pureservice.sbm.no

Issued by Buypass Class 2 CA 2

About this certificate

This digital certificate with serial number 88:54:46:6d:8f:72:0c:5c:64:18 was issued on by Buypass AS-983163327.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=pureservice.sbm.no

Buypass AS-983163327

Organization: Buypass AS-983163327
Country: NO

This certificate will expire on

Certificate Details

Serial Number (hex): 88:54:46:6d:8f:72:0c:5c:64:18
Serial Number (int): 643796443042538464240664
Serial Number lenght: 80 bits, 10 octets

SubjectKeyId: ab:4e:0d:6a:83:72:49:20:8b:1e:cf:57:64:25:3a:66:24:2a:c2:1b
AuthorityKeyId: 92:ad:65:89:b2:00:0f:cb:51:0d:c1:23:ec:94:4e:8f:c1:04:3f:77

Fingerprint (sha1): dc:57:b7:63:70:a1:97:c4:14:53:6f:47:dd:9b:ec:15:67:6d:a1:79
Fingerprint (sha256): 25:6e:23:ce:21:01:58:b9:2a:6f:22:0d:90:11:d4:4f:91:fe:a6:19:7d:c7:d6:f2:bc:21:d4:6e:b2:95:b6:c0

Issuing Certificate URL: http://crt.buypass.no/crt/BPClass2CA2.cer

Revocation information

OCSP Server: http://ocsp.buypass.com
CRL Distribution Point: http://crl.buypass.no/crl/BPClass2CA2.crl

Check the revocation status for certificate pureservice.sbm.no

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pureservice.sbm.no

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pureservice.sbm.no

Other certificates including the domain name sbm.no

(limited to 100 certificates)
mi.sbm.no
www.sbm.no
nettbank.sbm.no
www.sbm.no
sbm.sbm.no
mi.sbm.no
www.sbm.no
sip.sbm.no
www.sbm.no
pureservice.sbm.no
post.sbm.no
www.sbm.no
sbm.sbm.no
workbench.posit.sbm.no
sip.sbm.no
pureservice.sbm.no
khb.sbm.no
www.sbm.no
nettbank.sbm.no
rapporter.sbm.no
smartbank.sbm.no
gave.sbm.no
gave.sbm.no
smartbank.sbm.no
sentry.sbm.no
sbm.sbm.no
competella.sbm.no
www.sbm.no
www.sbm.no
www.sbm.no
nettbank.sbm.no
smartbank.sbm.no
www.sbm.no
sentry.sbm.no
www.sbm.no
nettbank.sbm.no
rp.sbm.no
www.sbm.no
www.sbm.no
smartbank.sbm.no
www.sbm.no
weboffice.sbm.no
rapporter.sbm.no
smartbank.sbm.no
rapporter.sbm.no
gave.sbm.no
nettbank.sbm.no
rapporter.sbm.no
www.sbm.no
post.sbm.no
kontor.sbm.no
packagemanager.posit.sbm.no
nettbank.sbm.no
nettbank.sbm.no
www.sbm.no
mi.sbm.no
sip.sbm.no
post.sbm.no
webmail.sbm.no
sts.sbm.no
gave.sbm.no
connect.posit.sbm.no
forvaltning.sbm.no
post.sbm.no
kontor.sbm.no
rapporter.sbm.no
post.sbm.no
sip.sbm.no
rapporter.sbm.no
openbanking.sbm.no
www.sbm.no
nettbank.sbm.no
staging.sbm.no
wealthmapper.sbm.no
epost.sbm.no
post.sbm.no
rapporter.sbm.no
www.sbm.no
pureservice.sbm.no
mi.sbm.no
sbm.sbm.no
forvaltning.sbm.no
www.sbm.no

