*.gobiernosenlinea.com.mx

Issued by GlobalSign GCC R6 AlphaSSL CA 2023

About this certificate

This digital certificate with serial number 60:9e:a7:27:47:9f:26:f3:4a:e4:d5:3d was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.gobiernosenlinea.com.mx

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 60:9e:a7:27:47:9f:26:f3:4a:e4:d5:3d
Serial Number (int): 29902360582134782636971054397
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 2a:c0:09:3e:87:9b:9c:14:e5:bf:63:f3:5e:ab:16:94:d9:70:8a:94
AuthorityKeyId: bd:05:b7:f3:8a:93:3c:73:cb:79:fa:0f:85:12:a1:77:96:18:91:74

Fingerprint (sha1): 26:e3:00:30:6c:86:fb:16:5b:2c:b4:9c:97:3d:9e:fe:1a:16:e3:fe
Fingerprint (sha256): 51:54:6f:b4:e0:74:8c:4c:91:f6:63:46:b0:3c:a5:16:91:50:d7:48:e1:dc:0b:82:cd:3f:19:e1:19:eb:58:73

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr6alphasslca2023
CRL Distribution Point: http://crl.globalsign.com/gsgccr6alphasslca2023.crl

Check the revocation status for certificate *.gobiernosenlinea.com.mx

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gobiernosenlinea.com.mx

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.gobiernosenlinea.com.mx
gobiernosenlinea.com.mx

