bizblog.gendigital.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number cd:38:bb:16:cb:60:ed:b6:13:76:90:ee:7c:02:9a:e2 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=bizblog.gendigital.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): cd:38:bb:16:cb:60:ed:b6:13:76:90:ee:7c:02:9a:e2Serial Number (int): 272786302376543798900645242906750393058
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 3c:de:64:a7:a6:3a:f6:39:77:de:c4:66:e3:79:d6:54:7d:83:7d:22
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 1e:bc:08:46:32:6e:0b:6b:d2:3e:04:d0:ae:e7:07:7c:7e:c8:b2:2a
Fingerprint (sha256): 32:ed:e9:16:e5:22:67:2c:2d:b2:13:8e:0e:78:bb:58:f4:44:fd:ed:70:70:5f:85:77:ce:dc:07:e9:21:82:cb
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/mubL22p82MgCRL Distribution Point: http://crls.pki.goog/gts1p5/Wr2Gjn51wT0.crl
Check the revocation status for certificate bizblog.gendigital.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bizblog.gendigital.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bizblog.gendigital.com
Other certificates including the domain name gendigital.com
(limited to 100 certificates)
biz.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
nlok-guest.nortonlifelock.com
geo-preview.gendigital.com
bizblog.gendigital.com
dev.gendigital.com
avastemail.gendigital.com
gencentral-cms.gendigital.com
gencentral.gendigital.com
gendigital.com
gencentral.gendigital.com
gencentral-cms.gendigital.com
bizemail.gendigital.com
avastlanding.gendigital.com
bizblog.gendigital.com
prod.gendigital.com
as2p.gendigital.com
qa.gendigital.com
greenhopper.gendigital.com
gencentral.gendigital.com
guidelines.gendigital.com
mft.gendigital.com
gms-qa.nortonlifelock.com
checkoutuat.gendigital.com
pub.gendigital.com
guidelines.gendigital.com
checkoutuat.gendigital.com
checkoutuat.gendigital.com
avastinfo.gendigital.com
greenhopper.gendigital.com
avastblog.gendigital.com
bizblog.gendigital.com
bizemail.gendigital.com
checkout.gendigital.com
stg.gendigital.com
benefits.gendigital.com
ideabox.gendigital.com
gendigital.com
checkout.gendigital.com
prod2.gendigital.com
checkoutdev.nortonlifelock.com
mft.gendigital.com
avastblog.gendigital.com
avastlanding.gendigital.com
prod.gendigital.com
dev.gendigital.com
investor.gendigital.com
mft-stg.gendigital.com
checkoutdev.nortonlifelock.com
dr.gendigital.com
gencentral.gendigital.com
mft-dev.gendigital.com
gencentral-cms.gendigital.com
newsroom.gendigital.com
avastbusiness.gendigital.com
avastlanding.gendigital.com
mft-stg.gendigital.com
avastbusiness.gendigital.com
biz.gendigital.com
newsroom.gendigital.com
avastportal.gendigital.com
Certificate
The complete raw certificate details for bizblog.gendigital.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcjCCBFqgAwIBAgIRAM04uxbLYO22E3aQ7nwCmuIwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwNzE5MDYzMjUzWhcNMjMxMDE3 MDYzMjUyWjAhMR8wHQYDVQQDExZiaXpibG9nLmdlbmRpZ2l0YWwuY29tMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgJZD/Ohjb8w67Mmg9VmxmRPQCJA qI1v3K9hzMJZEPhn8yF0+HFXKgLT/OZv3AYh0ILrKd85BRnxePHOaXaqmXwAyKrE NWxg3/rtQ9Zn8Ca/CL2MkBcqJnp8M122Wo/pTvFGmk84Na6ysby5ZQbCnJQ23f+2 ss+uXKR2LOadY6cydDrJ/Q6kEcNupc6mBFir1sOHccb3Mx175FxN7mNM3JfCx7aZ o64aSgKLsoqDsr2JFjzDp1I8Jeza5aIOiYHmLTprWy7dUxwpvnb8G0CnjVwyBmYz 5I4YoSoxpkvqkzJMm9wiu6abDgIaQ5p4F5pl/gfB8J4eSrkxUnI6K9b/vQIDAQAB o4ICfjCCAnowDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwG