ws.cupdapp.net

- China Unionpay Data Services Co., Ltd. -

Issued by TrustAsia OV TLS Pro CA G3

About this certificate

This digital certificate with serial number 0d:bc:9b:de:05:fd:b7:0c:9b:35:b8:50:15:1d:ae:3b was issued on by TrustAsia Technologies, Inc..

With 21 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Unionpay Data Services Co., Ltd.

Organization: China Unionpay Data Services Co., Ltd.
State / Province: Shanghai
Country: CN

TrustAsia Technologies, Inc.

Organization: TrustAsia Technologies, Inc.
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:bc:9b:de:05:fd:b7:0c:9b:35:b8:50:15:1d:ae:3b
Serial Number (int): 18259277118603245824592451142393114171
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 90:36:33:37:58:35:81:ed:1c:53:d7:8c:cf:05:a8:e7:92:3e:3d:70
AuthorityKeyId: 9a:d9:0d:10:c9:c4:5f:4c:32:d2:e7:f0:1b:ad:4a:a6:2d:25:3b:d4

Fingerprint (sha1): 2e:3b:88:d6:21:4c:f7:42:e0:7e:39:52:3a:5d:1c:80:15:76:f0:ae
Fingerprint (sha256): 4c:fa:f1:45:de:bc:70:87:07:50:eb:a5:d7:89:be:0a:c6:e5:77:40:6a:36:1b:4c:03:46:89:12:d5:0d:61:9b

Issuing Certificate URL: http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl

Check the revocation status for certificate ws.cupdapp.net

21

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ws.cupdapp.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ws.cupdapp.net
ccapply.fjnx.com.cn
ws1.qzccbank.com
coas.jshbank.com
fbc.qlbchina.com
fraud.cupdapp.com
iws.ccabchina.com
ccoa.gsrcu.com
groupdeal.ynrcc.com
netapply.ynrcc.com
datacard.mintaibank.com
ysrlk.boubank.com
ccmms.grcbank.com
youcard.bankofrizhao.com.cn
xykapply.xrcbank.com.cn
apply.creditcard.xjrccb.com.cn
credit.zjrcbank.com
wscreditcard.jinzhoubank.com
xykapply.hnlyrcb.com
cupdapply.hkbea.com.cn
online.cbhb.com.cn

Other certificates including the domain name cupdapp.net

(limited to 100 certificates)
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
api.ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net
ws.cupdapp.net

Certificate

The complete raw certificate details for ws.cupdapp.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcroDJDyxSyihlScpzh+
sQTa5Ma1kDwLcApzXRvikB0iNlqrd8bkAjtj8pG2VL2g04qbdn5kdoP4HRyyjU8V
HdjH87T/JCX2WHrN4CJRgvlivg1P4slfb23eSA4lv5ffD3zErRiEBYS+S8UIRlFu
pe+Cj9wd2F8wwYi9c+if55THpYFDC0Tr7px4sW/cN5/3NuKZ9ru3Ipxx9tt+e6VK
rJwgkv8fM3UTOYQHk2ENFvMrEN3XKYht5o8nWHnhd5tv02zdZh1DcYCRpXy9Wwad
T2UamKOXTxiJjOyUA5fyt/bgpkzsAbYeFfo++gdEqihQGW7M8ppkicZWqN1EjvQJ
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18259277118603245824592451142393114171
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TrustAsia OV TLS Pro CA G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'China Unionpay Data Services Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ws.cupdapp.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24969002973909606936689415753361180579836090252359184795313986791657685967915068300202015081517102582661255802402207475079689987951453996473519522246576268451654243424715989022239584962006576664819645640281338503902255547246291421047651341242059113186148482437078936493236518770854665695623492896367265859644906173033636815754076557247824590822431594158413996216902817484501986070612879774252491048099575612790189793173578962271472220399859015949998670523409896898456770548768990033352124514706049422965993799266262183167108135494569831834526975727139844489205281151918223712336293957924003494809164727495632608299379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9ad90d10c9c45f4c32d2e7f01bad4aa62d253bd4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							90363337583581ed1c53d78ccf05a8e7923e3d70
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (456 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws.cupdapp.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccapply.fjnx.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ws1.qzccbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coas.jshbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fbc.qlbchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fraud.cupdapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iws.ccabchina.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccoa.gsrcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'groupdeal.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'netapply.ynrcc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datacard.mintaibank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ysrlk.boubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ccmms.grcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youcard.bankofrizhao.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.xrcbank.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apply.creditcard.xjrccb.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'credit.zjrcbank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wscreditcard.jinzhoubank.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'xykapply.hnlyrcb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cupdapply.hkbea.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'online.cbhb.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/TrustAsiaOVTLSProCAG3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/TrustAsiaOVTLSProCAG3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes)
							016500750046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017dca6a930f000004030046304402206f815320b79087a1805cd05ad99154f5a02ee8d12afdfdf448f4fb720f89409802206c3b6fc6288f2e86b01cad9b323855fac150d78a6eb9c6f84f2719a508fe7ef800750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017dca6a931d0000040300463044022077c00604f51b590bbe02faa7704148e193fe219d9e84cc7b65e1015b662a4bd5022005318d7ea16fbfbc6dcfe367fd936c5870e778dcce3a2e8e216620beb6b023cc00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017dca6a92d20000040300463044022019a5b1254cd00d4d57437affd1e87585e584cb32d82fe8da13f6fde81928a6740220460818dc6532c6dfe80c51652e9cbdb4df8fed4a62bf18c9a25e9c8ef463f646
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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