ashva.app
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 3c:1f:0b:30:4a:d0:fa:a9:11:95:47:1d:3d:d0:4c:09 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=ashva.app
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3c:1f:0b:30:4a:d0:fa:a9:11:95:47:1d:3d:d0:4c:09Serial Number (int): 79914867882321503891422577796181937161
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: 04:1c:c9:fe:4c:bc:8f:44:a5:39:ff:d3:ab:fd:23:d9:44:6e:ab:23
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 08:51:40:dd:88:12:cf:5a:8b:ad:01:f0:60:b8:b7:5c:fa:98:6e:ca
Fingerprint (sha256): 27:88:78:f6:11:72:7b:66:43:98:c5:a9:fb:32:d3:ea:df:c7:4e:be:07:41:27:0a:0a:c5:ca:81:67:36:2e:bd
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/EwmV5wiWh4kCRL Distribution Point: http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl
Check the revocation status for certificate ashva.app
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ashva.app
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ashva.app
*.ashva.app
*.ashva.app
Other certificates including the domain name ashva.app
(limited to 100 certificates)
kollbak.com
joeynotion.com
whyuno.com
www.zrussro.cz
app.qualif.upbycellance.com
ashva.app
rufirebase-c3.moboreader.net
www.write.tf
tables.chat
links.tagheuergolf.com
apexcel.ae
conta.onlypay.com.br
gallery.x10designstudio.com
www.clearnotices.com
www.zrussro.cz
dev.depoway.com
widget.shiftboolean.com
antonioriccio.me
www.waveconnect.ca
ashva.app
smartbate.com
www.ionhipster.com
demo.pej.se
b-market.fi
www.rizianneveluz.com
www.propbets.games
*.ashva.app
appsicologia.nanadevs.com
*.ashva.app
arab.ahmedroach.com
ets-doc.ashva.app
eve.luciano.work
www.king-coffee.com
talentoso.cl
www.wisconsin.profit.orderprinting.com
demo.pej.se
antonioriccio.me
ashva.app
www.kissaki.es
www.rfh.mx
www.littleones.co.nz
tables.chat
www.innovwiz.com
tokrex.org
ops-v2.qopius.net
www.pohovenda.cz
www.feltas.com
aiken.turnosweb.app
appsicologia.nanadevs.com
imoveisforrent.com.br
ammatouryouth.com
kiran-tokens.ashva.app
www.rizianneveluz.com
url.squarelet.com
gdsctcoer.tech
tateho.jp
hitgoat.com
staging-app.justcoach.io
menu.sunsetdiner.ca
goerli.marketplace.openblox.io
url.squarelet.com
www.synove.se
mcsportplus.ml
webmastersessions.io
www.kenshocyber.com
ashva.app
n1.delivery
good360-test.cpptl.co
www.kenshocyber.com
havakalite.si
gaedasprautun.is
dev-portal.shopthrilling.com
fnbce.falkor.io
sport.679864.com
manager.openwa.dev
bienstartepremia.com
fnbce.falkor.io
joeynotion.com
whyuno.com
www.zrussro.cz
app.qualif.upbycellance.com
ashva.app
rufirebase-c3.moboreader.net
www.write.tf
tables.chat
links.tagheuergolf.com
apexcel.ae
conta.onlypay.com.br
gallery.x10designstudio.com
www.clearnotices.com
www.zrussro.cz
dev.depoway.com
widget.shiftboolean.com
antonioriccio.me
www.waveconnect.ca
ashva.app
smartbate.com
www.ionhipster.com
demo.pej.se
b-market.fi
www.rizianneveluz.com
www.propbets.games
*.ashva.app
appsicologia.nanadevs.com
*.ashva.app
arab.ahmedroach.com
ets-doc.ashva.app
eve.luciano.work
www.king-coffee.com
talentoso.cl
www.wisconsin.profit.orderprinting.com
demo.pej.se
antonioriccio.me
ashva.app
www.kissaki.es
www.rfh.mx
www.littleones.co.nz
tables.chat
www.innovwiz.com
tokrex.org
ops-v2.qopius.net
www.pohovenda.cz
www.feltas.com
aiken.turnosweb.app
appsicologia.nanadevs.com
imoveisforrent.com.br
ammatouryouth.com
kiran-tokens.ashva.app
www.rizianneveluz.com
url.squarelet.com
gdsctcoer.tech
tateho.jp
hitgoat.com
staging-app.justcoach.io
menu.sunsetdiner.ca
goerli.marketplace.openblox.io
url.squarelet.com
www.synove.se
mcsportplus.ml
webmastersessions.io
www.kenshocyber.com
ashva.app
n1.delivery
good360-test.cpptl.co
www.kenshocyber.com
havakalite.si
gaedasprautun.is
dev-portal.shopthrilling.com
fnbce.falkor.io
sport.679864.com
manager.openwa.dev
bienstartepremia.com
fnbce.falkor.io
Certificate
