www.quality.richemont.com

- Richemont International SA -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 32:33:bc:4d:c8:d6:52:3c:48:88:f8:ca:7a:b9:62:fc was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Richemont International SA

Organization: Richemont International SA
Organization unit: Richemont
State / Province: Genève
Locality: Bellevue
Country: CH

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 32:33:bc:4d:c8:d6:52:3c:48:88:f8:ca:7a:b9:62:fc
Serial Number (int): 66730026184761170402388590150846866172
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 79:8d:f2:d1:d5:9d:27:26:01:a1:af:1d:6c:55:e7:c1:59:7e:93:69
Fingerprint (sha256): 3b:56:4b:0f:f8:db:4c:1f:d3:cd:f1:21:74:9b:bd:d4:5a:3f:7a:4b:4e:f5:8f:88:c9:8c:4a:a0:30:ed:b2:fd

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate www.quality.richemont.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.quality.richemont.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.www.quality.creative-academy.com
admin.www.quality.richemont.com
bridge.quality.richemont.com
quality-admin.campusghh.ch
quality-admin.iosw.com
www.quality.creative-academy.com
www.quality.richemont.com

Other certificates including the domain name richemont.com

(limited to 100 certificates)
preprod-iisfarm.richemont.com
careers.richemont.com
booster2.richemont.com
intranet.richemont.com
intranet.richemont.com
richemont.com
xsrna.richemont.com
xs.richemont.com
intranet.richemont.com
dam.richemont.com
intranet.richemont.com
belenus.richemont.com
collaboration.richemont.com
apps2013.richemont.com
linemedia.preprod.richemont.com
api-booster.richemont.com
preprod-apps2016.richemont.com
linemedia.preprod.richemont.com
media.richemont.com
vo1webdisp.richemont.com
wwsip.richemont.com
spark.nprd.val.elb.richemont.com
careers.richemont.com
booster.richemont.com
apps.richemont.com
www.richemont.com
preprod-apps2016.richemont.com
owa.richemont.com
intranet.richemont.com
preprod-apps2016.richemont.com
booster.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
dam.richemont.com
linemedia.preprod.richemont.com
antispam.richemont.com
svn.richemont.com
apps2016.richemont.com
intranet.richemont.com
launchpad.richemont.com
visionnaire.richemont.com
epm-mobile.richemont.com
intranet.richemont.com
mdm.richemont.com
richemont.com
epm-mobile.richemont.com
eusip.richemont.com
www.quality.alange-soehne.com
jobs.richemont.com
jenkins-aws.richemont.com
search.richemont.com
launchpad.richemont.com
cyberjourney.richemont.com
api-booster.richemont.com
linemedia.preprod.richemont.com
admin.pre-booster.richemont.com
pre-booster.richemont.com
owa-sso.richemont.com
id-sso.richemont.com
scn01.richemont.com
intranet.preprod.richemont.com
owa-nosso.richemont.com
linemedia.preprod.richemont.com
epm-mobile.richemont.com
linemedia.preprod.richemont.com
linemedia.preprod.richemont.com
www.quality.alange-soehne.com
owa-nosso.richemont.com
careers.richemont.com
amer-ra.richemont.com
media.richemont.com
iisfarm.richemont.com
preprod-apps2013.richemont.com
emea-ra.richemont.com
xs4.richemont.com
inet.richemont.com
midgard.ch.richemont.com
aegis.ch.richemont.com
collaboration.richemont.com
intranet.richemont.com
linemedia.preprod.richemont.com
apps2016.richemont.com
owa.richemont.com
fileexchange.richemont.com
creative-academy.com
agile.quality.richemont.com
secure.richemont.com
cs.richemont.com
www.quality.alange-soehne.com
richemont.com
richemont.com
owa.richemont.com
agile.richemont.com
preprod-iisfarm.richemont.com
careers.richemont.com
*.richemont.com
belenus.richemont.com
www.lcboutiquenet.com
*.mytandem.eu
intranet.staging.richemont.com

Certificate

The complete raw certificate details for www.quality.richemont.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsFRanF1Yzlojh9WNubD
0fc4GxHSddVRInXkoTbROfh+nGmPZzZmLBxcX48kFdlb3guMQq14ylYasQC5K/yf
HFB+YRsEvgR5nvKwn4tPPWhGJ6+fUvw2BP3KLQDR4bCInuQwOQ4nmSaGvtDvUW43
lPsRA9PeN2bJc+opCDMIdHh2AqPZrkleL/TVDeXIo8tu1c3zqvcFLDJNdPlGkiEY
ZKwWyjhCRweo6hOw/AliL8VWYFL6lXqJfFWlFhuK6HtkGyIf4EbirGcI99OdoXtR
fPjf0bR/qMaK7wyVrSC1GGnOjr+exhDFp9eQNLCGBTfNJimoZtHx9jP7ZrkHqkHU
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 66730026184761170402388590150846866172
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Genève'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont International SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Richemont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.quality.richemont.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23070700177583079249057073849281778898827708618350798614228648933822944575677768982320312925851267773275381182827730009964155148290491507529579221412820570939933687849393006534093940289587145331017234906856827726407869966920224888491634397186601986461544421672857148991855489262571334241907102796008983512495834451673055962379546913974533198197850239112816966711706072273396069907350347855454545941524569657193137857513408707821863782904718858388818692792916212384006939303741904027650636363798540458873901607613879019812168002142093496618064158105156242815455614100349485775014302744362658608739519978021659391153261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (219 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.quality.creative-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.www.quality.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.quality.richemont.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quality-admin.campusghh.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'quality-admin.iosw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality.creative-academy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.quality.richemont.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015573a5eef20000040300473045022100f962e0ef9ca59b33a3ec245ae7b23800df75cba8c9b061a8d54ca8ee245fe03d02203d8c146a3c5fefbb39424efed00126e5fcc83423a2a98c0d66f5932217257ce7007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015573a5ef280000040300483046022100bb894de036a3b5d2ee1d19f5266a1f74a8122f02b5c3934eb4a5a2fe2e56f836022100fb2b61cab70170ac268eaeea4759e97ceaae0fc14d5c6f645564931c9825d0d2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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