directbank.cupdata.com

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G2

About this certificate

This digital certificate with serial number 0e:72:db:d1:d5:0c:d4:ca:c5:e3:3f:28:e0:62:71:f9 was issued on by TrustAsia Technologies, Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: Shanghai
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:72:db:d1:d5:0c:d4:ca:c5:e3:3f:28:e0:62:71:f9
Serial Number (int): 19205572255186776851353033656743653881
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8e:5f:37:93:ad:6f:4b:2f:9b:71:f0:c9:8b:f6:1c:44:52:58:10:e6
AuthorityKeyId: 4f:85:fc:9b:59:d3:c6:53:97:8f:bc:1e:83:f3:1e:82:25:14:bc:79

Fingerprint (sha1): e4:0f:64:14:4c:c9:3f:99:f2:21:f3:51:29:44:b6:4b:c2:7a:89:57
Fingerprint (sha256): 34:ff:1f:bd:23:08:dd:14:3a:21:ec:42:20:a4:c6:50:69:3a:fa:99:f5:2a:74:eb:c8:cf:69:b9:1d:c0:e1:1d

Issuing Certificate URL: http://crl.digicert-cn.com/TrustAsiaOVTLSProCAG2.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/TrustAsiaOVTLSProCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/TrustAsiaOVTLSProCAG2.crl

Check the revocation status for certificate directbank.cupdata.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for directbank.cupdata.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

directbank.cupdata.com
directbank.uobchina.com.cn
directbank.crcbbank.com
directbank.jlnls.com
heb.caihongbank.com
dbsdigi.dbs.com.cn
direct.hfrcbc.com
zx.zznsyh.cn
directbank.qhrccb.com
dbank.fubonchina.com
www.wdnsbank.com
zx.hsbank.com.cn
zxyh.nccbank.com.cn
yinshu.gzhxrcb.com
direct.xwnsmsd.com
zxyh.qznsh.com
digitalpartnership.sc.com
milkywaypage.cupdapp.com

Other certificates including the domain name cupdata.com

(limited to 100 certificates)
web.cupdata.com
directbank.cupdata.com
wechat.cupdapp.com
web.cupdata.com
passort.leagcard.com
passort.leagcard.com
ncoas.cupdapp.com
ncoas.cupdapp.com
wlian.cupdata.com
resource.leagcard.com
resource.leagcard.com
web.cupdata.com
trip.cupdata.com
web.cupdata.com
citiweb.cupdata.com
wechat.cupdapp.com
resource.leagcard.com
directbank.cupdata.com
passort.leagcard.com
directbank.cupdata.com
ncoas.cupdapp.com
*.cupdata.com
wlian.cupdata.com
web.cupdata.com
securityplus.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
directbank.cupdata.com
www.cupdata.com
*.cupdata.com
passort.leagcard.com
resource.leagcard.com
xdzlar.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
*.statictest.cupdata.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
passort.leagcard.com
web.cupdata.com
web.cupdata.com
resource.leagcard.com
3d.cupdata.com
web.cupdata.com
app.cupdapp.com
web.cupdata.com
trip.cupdata.com
ncoas.cupdapp.com
securityplus.cupdata.com
passort.leagcard.com
directbank.cupdata.com
passort.leagcard.com
www.cupdata.com
passort.leagcard.com
citiweb.cupdata.com
www.cupdata.com
directbank.cupdata.com
trip.cupdata.com
web.cupdata.com
www.cupdata.com
mbank6.cupdata.com
directbank.cupdata.com
www.cupdata.com
passort.leagcard.com
scbwxmnrecsign.cupdata.com
ncoas.cupdapp.com
resource.leagcard.com
web.cupdata.com
resource.leagcard.com
web.cupdata.com
directbank.cupdata.com
resource.leagcard.com
3d.cupdata.com
directbank.cupdata.com
intl.cupdata.com
directbank.cupdata.com
ncoas.cupdapp.com
directbank.cupdata.com
onlineuat.cupdata.com
trip.cupdata.com
onlineuat.cupdata.com
www.cupdata.com
passort.leagcard.com
passort.leagcard.com
3d.cupdata.com
mbank6.cupdata.com
app.cupdapp.com
mbank6.cupdata.com
resource.leagcard.com
scbwxmnrecsign.test.cupdata.com
passort.leagcard.com
passort.leagcard.com
*.test.cupdata.com
passort.leagcard.com
resource.leagcard.com
resource.leagcard.com

Certificate

The complete raw certificate details for directbank.cupdata.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0utfeX1iG2vR3r1ZjL58
BTr3cmPlOxGQj5K2jHLWxFVyveD5T0PEjarHqbFAQBZUAGZ/uhTOrJDqck5N5LZL
3xzk6acFpfgfnA895PfoKD7D2K9EKgbUVFjNDDpwAUhQOZZUCeTcQ+MO3Eaefq2O
zk2BinIi5yTvWCXW/HwD6AyhjBfTEgvbqlDHTxOZiQO36oH+9inK/wk4G8/9P+k3
XLBLNbWnBuotTHFGpdwTGsnSCuiGwlLTd3fiHlAQdIhfiUnjKECc5ESP0aAI5Mg7
e9I4diAsHESIRcEpEXrX37YlDkjSvxy5aWhKvNJpphY3dzehj8MnXDd8o8CUSHlK
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19205572255186776851353033656743653881
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'directbank.cupdata.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26626110769168885816822898363711861955048169810155464527386796898289212203598013431598962284033409483060073506001472929158870079118468273056864826692276640724543983462515562150657284797523806778328700902259914742545517482207638197327896991574835918659951780739690709532478045698792678275982517018199977196872036606643572801866953830679367213845273664582296857078389305377130923701596543379289496745950939419648669871453136352440931094541053163084734191776331545627584319771194069321243547376591083203414807155071019436926859853026729388934081040809312819505768382734681962142335673039829916655970559974976508070021647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4f85fc9b59d3c653978fbc1e83f31e822514bc79
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e5f3793ad6f4b2f9b71f0c98bf61c44525810e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (388 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.cupdata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.uobchina.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.crcbbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.jlnls.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'heb.caihongbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbsdigi.dbs.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.hfrcbc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zx.zznsyh.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'directbank.qhrccb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dbank.fubonchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wdnsbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zx.hsbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxyh.nccbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'yinshu.gzhxrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'direct.xwnsmsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zxyh.qznsh.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitalpartnership.sc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'milkywaypage.cupdapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TrustAsiaOVTLSProCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TrustAsiaOVTLSProCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/TrustAsiaOVTLSProCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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