www.saog.sp.gov.br
- PRODESP -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 53:22:bf:fd:15:e2:27:a8:2f:fc:e8:fe was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
PRODESP
Organization:
PRODESP
State / Province:
SAO PAULO
Locality: TABOAO DA SERRA
Country: BR
Locality: TABOAO DA SERRA
Country: BR
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 53:22:bf:fd:15:e2:27:a8:2f:fc:e8:feSerial Number (int): 25729265933639883269695400190
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 55:ac:6e:66:31:b8:bc:92:01:28:aa:36:a5:9f:0d:03:ff:8c:53:44
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): 50:03:8f:f0:83:e7:e6:74:c8:9c:01:10:6e:4a:09:3f:13:85:14:eb
Fingerprint (sha256): 48:a5:d4:92:52:35:f1:f8:66:10:ac:3b:ce:2c:d0:57:9e:5a:ab:96:a4:c9:3b:e1:f7:14:de:53:8c:89:bc:a5
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate www.saog.sp.gov.br
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.saog.sp.gov.br
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.saog.sp.gov.br
saog.sp.gov.br
saog.sp.gov.br
Other certificates including the domain name saog.sp.gov.br
(limited to 100 certificates)
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
www.saog.sp.gov.br
Certificate
The complete raw certificate details for www.saog.sp.gov.br in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGWDCCBUCgAwIBAgIMUyK//RXiJ6gv/Oj+MA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzAxMTMxNTE2MDZaFw0y NDAyMTQxNTE2MDVaMGoxCzAJBgNVBAYTAkJSMRIwEAYDVQQIEwlTQU8gUEFVTE8x GDAWBgNVBAcTD1RBQk9BTyBEQSBTRVJSQTEQMA4GA1UEChMHUFJPREVTUDEbMBkG A1UEAxMSd3d3LnNhb2cuc3AuZ292LmJyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A MIIBCgKCAQEAzGnPyZoZtocghPzDyXo+Pt7mrHnM8ghLUTacpF/dFdMWfAxTMaNY DaKTI3id7DPi8YJ45nzJuNuqPWqssMqqOeKcqbxN9DhHtlHwCMLmNKMD0G8yiJcC HTtGQzHJrIiVZItWVzPDUdECKgitjS4lD2v6ImU9MYQvjRPTDY6Fzl4rIbLGYdpm Qo/sBAh87wFGHCaf8NiFbY4gthU1MkZx9eM7JMYlTZpDFyJxo6b/Ntg9cWv4W9d5 MJ9kBzfmgNgojdrew35FzUCXB+1XtTCJQR66fOgzMqffY5bJud3bOg32LvdeR2Vg bI3tiazNIF3yO1L4/MxgO9RyCdDSD3y6PQIDAQABo4IDFjCCAxIwDgYDVR0PAQH/ BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2Vj dXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3 BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNz bGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZo dHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIw CQYDVR0TBAIwADAtBgNVHREEJjAkghJ3d3cuc2FvZy5zcC5nb3YuYnKCDnNhb2cu c3AuZ292LmJyMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSME GDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4EFgQUVaxuZjG4vJIBKKo2 pZ8NA/+MU0QwggF8BgorBgEEAdZ5AgQCBIIBbASCAWgBZgB1AHPZnokbTJZ4oCB9 R53mssYc0FFecRkqjGuAEHrBd3K1AAABhauz2ocAAAQDAEYwRAIgMvf7bN4FwtAv eB12mug7B4X7CGbicoh1F9Dym93AwLgCICh+MtXpSJ1qsmbGFlhTg77Iecq9U3dh 5M4tdIznwBPuAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGF q7PacQAABAMARzBFAiEAsgehr3HZZO7Ynm8+H4OoKObyJ6V0uU13bdL5T3+XaHAC IFAKk+JvlJ5U1PdwPiVljeJVC1wdpI0XYuMWjrqqVHKXAHUAdv+IPwq2+5VRwmHM 9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGFq7PanAAABAMARjBEAiBNfMo+Jnhwe1w1 kWVx4UnlTrOBykWG6PgSGThNRzQBVgIgUWMHP5hSAznvvi8ECZtDFA+4wH+Mhgc5 YSWKoSpJjBIwDQYJKoZIhvcNAQELBQADggEBAD824m5/qjmnovrA9rYzVWWAQQ3h LSmwxeqrxlEFexZVfPIW+rFrd7FmHh5rMByOf5p4EgErBTkPgETZgOceVGwGIfUM tU3afL+iKBNsKOv9inEunwBW5aPoRULD6cUUrRRqolh3AKfj0F4XcO3uKpolwflG 87xKz88DNLlFugiujrkh9b/uI0bBur1/X6wutUQKUv8hFLULN+Vwg4YLNSMwibRI nQYw3ZU1fywljNnHAD8bYXs6owNHdcgPmAQjwZttNd20oUkPT+doiX+1x64EjfAp v6X7mWrk+RJDlFVqAk2ncSJrgr+pMXE4MwXGm2objIsiLkr5mlHHmoVEvHw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGnPyZoZtocghPzDyXo+ Pt7mrHnM8ghLUTacpF/dFdMWfAxTMaNYDaKTI3id7DPi8YJ45nzJuNuqPWqssMqq OeKcqbxN9DhHtlHwCMLmNKMD0G8yiJcCHTtGQzHJrIiVZItWVzPDUdECKgitjS4l D2v6ImU9MYQvjRPTDY6Fzl4rIbLGYdpmQo/sBAh87wFGHCaf8NiFbY4gthU1MkZx 9eM7JMYlTZpDFyJxo6b/Ntg9cWv4W9d5MJ9kBzfmgNgojdrew35FzUCXB+1XtTCJ QR66fOgzMqffY5bJud3bOg32LvdeR2VgbI3tiazNIF3yO1L4/MxgO9RyCdDSD3y6 PQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 25729265933639883269695400190 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-13 15:16:06 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-14 15:16:05 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TABOAO DA SERRA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PRODESP' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.saog.sp.gov.br' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25804791892217877319792410158930312513558776997521997642387268464906534978027711282890192884103278180665267589368742425844180379653330280059858152165125359657089963233278997129508592100928332199765175778767719729476396783172162973191205024614707368391443665303355350656292783898071707267223051527714598018595920022446708134263463151934753524404523804879915869162463450234751289393260667131649231153947287623370447556453001345686399991617220553744189097159750388258141674433611355497787171259959648121819426628728350542109717350302223431207026313336221978784547418301952711460650997844017778353155799146638234443627069 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saog.sp.gov.br' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saog.sp.gov.br' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 55ac6e6631b8bc920128aa36a59f0d03ff8c5344 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes) 016600750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185abb3da870000040300463044022032f7fb6cde05c2d02f781d769ae83b0785fb0866e272887517d0f29bddc0c0b80220287e32d5e9489d6ab266c616585383bec879cabd537761e4ce2d748ce7c013ee00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d8847300000185abb3da710000040300473045022100b207a1af71d964eed89e6f3e1f83a828e6f227a574b94d776dd2f94f7f9768700220500a93e26f949e54d4f7703e25658de2550b5c1da48d1762e3168ebaaa54729700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185abb3da9c000004030046304402204d7cca3e2678707b5c35916571e149e54eb381ca4586e8f81219384d4734015602205163073f98520339efbe2f04099b43140fb8c07f8c86073961258aa12a498c12 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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