Certificate

The complete raw certificate details for pureservice.sbm.no in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgILAIhURm2PcgxcZBgwDQYJKoZIhvcNAQELBQAwSzELMAkG
A1UEBhMCTk8xHTAbBgNVBAoMFEJ1eXBhc3MgQVMtOTgzMTYzMzI3MR0wGwYDVQQD
DBRCdXlwYXNzIENsYXNzIDIgQ0EgMjAeFw0yMzEyMTQwOTU1NTVaFw0yNTAxMDgy
MjU5MDBaMB0xGzAZBgNVBAMMEnB1cmVzZXJ2aWNlLnNibS5ubzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALS9iRQtUBX+Yfquog1iSZOdZr3gpper6y0G
iqVxy4INTXHexdjRLhrgLKfN3jIlrhOnuI0pNduPPQ3b/3Ks1+REwCNTr4KoRG0w
CNbWg5Je1cNVb4PaDwlV53k60+QH/mZCAPPQwJ4biz8qJ8GeTZhWTKqINiEMmCyk
Iem4e8pSuFzLVeadNc0kdhV3r1e/sMa1BSlp7xqbCPfprIp0DmIkshRg7zQgf0Ab
QwZEFjd9NTgZ99ifHm8BFZa4e/k1QXATvW4wleOPt//4/1vfHTkn2vijgGbnO7vH
NtHnOWYicpCZj7XC1SoryUuyjVLLvz7Cm4LTP3Ai4QDhgdEe+FUCAwEAAaOCAusw
ggLnMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUkq1libIAD8tRDcEj7JROj8EE
P3cwHQYDVR0OBBYEFKtODWqDckkgix7PV2QlOmYkKsIbMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0gBBgwFjAKBghg
hEIBGgECBDAIBgZngQwBAgEwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybC5i
dXlwYXNzLm5vL2NybC9CUENsYXNzMkNBMi5jcmwwHQYDVR0RBBYwFIIScHVyZXNl
cnZpY2Uuc2JtLm5vMGoGCCsGAQUFBwEBBF4wXDAjBggrBgEFBQcwAYYXaHR0cDov
L29jc3AuYnV5cGFzcy5jb20wNQYIKwYBBQUHMAKGKWh0dHA6Ly9jcnQuYnV5cGFz
cy5uby9jcnQvQlBDbGFzczJDQTIuY2VyMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFq
AWgAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSxYpo53wAAAYxnwRfVAAAE
AwBHMEUCIC8bsJ4RrtrQ6yjH2FDbLhj15z5Y+jsPXn2dS9/JVITlAiEAj6IDEYc4
AZf11iGXITLb/2pDXnFjvnM+2xWq5wcQCIYAdgDPEVbu1S58r/OHW9lpLpvpGnFn
SrAX7KwB0lt3zsw7CAAAAYxnwRXaAAAEAwBHMEUCIQDYVtQa3h5wyE/upIjbAL9w
kEyfh+dpmb9pbmzRUy+VnQIgP1geFhn3nFsnwID3HBOo5lbRw3vl+79cdm/vpZJe
RGcAdgBVgdTCFpA2AUrqC5tXPFPwwOQ4eHAlCBcvo6odBxPTDAAAAYxnwRbpAAAE
AwBHMEUCIQDnCZaGS3DqxmDbDTg/qwHD79uXxapLw/Hj06+pcuCbvgIgbcrK8kC1
sVY1KtSjgMhnSYm3ws7zVkFlvBIjTUV6Dc0wDQYJKoZIhvcNAQELBQADggEBAACe
lwsT5JYkKmgThVHLQhmiLUofJO69ux2lmqFcpW9FkwYfILTNCE2S3u2S30ldb36S
BwRCmV08F+htBoRvs9uOFDHRD7pWFSgJG+77+3KfIIk966TmlzuSIiHF9wlPocPz
FsB3RABF3WwF8iTLCDpa2WX7ar2htyn4UeBf3KgeJVmu2/Ylu5czihE/+Q68Fugc
Z5KFqIL+fty3NVBS+4U4VKKLwTaGAUcxRh8g5YxmxHtX6WkPdFzGou0busI9HKOL
R1F29StHyJ479YeXTWjfviL0xG/8fR3E4DKPjjQkMugPi5GtEThMhtVa2PjKMTjw
WpG5ebBsq2oB6jd3SzM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtL2JFC1QFf5h+q6iDWJJ
k51mveCml6vrLQaKpXHLgg1Ncd7F2NEuGuAsp83eMiWuE6e4jSk12489Ddv/cqzX
5ETAI1OvgqhEbTAI1taDkl7Vw1Vvg9oPCVXneTrT5Af+ZkIA89DAnhuLPyonwZ5N
mFZMqog2IQyYLKQh6bh7ylK4XMtV5p01zSR2FXevV7+wxrUFKWnvGpsI9+msinQO
YiSyFGDvNCB/QBtDBkQWN301OBn32J8ebwEVlrh7+TVBcBO9bjCV44+3//j/W98d
OSfa+KOAZuc7u8c20ec5ZiJykJmPtcLVKivJS7KNUsu/PsKbgtM/cCLhAOGB0R74
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 643796443042538464240664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass AS-983163327'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Buypass Class 2 CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-14 09:55:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-08 22:59:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'pureservice.sbm.no'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22816358314680793531916103824761856635139180829193064559807959675156092320623710846281559324104660216898896116316061039337623743984314493358035219763671443840724267421222695786107303324684336297963221224604705429749878215373082779757409568638868277452958636152706129465744686812575013796065895027297434547148211213719021852872686135669748304316494209570349710269760162028298979979297974789767937538634173910426594953541961992629276796830414021458089942098315108067210512779637710601977831192347294381683651853503176841749102735251941218827208113336375465346556437140948456793408267342140948880966258608254511828891733
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 92ad6589b2000fcb510dc123ec944e8fc1043f77
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab4e0d6a837249208b1ecf5764253a66242ac21b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.578.1.26.1.2.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.buypass.no/crl/BPClass2CA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pureservice.sbm.no'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.buypass.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.buypass.no/crt/BPClass2CA2.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018c67c117d5000004030047304502202f1bb09e11aedad0eb28c7d850db2e18f5e73e58fa3b0f5e7d9d4bdfc95484e50221008fa2031187380197f5d621972132dbff6a435e7163be733edb15aae707100886007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018c67c115da0000040300473045022100d856d41ade1e70c84feea488db00bf70904c9f87e76999bf696e6cd1532f959d02203f581e1619f79c5b27c080f71c13a8e656d1c37be5fbbf5c766fefa5925e44670076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018c67c116e90000040300473045022100e70996864b70eac660db0d383fab01c3efdb97c5aa4bc3f1e3d3afa972e09bbe02206dcacaf240b5b156352ad4a380c8674989b7c2cef3564165bc12234d457a0dcd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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