v2.pixel.nukp.data.newscorp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number cf:6a:01:65:ad:64:a0:6a:09:ca:dc:94:e6:74:e4:46 was issued on by Google Trust Services LLC.

With 24 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=v2.pixel.nukp.data.newscorp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): cf:6a:01:65:ad:64:a0:6a:09:ca:dc:94:e6:74:e4:46
Serial Number (int): 275700606932598851827832724571139925062
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8f:c9:db:17:0b:6e:77:09:01:0b:68:61:8d:36:e2:5f:26:66:11:a0
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 38:82:39:5a:e2:81:0f:32:fd:cf:1a:58:ea:7c:26:6e:eb:98:03:20
Fingerprint (sha256): 25:92:67:32:06:1d:31:73:0b:e4:ba:68:1c:13:a7:8c:bb:05:f2:b7:eb:1f:03:6b:4f:a9:84:39:5f:d0:3a:42

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/AWqH-MXy-vI
CRL Distribution Point: http://crls.pki.goog/gts1d4/04qrLQWTZ_w.crl

Check the revocation status for certificate v2.pixel.nukp.data.newscorp.com

24

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for v2.pixel.nukp.data.newscorp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

v2.pixel.nukp.data.newscorp.com
sac.club950.co.uk
sac.dreamteamfc.com
sac.mytimesplus.co.uk
sac.staging-thesun.co.uk
sac.staging-thetimes.co.uk
sac.staging-thetimes.ie
sac.talksport.com
sac.the-sun.com
sac.the-tls.co.uk
sac.thescottishsun.co.uk
sac.thesun.co.uk
sac.thesun.ie
sac.thetimes.co.uk
sac.thetimes.ie
sac.timesmembership.com
sac.virginradio.co.uk
sac.wireless.radio
sac.news.co.uk
sac.talk.tv
sac.driving.co.uk
sac.newskit.co.uk
sac.sportswomenoftheyear.co.uk
sac.thetimes.com

Other certificates including the domain name newscorp.com

(limited to 100 certificates)
leapfrog-ssl-24.gcs-web.com
compliance.newscorp.com
tls.automattic.com
naifs.newscorp.com
pwm.newscorp.com
*.newscorp.com
naimeeting.newscorp.com
leapfrog-ssl-24.gcs-web.com
rsvp.newscorp.com
leapfrog-ssl-24.gcs-web.com
dscms.newscorp.com
api.content.capi.newscorp.com
lyncweb.newscorp.com
leapfrog-ssl-24.gcs-web.com
v2.pixel.djp.data.newscorp.com
m.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
leapfrog-ssl-24.gcs-web.com
slcwprd1.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange.newscorp.com
hyperion.newscorp.com
naipinchange.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
tanprd.newscorp.com
newscorp.com
pwm.newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
newscorp.com
newscorp.com
content.capi-nonprod.newscorp.com
naid3.newscorp.com
intranet.newscorp.com
editionscurator-api.newscorp.com
board.newscorp.com
naifs.newscorp.com
v2.pixel.nukp.data.newscorp.com
newscorp.com
content-dr.kapi.newscorp.com
lcspublic.newscorp.com
board.newscorp.com
content.capi.newscorp.com
leapfrog-ssl-24.gcs-web.com
remotevpn.21cf.com
naiftp.newscorp.com
staging.developer.newscorp.com
naichat.newscorp.com
ncusnjvzops1.newscorp.com
leapfrog-ssl-24.gcs-web.com
content-knewz.capi-nonprod.newscorp.com
newscorp.com
leapfrog-ssl-24.gcs-web.com
naimail.newscorp.com
*.api.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
content.kapi.newscorp.com
newscorp.com
conferencecenter.newscorp.com
tcfusnjpgpl1.newscorp.com
tanpre.newscorp.com
ncsubmissions.newscorp.com
gtp.newscorp.com
newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
fileexchange-test.newscorp.com
*.acs.svc.newscorp.com
rsvp.newscorp.com
content.capi-stage.newscorp.com
leapfrog-ssl-24.gcs-web.com
staging.developer.newscorp.com
*.qa.newscorp.com
developer.newscorp.com
leapfrog-ssl-24.gcs-web.com
hyperion.newscorp.com
tfs2010portal.newscorp.com
web.newscorp.com
lync15pool.newscorp.com
content.capi.newscorp.com
today.newscorp.com
leapfrog-ssl-24.gcs-web.com
fc.newscorp.com
content.capi-stage.newscorp.com
content.capi.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
leapfrog-ssl-24.gcs-web.com
naisharepoint.newscorp.com
datacatalog.cyber.newscorp.com
staging.developer.newscorp.com
compliance.newscorp.com
leapfrog-ssl-24.gcs-web.com
equitynet.newscorp.com

Certificate

The complete raw certificate details for v2.pixel.nukp.data.newscorp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPN79UwnVYrFP6jl1lXE
jqTCsGEO3Ip474dGssZ2Et3BGv+hoOutZbuK1A1TnnP9c25asobnxyQZxirHsZHT
30bwnYQLSyK8RIlpzYrRZR8QoM7Qf6fmbiaTpBaxSWEdV9OR4XBSsds4b9v9LchH
46SzifHy6fuWkV7jZT3u1fXSNavS3a+p/2ALCiD+mZg0eR2dCbRA1HmxtBqjABuy
2HFzkmCH+M6SCxm3W6JGNhxHimMeEJypaoKhFHRRbh7go0oq+kKSzAgvVd9SLJum
oP/l62pF3wbbKA01jbed3qXZOYOacykVu/Gi80tE7/A9d9K0TefletIwMRH5HDpi
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 275700606932598851827832724571139925062
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-12 11:05:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-10 11:58:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'v2.pixel.nukp.data.newscorp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19813242114431901111471600893942714376040161711519236544539541733822385544520596146515713985009222955466148063049903934583200979842012992745926485887069226207927689449175381530046039331468740720845637373537538597633443739648129447933189478179780473384990214170765718989409658267075544020972544569854376930729006298453789412222609866800903795183359360929297381565387681863728294046758799796523340558446683668069558457916019720340250890638811103442009895008011471387585040248014076271600736316979678498841866750993759005669311647110728448234497773215246195061941354757775852451632705404194760628878452349690910724481781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fc9db170b6e7709010b68618d36e25f266611a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/AWqH-MXy-vI'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (515 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'v2.pixel.nukp.data.newscorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.club950.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.staging-thetimes.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.talksport.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.the-sun.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.the-tls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.timesmembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.virginradio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.wireless.radio'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.talk.tv'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.driving.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.newskit.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.sportswomenoftheyear.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sac.thetimes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/04qrLQWTZ_w.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad4170000018e328dd07b0000040300473045022011cf9210e68d2d4f690cbbfc55c783b4ffa0cb31df0fed1be83d473ec458daa5022100e5ffe2f0c1fad123defee0507b6455cc9741a566bc5be973f3f424f12b046a4800750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e328dd097000004030046304402201345ae7a19769a1ee9f43dca1da630678416acf0d5369a0c3d4474804f5afaff022036230558a49e3d9cce6e56ea9dfead9091a334b22e778b3b2d7c29e308398feb
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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