nordenta.dk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG2zCCBcOgAwIBAgIMRrX3mHrOwgHNw1auMA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDMwNzA3MzUy
OFoXDTI1MDQwODA3MzUyN1owGDEWMBQGA1UEAwwNKi5ub3JkZW50YS5kazCCAaIw
DQYJKoZIhvcNAQEBBQADggGPADCCAYoCggGBANfO1mJ0zzgSHwDOZ5FnLZZBQWdk
MQNWPQDUcWEQokPeXZtXwm4R5Otd5e7T9A+44fIrsi3p9mk6566UuDMIW6ZeWu/I
nJDxF6emIiy8OF/k5UAQIoBetEjuC9gpWUzPW9ScxN6qsRZ5PaVKvvXj/xw+Ly3W
SnuLG7V6md0ficwYgYMkXrUxHnV5MVXA8pa8+eKlJsEGZvSiEWQ5W7xIB96n6dtF
LHHC2uRqYX4oehx3Z51ggYJAezSB/rKWk+TzgNJoYxn54bCVZ7AIqs2QwjBFJrPd
OoC1rXcwWy6Y5GDrLacugSYQ5cHzXdJs1JvQ93B1x5ZAqvY+jUKOuMCa9dTjClk0
QqSTM70Lm3GayYHt97zkL5lnFsxSPofpEVyK970CgzvpmBa2kU7ZFcJ1/Fih6Jsg
xK+AcsjfuIWXfdNNVItziQVfWvp1WIn9H/es36ur3bp02JOYHCa/2CU7M04yeUZw
0RVzFOiHfFUv55YENilIh5IdIk4Xydt0GUYjPQIDAQABo4IDZjCCA2IwDgYDVR0P
AQH/BAQDAgWgMAwGA1UdEwEB/wQCMAAwgZkGCCsGAQUFBwEBBIGMMIGJMEkGCCsG
AQUFBzAChj1odHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc2dj
Y3I2YWxwaGFzc2xjYTIwMjMuY3J0MDwGCCsGAQUFBzABhjBodHRwOi8vb2NzcC5n
bG9iYWxzaWduLmNvbS9nc2djY3I2YWxwaGFzc2xjYTIwMjMwVwYDVR0gBFAwTjAI
BgZngQwBAgEwQgYKKwYBBAGgMgoBAzA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3
dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzBEBgNVHR8EPTA7MDmgN6A1hjNo
dHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjZhbHBoYXNzbGNhMjAyMy5j
cmwwJQYDVR0RBB4wHIINKi5ub3JkZW50YS5ka4ILbm9yZGVudGEuZGswHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFL0Ft/OKkzxzy3n6
D4USoXeWGJF0MB0GA1UdDgQWBBS89T9L+I9IXWXWGSMUXamN3r5QQDCCAX8GCisG
AQQB1nkCBAIEggFvBIIBawFpAHYAouMK5EXvva2bfjjtR2d3U9eCW4SU1yteGyzE
uVCkR+cAAAGOF9a1BgAABAMARzBFAiEA2C4Z5z7WnZruks5jBWhz/iRgUj7uvfuh
zf2LLSPhRP4CIDBSf8a1aXfp2LcxmJbuOs9zjsZ1YTFv05hg7kUyz8paAHYA5tIx
Y0B3jMEQQQbXcbnOwdJA9paEhvu6hzId/R43jlAAAAGOF9a1AAAABAMARzBFAiBR
MP+ow81zC41RpZxIph4FyVqApfe9IqsysBK7eYnfSgIhAIme2IwQf/0eMEFfqgYa
900sb58sMFRrz/2YbUYq+kPVAHcATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpk
sWKaOd8AAAGOF9a2AQAABAMASDBGAiEA/vCdRyGowZInJuyq2veUOjdzY7wVmEtP
izULAyRRqBYCIQDKnbqynsud9QbGXYoytYUGyj8lPOS65LC/RHwKLJlEoDANBgkq
hkiG9w0BAQsFAAOCAQEAzChHV4wFiKnq1pBnqJCFvExcrFE42oAOB1FYYxWW2iN7
atITYhFlqEM+EBxIEbJu3PW/fVstGebvRCoHVPAXdXins1/P/XBcdA9kHa38eviI
irt+mkLt0igPgDlF13JnRksVyo2W9cSBJnbd5G0GHTuiGL1Ryg7051LowHULNOfc
AxhVQBNT0TxM7kOzbUtp8cVfjnACXSFYx+8rTDWVS7e/s0P3h7j+nIW+rWBSNyND
UGV8fW2OyHk2kFsZnZOaDOXOZumsy0ebQu2UI1G6LVNocKyRlIA0bvfgNdznkmzm
yoL/iSH5QPFTtCsHLW+2F0ryPLEPTKqxMl1OB60J2w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21883935498119994328408610478
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 07:35:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-08 07:35:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.nordenta.dk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3184 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 4897496917963093761176857099760428701839076980540438299375099869931890055936155357172042562750377907357406928290301121684088184890422453261400453455627185757242376583716219409239089172019802596363993668259900850109613617694025946697812719700383894363091244156935983707411142856221957316316084807266034963938845524068740421105564974399234460940108192372679147826667080599170753962008801739766686748450589824528593198920993679487539910642941012525242303390379492713801469827727023147899221416350561276213260612298542451687630787559246024070734320356860433708852050156051109499517738064234585700212622484673403201346789508937049867243333023794523416232406417715698000681251938816563936692605217763894379152780054988800877293735459981562533172757063596748317521525831342564298860649264104917073402335941534362022779840396664377922567151127326659390111120927597667150762792928882661223812682279434930383043328415218919675124917053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nordenta.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nordenta.dk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bcf53f4bf88f485d65d61923145da98ddebe5040
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018e17d6b5060000040300473045022100d82e19e73ed69d9aee92ce63056873fe2460523eeebdfba1cdfd8b2d23e144fe022030527fc6b56977e9d8b7319896ee3acf738ec67561316fd39860ee4532cfca5a007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018e17d6b500000004030047304502205130ffa8c3cd730b8d51a59c48a61e05c95a80a5f7bd22ab32b012bb7989df4a022100899ed88c107ffd1e30415faa061af74d2c6f9f2c30546bcffd986d462afa43d50077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e17d6b6010000040300483046022100fef09d4721a8c1922726ecaadaf7943a377363bc15984b4f8b350b032451a816022100ca9dbab29ecb9df506c65d8a32b58506ca3f253ce4bae4b0bf447c0a2c9944a0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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