flip.training

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f4:30:01:f8:32:5c:b8:89:11:71:a5:d7:33:56:7b:1f was issued on by Google Trust Services LLC.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=flip.training

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f4:30:01:f8:32:5c:b8:89:11:71:a5:d7:33:56:7b:1f
Serial Number (int): 324580901167309395014290087226308459295
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 96:7a:66:71:41:4f:41:62:5f:dd:34:ec:b5:7b:ad:fe:d3:d6:a2:58
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): cc:f1:2f:c4:41:e8:a0:9b:b6:8c:c8:01:58:da:12:83:56:20:7e:45
Fingerprint (sha256): 27:a4:57:64:d7:b8:8e:2f:81:3a:6a:bb:fc:51:4e:49:c4:5a:ba:ae:dd:25:82:00:14:86:aa:81:6d:bb:77:db

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/oNaAQdgAyKc
CRL Distribution Point: http://crls.pki.goog/gts1p5/3xN0q5OQxns.crl

Check the revocation status for certificate flip.training

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for flip.training

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

flip.training
*.flip.training

Other certificates including the domain name flip.training

(limited to 100 certificates)
cards.flip.training
sni208220.cloudflaressl.com
media.flip.training
sni208220.cloudflaressl.com
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
support.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
app.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
desktop.flip.training
mail.flip.training
flip.training
sni208220.cloudflaressl.com
deloitte-dev-app.flip.training
sandbox.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sandbox.flip.training
app.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
admin-demo.flip.training
sni208220.cloudflaressl.com
www.api.flip.training
www.flip.training
go.flip.training
flip.training
sni208220.cloudflaressl.com
*.flip.training
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
www.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
www.api.flip.training
sni208220.cloudflaressl.com
app.flip.training
sni208220.cloudflaressl.com
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
desktop.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
flip.training
cards.flip.training
sni208220.cloudflaressl.com
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
sandbox.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
www.flip.app
sni208220.cloudflaressl.com
flip.training
www.flip.training
media.flip.training
flip.training
flip.training
support.flip.training
mvp.flip.training
sni208220.cloudflaressl.com
go.flip.training
sni208220.cloudflaressl.com
flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com
desktop.flip.training
sni208220.cloudflaressl.com
flip.training
dsg-api.flip.training
www.api.flip.training
sandbox.flip.training
support.flip.training
sni208220.cloudflaressl.com
www.flip.training
sni208220.cloudflaressl.com
sni208220.cloudflaressl.com