The complete raw certificate details for ashva.app in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFZDCCBEygAwIBAgIQPB8LMErQ+qkRlUcdPdBMCTANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzEwMDcwODE1NDJaFw0yNDAxMDUw ODE1NDFaMBQxEjAQBgNVBAMTCWFzaHZhLmFwcDCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAK+qDUb8HXEyY4YBtCmd3D5eTlFAIKFWQF4K2UXl8LaPu24c HXYo08ox6Drlb1d3N24LjqQwWaI+ueozbYY2gBLAwqrqnhL5QhGy/0OiUfmX1fWw toRue0ZIou+U9Q99rYAUOvNDjfkjSmFSBDNtdQcHVNunlINlGgpMkwGuC41gRYmA Uv3IxjkyFvq5syKlB5PQ3LpG+dfigDR3KVOoiIi82SDXr1bU68vseKrznUC/JlhR 6FRTc7g2CfcV7QCyNkJScSo7cNvkkd1Vod9FLC8ZgDkHBM2YoiQO7cZd3wcqmuOn EDl4IxsUljydl2CbKOm96AxhiJvdrL64/txL81sCAwEAAaOCAn4wggJ6MA4GA1Ud DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBQEHMn+TLyPRKU5/9Or/SPZRG6rIzAfBgNVHSMEGDAWgBTV/J4N3x7K 3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6 Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0V3bVY1d2lXaDRrMDEGCCsGAQUFBzAC hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMCEGA1UdEQQa MBiCCWFzaHZhLmFwcIILKi5hc2h2YS5hcHAwIQYDVR0gBBowGDAIBgZngQwBAgEw DAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2ku Z29vZy9ndHMxcDUvUnBwd2l1M0Y4WlUuY3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB 8wDxAHcA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGLCWvTvgAA BAMASDBGAiEArKM9bzSIRjaBQMdjry/cg5LKWozPfyi3JrBny2oaqogCIQD/elOY tjCAuIqfVWCDsoElxQIWH+z+uDNBk7g/CDuM0gB2AHb/iD8KtvuVUcJhzPWHujS0 pM27KdxoQgqf5mdMWjp0AAABiwlr07YAAAQDAEcwRQIgJ/WC2nE88NA82EJA5Koq f2sF1UtNt9Ltiq0YyoB2ut4CIQDOEFHMqOT96CwebF0vr0zRw41yG6dP1BMLsSlH 8n/YNDANBgkqhkiG9w0BAQsFAAOCAQEAGcjxT8tTYyOpV2iO9FUlwTiztX5keoOT h1sSwjE9gGrKkghhGGYPZ0iYEu6lgEC2Xm5IpIjsspe5CdbauuugDlRc8Zc8yJFI GgerEybqNpAOkQjIdCYvxaHXJcitwUXcpxJaBDsvj0fwxI8W4M71zWSqUdRAWAFC XEnBARdZikpShr4fNjO05qsumBCceP860MBA50YHGpZmCP5iZzI/pFJkgQeJL2Z4 WpaNRX1Fc4Ud7TMaSyfPGMLlBi0+Y+iHy+60KS/KpxX6+qs9Y9621UVwx8QGvj0C AE4sBzar0vPf5uErpkdtmz114OBhEgXzsBNMim3Nsp8ZY/vUPpDSqg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6oNRvwdcTJjhgG0KZ3c Pl5OUUAgoVZAXgrZReXwto+7bhwddijTyjHoOuVvV3c3bguOpDBZoj656jNthjaA EsDCquqeEvlCEbL/Q6JR+ZfV9bC2hG57Rkii75T1D32tgBQ680ON+SNKYVIEM211 BwdU26eUg2UaCkyTAa4LjWBFiYBS/cjGOTIW+rmzIqUHk9Dcukb51+KANHcpU6iI iLzZINevVtTry+x4qvOdQL8mWFHoVFNzuDYJ9xXtALI2QlJxKjtw2+SR3VWh30Us LxmAOQcEzZiiJA7txl3fByqa46cQOXgjGxSWPJ2XYJso6b3oDGGIm92svrj+3Evz WwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 79914867882321503891422577796181937161 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 08:15:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 08:15:41 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashva.app' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22175559068736908107382138153807299959179230590063756133234425907544264225901509976551436010284454703947355530349000539979546057866877334127425460828185552974649657912644116510960156547106802522086242407526172895271101035071171144167377740699186049525466920401739385577418163971190556137341943426753993624131335726613245047410692078120982309912974368873654884259421658307440251832608249516177705870107798084798589704753257100314178589129571951176456304722696107617229229855390446501388024245356229341661023835723010301028270751946816521401522951431569088108224178853161836463411455266905229298476821714472980378809179 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 041cc9fe4cbc8f44a539ffd3abfd23d9446eab23 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/EwmV5wiWh4k' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashva.app' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ashva.app' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Rppwiu3F8ZU.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b096bd3be0000040300483046022100aca33d6f348846368140c763af2fdc8392ca5a8ccf7f28b726b067cb6a1aaa88022100ff7a5398b63080b88a9f556083b28125c502161fecfeb8334193b83f083b8cd200760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b096bd3b60000040300473045022027f582da713cf0d03cd84240e4aa2a7f6b05d54b4db7d2ed8aad18ca8076bade022100ce1051cca8e4fde82c1e6c5d2faf4cd1c38d721ba74fd4130bb12947f27fd834 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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