Other certificates including the domain name gobiernosenlinea.com.mx

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.gobiernosenlinea.com.mx in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHfTCCBmWgAwIBAgIMYJ6nJ0efJvNK5NU9MA0GCSqGSIb3DQEBCwUAMFUxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSswKQYDVQQDEyJH
bG9iYWxTaWduIEdDQyBSNiBBbHBoYVNTTCBDQSAyMDIzMB4XDTI0MDUyNDA4MDYy
MFoXDTI1MDYyNTA4MDYxOVowJDEiMCAGA1UEAwwZKi5nb2JpZXJub3NlbmxpbmVh
LmNvbS5teDCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAJ2BkirV0vRc
lfGGmjJsq8x2Swl82mmm+y2nVdkv4S1+M2VA9p2R8o5oh9zkbeMuhJTEhLwbcgsx
DvlkHutfFIQUZWEu8+340R7/Re9cG/buwVub+eIsAoUHo8Kc8WDG7qUjhgzyCnWg
tmVA3h7Qhstu3n+CJ2k9EbMIwidpCjZaNeUPzLL7MF9OsGQsB9evhwhnQxYJlEWn
OTOQZa5qvcIN3i1AqwCOTh+iUKxGTbwh1ftBonCGDw9ICaxgoC3KYSHMnC+NKi8t
qoRR8QXQ8cwt2hEFnclw7EN17ncMgIgR+y4CEGPQTQKWzvufcbGgtElcjC/D3WDH
PxPlVx6c7AUotbSB6hy5G6U1XS9a6Wx1JxrPGXzEwaWNTPRAvz++gGLYya0skZAU
o+BtR2Vm0lThIfHtdm13PhT5ooaFslEr6oRqE7QQhJ8XPAsR6QlVa8eq63r5rArV
N5z3QhYi9I7obxSqocBcleaF1DiIfGD9ovWZZQXwIWg+pjnqdMUgD9YpdQr49zOp
63BfIso2WnXemyKqZPd0sS/rIjbORZqEdhOD/rWM+vovVBChdDAENtrwilFvfJcO
8Kvit93Qp3OvaMg9Cf/VLeh8rSbpOnThfm+bIPSuNcqB4sErgIhnpbSULJi3jWXk
p1xDYkpGAEwQ2efw+gR11X8ouPaPwx1BAgMBAAGjggN8MIIDeDAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADCBmQYIKwYBBQUHAQEEgYwwgYkwSQYIKwYBBQUH
MAKGPWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzZ2NjcjZh
bHBoYXNzbGNhMjAyMy5jcnQwPAYIKwYBBQUHMAGGMGh0dHA6Ly9vY3NwLmdsb2Jh
bHNpZ24uY29tL2dzZ2NjcjZhbHBoYXNzbGNhMjAyMzBXBgNVHSAEUDBOMAgGBmeB
DAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmds
b2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMEQGA1UdHwQ9MDswOaA3oDWGM2h0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyNmFscGhhc3NsY2EyMDIzLmNybDA9
BgNVHREENjA0ghkqLmdvYmllcm5vc2VubGluZWEuY29tLm14ghdnb2JpZXJub3Nl
bmxpbmVhLmNvbS5teDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYD
VR0jBBgwFoAUvQW384qTPHPLefoPhRKhd5YYkXQwHQYDVR0OBBYEFCrACT6Hm5wU
5b9j816rFpTZcIqUMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdQDm0jFjQHeM
wRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY+pov2QAAAEAwBGMEQCIDPgArR1
IPugD1LXcmdSP9Jzkos9i4BY2p8o2E/v8liYAiAioOzQ0eUttR8z3gVgnWroCfNE
thYyq9bUe94GhRnpmAB2AE51oydcmhDDOFts1N8/Uusd8OCOG41pwLH6ZLFimjnf
AAABj6mi/WIAAAQDAEcwRQIgUAOwAIm8vcu5aOTK9gcQY5bKflcYc65gQ2G7tRyL
XOkCIQD0e/sdb/aebKv/YLXKHyFZ4UCoxh2yM0Byhw1YwHvc2gB2AOCSs/wMHcjn
aDYf3mG5lk0KUngZinLWcsSwTaVtb1QEAAABj6mi/bMAAAQDAEcwRQIgF4rljbQt
JOr5iXQtUVEOuew7qsz8Y+1a7qH2foXAPgACIQCKsm6uWil9B62TeFVyRxvClImV
F0e56yk0xCVPZDtPlzANBgkqhkiG9w0BAQsFAAOCAQEAB1/w9rYbXUZ0gSEeqOEa
8UfVBmU26r3Kt4lfxKFjDtHsEk7IR1Ql2UHTC2m3ZtvRKpIjBKS1jKQTffVjJJI1
O8MBqsU5KGD7/bdFmd7+HiHEsxOc4D9DpcmRcV6ysl02t/NhJDVPKvympG326qFV
CAUGZv50pA4dgucz+4cgRmIRAW+YrBQHKdycOdPQwhOJOkbOz6OILdNOUUeAIIv/
fwEVCzzVkX06M/SS8Z3XF2SmrxNDWwFPbO6/8+ABMN66p90RgxXN95kOqDpYr+sA
cDUurjXA/pM3AIBu4/UqbiDDkkHIeAdx0GbGgRbwXhfy9EosfvFb+05M/saCVD95
fQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnYGSKtXS9FyV8YaaMmyr
zHZLCXzaaab7LadV2S/hLX4zZUD2nZHyjmiH3ORt4y6ElMSEvBtyCzEO+WQe618U
hBRlYS7z7fjRHv9F71wb9u7BW5v54iwChQejwpzxYMbupSOGDPIKdaC2ZUDeHtCG
y27ef4InaT0RswjCJ2kKNlo15Q/MsvswX06wZCwH16+HCGdDFgmURac5M5Blrmq9
wg3eLUCrAI5OH6JQrEZNvCHV+0GicIYPD0gJrGCgLcphIcycL40qLy2qhFHxBdDx
zC3aEQWdyXDsQ3XudwyAiBH7LgIQY9BNApbO+59xsaC0SVyML8PdYMc/E+VXHpzs
BSi1tIHqHLkbpTVdL1rpbHUnGs8ZfMTBpY1M9EC/P76AYtjJrSyRkBSj4G1HZWbS
VOEh8e12bXc+FPmihoWyUSvqhGoTtBCEnxc8CxHpCVVrx6rrevmsCtU3nPdCFiL0
juhvFKqhwFyV5oXUOIh8YP2i9ZllBfAhaD6mOep0xSAP1il1Cvj3M6nrcF8iyjZa
dd6bIqpk93SxL+siNs5FmoR2E4P+tYz6+i9UEKF0MAQ22vCKUW98lw7wq+K33dCn
c69oyD0J/9Ut6HytJuk6dOF+b5sg9K41yoHiwSuAiGeltJQsmLeNZeSnXENiSkYA
TBDZ5/D6BHXVfyi49o/DHUECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29902360582134782636971054397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R6 AlphaSSL CA 2023'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-24 08:06:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-06-25 08:06:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gobiernosenlinea.com.mx'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 642568975801405276645288891044880209851883365025003971200176262120242690324284780995940299434210374595615153560135130344388033838472102846803474725170949394002680255149160203046834087189501540194375758413490444168028750997012278823121691952124845788314323940977675797165983935859361389474413780335579723683267095922941556353727414269313852072670364016715868621100397047246417974355364252702704254319127752982972878798409375035481092044677613220840109558658455512465036974734741019043733702724809442601644754101820074768505199371223669825558222962655709760037785981339984360902443653134401212636492738195770913404843538553328339733238199228564646137507786306792746055615785888013205179004903873613984123277266003733344566484698597687451944546624963599045564262865832880420962500382685589289099433580687139402229365340106320216868120368183172970443875633099219064859424051615285498492942868552879121228749386632054368401222378975874266520592239517467228468153630114779214271000195144053714962589936247063217181815861703089639475895574560563482883873152999723331209023966504786776675097696809423055438318920730022760382786033734031399596027092754563868379796598474997349424406498763102659775827962821877105790975236211293905883339365697
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr6alphasslca2023.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr6alphasslca2023'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr6alphasslca2023.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gobiernosenlinea.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gobiernosenlinea.com.mx'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName bd05b7f38a933c73cb79fa0f8512a17796189174
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2ac0093e879b9c14e5bf63f35eab1694d9708a94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00075ff0f6b61b5d467481211ea8e11af147d5066536eabdcab7895fc4a1630ed1ec124ec8475425d941d30b69b766dbd12a922304a4b58ca4137df5632492353bc301aac5392860fbfdb74599defe1e21c4b3139ce03f43a5c991715eb2b25d36b7f36124354f2afca6a46df6eaa15508050666fe74a40e1d82e733fb8720466211016f98ac140729dc9c39d3d0c213893a46cecfa3882dd34e514780208bff7f01150b3cd5917d3a33f492f19dd71764a6af13435b014f6ceebff3e00130debaa7dd118315cdf7990ea83a58afeb0070352eae35c0fe933700806ee3f52a6e20c39241c8780771d066c68116f05e17f2f44a2c7ef15bfb4e4cfec682543f797d