Certificate

The complete raw certificate details for flip.training in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFcDCCBFigAwIBAgIRAPQwAfgyXLiJEXGl1zNWex8wDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMTAyMTQyNDA0WhcNMjQwNDAx
MTQyNDAzWjAYMRYwFAYDVQQDEw1mbGlwLnRyYWluaW5nMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAp9BCDy1DSBwW+swzho6U9iZdMAK1pzKsWNl4j7RD
+yodQ632VTz7R7YYjiYFIdLdUb0GnuB5Sqyl72XRRMtsxHjJSvQdn+opOp/VGju9
ehdrHn6Q8ah9DSnIf0bEg47/8JVzUSbKZc/mFPuRqo1iFSnzR0mpLQi74MBw3WT4
1lAdAXc5OO2dWFPGloBBZH3kQIOy5y1gYlqG2REnLJ81qwppxlB49yaobRhMtvPn
zIF26nWVwD6+qhyAbEatQNlvICzz6n/inIfUE7odPaBy+m7QHzBvNblIBmbB5jxY
uEvhQDfXPVQxiiShPMlfnrft0uXh9+N7zOTEegwVdYL7swIDAQABo4IChTCCAoEw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFJZ6ZnFBT0FiX9007LV7rf7T1qJYMB8GA1UdIwQYMBaAFNX8
ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvb05hQVFkZ0F5S2MwMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwKQYD
VR0RBCIwIIINZmxpcC50cmFpbmluZ4IPKi5mbGlwLnRyYWluaW5nMCEGA1UdIAQa
MBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0
cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1LzN4TjBxNU9ReG5zLmNybDCCAQQGCisG
AQQB1nkCBAIEgfUEgfIA8AB2ACnQOhu2dKpxHNMDW2VXwU+Kp4tP6DiUSeykU/lE
vSRoAAABjMrGWHcAAAQDAEcwRQIgbZTYOYn/xF6UNALSPic34F1m3HpQYD+ni9d1
PNAUAV4CIQCGyGiOusPY5/Bpt8o3/isVW2bsLNr9YdTEGJeIRn2zigB2AHb/iD8K
tvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjMrGV70AAAQDAEcwRQIgMrgb
sFheyhz02O2RctL8eHOAZLbnLkcq0Ox4crj/KqsCIQCu5hq2RrxjPExNco1vbTn5
xZRrMI3xSCzbYFZ3G/ew/TANBgkqhkiG9w0BAQsFAAOCAQEABmcDgRLDbIgDp31p
GYv/eEvSeqD1cKLMv3AQkTKrerY+JbdK5KwHLAie4U59wDGqA7tP79QO9s+JTARR
0RAuE8TW4vMr4Z7L+BbnqQoGcBhCU6mjNEBNkz9X6Sg9Agg0kLJfm8JFYzHyGLmJ
2TbFMjLluRdWOjTq6reqTV5EaFf2LbmQDVr5PaF5WmvEgxRAubJn1xHEMh8LP+Ld
2AkeHeoNcZhWjwbUccmSV7c0qzT+vZ/rJ1SGLjHcUg8xJYZb+TkvMhIzBwF8N0W0
gIcQ5m8sbjJApUegsHagQyvUB4OEaxwhRUyYMl7z0e+jqZ+gw8GZHgS1eM3hI4+c
K7rjDg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp9BCDy1DSBwW+swzho6U
9iZdMAK1pzKsWNl4j7RD+yodQ632VTz7R7YYjiYFIdLdUb0GnuB5Sqyl72XRRMts
xHjJSvQdn+opOp/VGju9ehdrHn6Q8ah9DSnIf0bEg47/8JVzUSbKZc/mFPuRqo1i
FSnzR0mpLQi74MBw3WT41lAdAXc5OO2dWFPGloBBZH3kQIOy5y1gYlqG2REnLJ81
qwppxlB49yaobRhMtvPnzIF26nWVwD6+qhyAbEatQNlvICzz6n/inIfUE7odPaBy
+m7QHzBvNblIBmbB5jxYuEvhQDfXPVQxiiShPMlfnrft0uXh9+N7zOTEegwVdYL7
swIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 324580901167309395014290087226308459295
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-02 14:24:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 14:24:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'flip.training'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21184492798394951380552691430968212330901473781313566340859020454496557049986138355468346809914770575869240734055790545717060005251360058344566689939761124472125696829486270546544014413932832824179263441186508773358254448337130759448208657589215581898516558961859558264442975004847671042061577825703771379270325700081898651287790893455037635796373919352931786521154178242340926938099399250790401808896946905643810597272749523655941923158879976351324118751532250948310561873334463363002423905300445978731494891031196346156733252384347869464581055186520283871031676100190257968179001952904154175024322468424429487717299
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							967a6671414f41625fdd34ecb57badfed3d6a258
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/oNaAQdgAyKc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'flip.training'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.flip.training'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/3xN0q5OQxns.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760029d03a1bb674aa711cd3035b6557c14f8aa78b4fe8389449eca453f944bd24680000018ccac65877000004030047304502206d94d83989ffc45e943402d23e2737e05d66dc7a50603fa78bd7753cd014015e02210086c8688ebac3d8e7f069b7ca37fe2b155b66ec2cdafd61d4c4189788467db38a00760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018ccac657bd0000040300473045022032b81bb0585eca1cf4d8ed9172d2fc78738064b6e72e472ad0ec7872b8ff2aab022100aee61ab646bc633c4c4d728d6f6d39f9c5946b308df1482cdb6056771bf7b0fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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