www.tu-sport.de

- Technische Universitaet Berlin -

Issued by DFN-Verein Global Issuing CA

About this certificate

This digital certificate with serial number 20:bb:0e:17:b3:00:1b:79:4c:56:dc:36 was issued on by Verein zur Foerderung eines Deutschen Forschungsnetzes e. V..

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Technische Universitaet Berlin

Organization: Technische Universitaet Berlin
Organization unit: ZEH
State / Province: Berlin
Locality: Berlin
Country: DE

Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.

Organization: Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.
Organization unit: DFN-PKI
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 20:bb:0e:17:b3:00:1b:79:4c:56:dc:36
Serial Number (int): 10129655992855191265790581814
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 00:a7:8b:29:43:71:ea:30:70:84:61:f4:c1:ad:e0:26:15:ba:68:23
AuthorityKeyId: 6b:3a:98:8b:f9:f2:53:89:da:e0:ad:b2:32:1e:09:1f:e8:aa:3b:74

Fingerprint (sha1): 14:73:74:2d:29:c9:47:a7:05:01:21:1c:2e:45:7b:9d:1c:45:26:2a
Fingerprint (sha256): 25:94:7f:c0:3a:00:da:0c:32:3b:64:a3:a0:e0:7b:76:26:d8:7e:c9:b4:a7:69:92:f1:d1:6f:8a:8a:32:b3:5c

Issuing Certificate URL: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl

Check the revocation status for certificate www.tu-sport.de

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.tu-sport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tu-sport.de
www.tu-berlin-sport.de
www.tu-sport.de
www.tusport.de
zeh1.service.tu-berlin.de

Other certificates including the domain name tu-sport.de

(limited to 100 certificates)
www.tu-sport.de
www.tu-sport.de
www.tu-sport.de
www.tu-sport.de
guest36.innocampus.tu-berlin.de
guest36.innocampus.tu-berlin.de
www.tu-sport.de
www.tu-sport.de
guest36.innocampus.tu-berlin.de
www.tu-sport.de
guest36.innocampus.tu-berlin.de
guest36.innocampus.tu-berlin.de

Certificate

The complete raw certificate details for www.tu-sport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10129655992855191265790581814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Verein zur Foerderung eines Deutschen Forschungsnetzes e. V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DFN-Verein Global Issuing CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 15:02:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-28 15:02:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Technische Universitaet Berlin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ZEH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.tu-sport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 760286549713301811775182834955783075471190037671379765968798826392552877332667476371667754894641893095702579667728342973572094381159421087456777766375212114158072087172892492640191699487065024524959068069370008344238326762792221908188841885862263675553568963803970549640814688466881649187828449359005489713471091442771552357825574771333194362058984858561018709296572536836879322806672101096591691867196215802083412518806105240144250897760089684208004665794937166663070814055127502470074038733898290134231668889564575331159389300864189808351009420685371434472424180425309189928439235959822811512787614745376296878323881204292458526380583852091231287683739391784725728062709811274173394822854367686022444331683199487134759431807561502367366635509816004415242939519042447305897749299492964383897397368580829783681267712776071817628778269624251974126379501154151226312462063556120329764308513586858946714906077297054520684504535580601743496668525759663899534604415234375931170809367301297691313148505415934406117134027645201532906696524266763579131785658827227140696916613742034650079698533091604413883674037032006783055543175224422276560359929304743831510018690244993164781193739719277282406707572018377448920211342714393276233721465701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.3.9
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.3.9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00a78b294371ea30708461f4c1ade02615ba6823
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b3a988bf9f25389dae0adb2321e091fe8aa3b74
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tu-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tu-berlin-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tu-sport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tusport.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zeh1.service.tu-berlin.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (206 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/dfn-ca-global-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (844 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (840 bytes)
							03460076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000169bfacb983000004030047304502207b3f8d220ac3f06ea03548b5ac055414a8691fe0ddc43a3c797ce6ceac3e4663022100abaae34dd0a340519b3f94834ff914260800a38a52a5c551b33c8d68bf60c4c7007500aae70b7f3cb8d566c86c2f16979c9f445f69ab0eb4535589b2f77a030104f3cd00000169bfacb986000004030046304402206e9b8260ffadabcc2c0da174bf6f5bc1c3ffb0ebaed74ed8eac26de06479d82a02206497c364ea01f2b562de90f6e363dab7f40954ad5fdc2a597b26a704cdc948920077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000169bfacba750000040300483046022100843fdddbd144aa40ff9746a59c39b363821f580d4b6392848de5d6936c1a8e90022100ff62c64f6860a7a22971f563adf9ae177e4dc9c8d9a1de4ea5bdab3c0f1c372f007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000169bfacb9c1000004030046304402202058138fb9c253492f156cd4724989842fdf4fc62154d8aca0bd8ac3e410abbb02206fb93e7cb883873e55b98c08160d3f8f66dae9f78fecaaeab0f358b3c10e4c73007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000169bfacb9d0000004030046304402203f5808f62b885448c586f35e807eb0f4e64b33302c3476bd08084c848b63163502200453976339f1527aeda8a24980b65b97fdc8f32265114d9d6162e4bfa46fcecd0076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a800000169bfacbceb0000040300473045022100a429c4024233d2323397cea50d8cdb512e57b08f7d71d452d3e830583ded88c202202bb01140736b803ce6a94d1392b619e755f6d8b3385739c3c90f531c29cf0bf1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000169bfacb9aa0000040300473045022100fcb7012291ed9affcc47716cabe230ad6f4e3f91492d10462e3e270d7acfa45e0220391f77a2451331d60a9baabbb5d4964054173336624d4c6972283746e908b2b2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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