ott.sky.com

- Sky UK Limited -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0f:d9:fa:17:c2:a6:41:7f:10:d9:f8:b0:83:02:67:19 was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Sky UK Limited

Organization: Sky UK Limited
Locality: Isleworth
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0f:d9:fa:17:c2:a6:41:7f:10:d9:f8:b0:83:02:67:19
Serial Number (int): 21070220839965529323803105747187951385
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 10:96:a8:8b:c9:30:58:19:6a:e1:c4:d0:2f:64:76:9a:fc:7d:30:da
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): e7:07:8c:29:f2:55:24:82:15:95:26:00:d6:a6:75:4a:13:ae:86:8b
Fingerprint (sha256): 29:ff:55:62:0a:d1:24:0b:e4:07:28:1b:58:01:6c:55:28:d8:61:a1:60:e2:ef:74:50:d4:d7:0d:ae:b8:89:6d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate ott.sky.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ott.sky.com

Public Key Algorithm

ECDSA

Key Size

256

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ott.sky.com
atlantis.epgsky.com
auth.client.ott.sky.com
chromecast.client.ott.sky.com
config.ott.sky.com
desktop.client.ott.sky.com
installer.desktop.client.ott.sky.com
kids.client.ott.sky.com
lg.crosstv.nowtv.com
ms3-p.sky.com
ps3.crosstv.nowtv.com
ps4.crosstv.nowtv.com
roku.tv.client.ott.sky.com
tv.client.ott.sky.com
xbox.crosstv.nowtv.com
youview.tv.client.ott.sky.com

Other certificates including the domain name sky.com

(limited to 100 certificates)
teachablemachine-api-ipt-73-2.cherry-ad-dev.aidisco.sky.com
secure03.stage.lithium.com
secure.suggest.search.sky.com
ssl.mobile-tv.sky.com
aspfiles2.sky.com
sky-tags-ingestor.data.sky.com
autodocs.sky.com
auth-ui.simm.aidisco.sky.com
staging.ingest.aidisco.sky.com
lightning.spex-3849.spex-dev.aidisco.sky.com
skyshare.sky.com
payments.sky.com
faspex.sky.com
access.isp.sky.com
cs-cms-chcs-1982-ar-effect.cherry-ad-dev.aidisco.sky.com
skyidapp.sky.com
distributorreferrals.sky.com
www.nowtv.com
penfold.sns.sky.com
accessories.sky.com
stagefeeds.news.sky.com
stage-secure-my-offline.sky.com
cherry-app-release-chs-1502-api.cherry-ad-dev.aidisco.sky.com
pubfinder.sky.com
vmhorizon.drm.sot-dev.aidisco.sky.com
slo.oogwayintl.sky.com
isp-provisioning.isp.sky.com
stage-go.sky.com
skymail.sky.com
origin-proxy.video.sky.com
www.sky.com
stage-secure.sky.com
secure03.stage.lithium.com
internalcommscompetitions.sky.com
Secure.sky.com
secure-skynewsipad.stage.sky.com
webcamgames.sky.com
crm-ext.prd.p.ovp.sky.com
tp-tx-snsvpn.nme.enslo.sns.sky.com
secure03.stage.lithium.com
testlauncher-1-13-2.cherry-ad-dev.aidisco.sky.com
sso-p.atlasottint.sky.com
cherry-app-release-chs-1534-api.cherry-ad-dev.aidisco.sky.com
contactus.sky.com
jobs.sky.com
piotr.recs.dne-dev.aidisco.sky.com
hem.ogwam.sky.com
b2032.go.ingest-dev.aidisco.sky.com
internalcommscompetitions.sky.com
slo.stg2.idm.id.bskyb.sky.com
stark.sky.com
interest.sky.com
stage-archimedesretail-offline.sky.com
msh.ingest-dev.aidisco.sky.com
dev.app.sky.com
stg.cp.sky.com
www.stage.nowtv.com
www.nowtv.com
tp-vo-snsvpn.nme.enslo.sns.sky.com
cp.sky.com
services.stage.nowtv.com
f01.chtah.com
secure03.stage.lithium.com
sit-auth.iptv.interactive.sky.com
eurometer.news.sky.com
bat-1321.ui.content-dev.bat.aidisco.sky.com
verify.sky.com
secure.mobile-gw.sky.com
*.data.sky.com
stg2.ogwam.sky.com
MOBILE-TV.SKY.COM
f01.chtah.com
stagefeeds.news.sky.com
contactus.sky.com
interest.sky.com
www.stage.nowtv.com
firmwareadmin.isp.sky.com

wifi.sky.com
vo-snsvpn.nme.bllon.sns.sky.com
stg.cp.sky.com
sky.com
staging.intlott.sky.com
learning.sky.com
hkm-int.prd.p.ovp.sky.com
tx-snsvpn.nme.enslo.sns.sky.com
comeback.sky.com
staging.ott.sky.com
stg1.skyidapp.sky.com
secure03.stage.lithium.com
www.bigchristmaspresent.sky.com
go.sky.com
auth-ui-test.simm-dev.aidisco.sky.com
feeds.skynews.com
ar-effect-ch-6339.cherry-ad-dev.aidisco.sky.com
cs-cms-chcs-1932.cherry-ad-dev.aidisco.sky.com
avm-offline.sky.com
customerdata.adtech.sky.com
skyidapp.sky.com
www.sky.com

Certificate

The complete raw certificate details for ott.sky.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MFkwEwYHKoZIzj0CAQYIKoZIzj0DAQcDQgAEw73yadB6Tju0LSU6THDtjaLIU6C8
7aFePsY6dZauvBPPUh7cSvA5PQ/xIAqYH9uwsZIIoSqqcW85R5fdEucLKQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21070220839965529323803105747187951385
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Isleworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sky UK Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ott.sky.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.2.1 (ecPublicKey)
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.10045.3.1.7 (prime256v1)
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (520 bits)
				0004c3bdf269d07a4e3bb42d253a4c70ed8da2c853a0bceda15e3ec63a7596aebc13cf521edc4af0393d0ff1200a981fdbb0b19208a12aaa716f394797dd12e70b29
 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1096a88bc93058196ae1c4d02f64769afc7d30da
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (394 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atlantis.epgsky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'auth.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chromecast.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'config.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'desktop.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'installer.desktop.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kids.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lg.crosstv.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms3-p.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps3.crosstv.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ps4.crosstv.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roku.tv.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tv.client.ott.sky.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xbox.crosstv.nowtv.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youview.tv.client.ott.sky.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1 bits)
							0780
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
 . . . . . . . . [c:2|t:3|false] ORAddress 
 . . . . . . . . [c:1|t:0|false]  
 . . . . . . . . [c:3|t:29|false]