A1UdEwEB/wQCMAAwHQYDVR0OBBYEFDzeZKemOvY5d97EZuN51lR9g30iMB8GA1Ud IwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1Bggr BgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvbXViTDIycDgy TWcwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFw NS5kZXIwIQYDVR0RBBowGIIWYml6YmxvZy5nZW5kaWdpdGFsLmNvbTAhBgNVHSAE GjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0 dHA6Ly9jcmxzLnBraS5nb29nL2d0czFwNS9XcjJHam41MXdUMC5jcmwwggEFBgor BgEEAdZ5AgQCBIH2BIHzAPEAdwDoPtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9 bQa9bgAAAYltEO4hAAAEAwBIMEYCIQDGtwSNHwTMdNZK2tkADypzpyeNaTFC4NLM 4/JRLm96xQIhALpkbuIyzIzt8ivzTLxq6Uu78CYQ1xU1i4ldwW02EIsgAHYAtz77 JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGJbRDyHQAABAMARzBFAiEA gKSxGhyo21iQhN72BT3l+6b62DvYd4hPtdAcL+mvq/ICICZ5nYu3q3EjiYcHlg4E ZysgtnfZqRxaqdsIeO4cNnBzMA0GCSqGSIb3DQEBCwUAA4IBAQB7XZGPH5OxohZS 1g7vmD5YOb7f7De1Ni8w3lMqD7Regye6SdZbheB6zDcyt0S+d3AF5ORYTqppNNt+ oVYm+0u3sHEOvTIwswwLjjjeJIw+fboF9lGds3jJXdd4uU/ONfEQkoYChrH9QjyX WHi/Jal6IDX5HuqzJyfvN4SQ39/mWRh8+F9O3bD7PTd8r1sEK7M3pWTKME4Bxdpo o+HmOagvgfY+6zY3XhhX2fcEfsrdbtzuDeg+DFLqZSp40j8uz9MINXW14Y+moOA2 OJlK13vubmKWP3SN7AE0hPV5/YthvGrgrJM8IfFhjroqTFX8QOr7p00yIrNCMlQG LnzQ4q5l -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgJZD/Ohjb8w67Mmg9Vm xmRPQCJAqI1v3K9hzMJZEPhn8yF0+HFXKgLT/OZv3AYh0ILrKd85BRnxePHOaXaq mXwAyKrENWxg3/rtQ9Zn8Ca/CL2MkBcqJnp8M122Wo/pTvFGmk84Na6ysby5ZQbC nJQ23f+2ss+uXKR2LOadY6cydDrJ/Q6kEcNupc6mBFir1sOHccb3Mx175FxN7mNM 3JfCx7aZo64aSgKLsoqDsr2JFjzDp1I8Jeza5aIOiYHmLTprWy7dUxwpvnb8G0Cn jVwyBmYz5I4YoSoxpkvqkzJMm9wiu6abDgIaQ5p4F5pl/gfB8J4eSrkxUnI6K9b/ vQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 272786302376543798900645242906750393058 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-19 06:32:53 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-17 06:32:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bizblog.gendigital.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23986435736021735869909138854619640476793573456880837507828311422932919575149409818820175549564405493482099347069526886393368408047783484904073075224340539807593020561055626199039530867806364245360317353501192952095990758902857238700942195363235340551372356993634688574287366697585613303476674791866206076810255906773401702096492230296056530945742275060621776456244335772584803090526626928292624253013249091669546899081514446306000135073697650450573261430357524288871123259662985018453212338931822927525376722206010148672009323301547894785572246834501781606804562949726113607502285358243987740217715361412621702463421 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 3cde64a7a63af63977dec466e379d6547d837d22 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/mubL22p82Mg' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bizblog.gendigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Wr2Gjn51wT0.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001896d10ee210000040300483046022100c6b7048d1f04cc74d64adad9000f2a73a7278d693142e0d2cce3f2512e6f7ac5022100ba646ee232cc8cedf22bf34cbc6ae94bbbf02610d715358b895dc16d36108b20007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001896d10f21d000004030047304502210080a4b11a1ca8db589084def6053de5fba6fad83bd877884fb5d01c2fe9afabf2022026799d8bb7ab7123898707960e04672b20b677d9a91c5aa9db0878ee1c367073 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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