*.opsom.org

- OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME) -

Issued by TBS X509 CA business 2

About this certificate

This digital certificate with serial number f2:54:48:92:80:4a:50:99:f5:95:c7:35:c1:2a:e1:33 was issued on by TBS INTERNET.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)

Organization: OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)
Organization unit: 0002 490435484
Organization unit: OPSOM
Address: BP 70605
Address: 36 RUE DU GENERAL LECLERC
Postal code: 80000
State / Province: Somme
Locality: AMIENS
Country: FR

TBS INTERNET

Organization: TBS INTERNET
Organization unit: TBS INTERNET CA
State / Province: Calvados
Locality: Caen
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): f2:54:48:92:80:4a:50:99:f5:95:c7:35:c1:2a:e1:33
Serial Number (int): 322110799856573679163532076688396181811
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 35:9c:c3:a6:d1:14:26:d2:df:82:19:1f:65:59:3a:6d:3c:2f:77:7b
AuthorityKeyId: 71:f2:0b:a9:a3:ed:cb:03:4a:0c:3c:01:3b:be:4c:44:6d:eb:2a:f8

Fingerprint (sha1): 55:7c:2d:e0:64:95:3e:fd:3c:c4:a9:17:52:f8:8f:07:03:30:e7:9f
Fingerprint (sha256): 52:14:4b:34:5c:c8:59:e8:03:22:7d:b1:c7:64:c8:ac:31:1c:6f:e2:3a:29:2f:e4:20:85:63:64:bc:d9:e0:b6

Issuing Certificate URL: http://crt.usertrust.com/TBSX509CAbusiness2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.usertrust.com/TBSX509CAbusiness2.crl

Check the revocation status for certificate *.opsom.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.opsom.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.opsom.org
opsom.org

Other certificates including the domain name opsom.org

(limited to 100 certificates)
extranet.opsom.org
mail.opsom.org
vivreici.opsom.org
*.opsom.org
extranet.opsom.org
matomo.opsom.org
*.opsom.org
extranet.opsom.org
extranet.opsom.org
extranet.opsom.org
www.opsom.org
*.opsom.org
extranet.opsom.org
*.opsom.org
extranet.opsom.org

Certificate

The complete raw certificate details for *.opsom.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApnxHJMq89MJfwZ9etS0e
Le8eck9igD+btbD+D4RDuRV1d7/9GUXbOkj3EpEcctY5GHaqB7Xjo15dUgfp0F8n
18QRNGUu2I4nMCwCVLMM9uL2SVSp7GRnyRijdJqVcvkiZwReGFG5EcVEt6HVcdq6
APhzJY95aodIDgjRaevqCqnp7x7ncyOIH/D1W4eysY9p4zJZBC/qe/mL9jm2E7C2
d0N3FqaAty7dgeX6ezwl8Bfl0/Ek+68iWlFIXNVFB0rzfYrhk1F67mJE8OtTI4AX
mRdAZdJiPSh3HJeOlQUW5g6FovpYyNzngkFb8En4gli2oJ9bgIjqt4LPTJ+dpFdG
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 322110799856573679163532076688396181811
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Calvados'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Caen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS INTERNET CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TBS X509 CA business 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '80000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Somme'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AMIENS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BP 70605'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '36 RUE DU GENERAL LECLERC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPH EN SOMME (OFFICE PUBLIC DE L'HABITAT EN SOMME)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0002 490435484'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPSOM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.opsom.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21016842343470952714767615134622413100453240240286797662984289012908054451141921067087121183571486681657042252026533735371888345813605089150980773792330119997568260548139534998937146300508451929922762083787674623304070328548325789221595858545047762095331486576942018126206983222276949446836231483269089664753178583736647035477062720444948620101812694206138714841813983849862593675648282293053668139190560902757702649189050999139723532017165165355346734809174312264738275384567434651560121493799163773898799793313524786948662693971774486937316763506890940377867986938983475054864699855758445621091039535721555871352497
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 71f20ba9a3edcb034a0c3c013bbe4c446deb2af8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							359cc3a6d11426d2df82191f65593a6d3c2f777b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.12983.2.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://cps.usertrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.usertrust.com/TBSX509CAbusiness2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/TBSX509CAbusiness2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.opsom.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opsom.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000165d23fea240000040300473045022100bfcd923ce6f3a6bd5b8085fa36484700447326510037d69e50305869e69a400f02204a9aa51e4e905eb037cb026542d011110489dcee2ce4bb504cce8f1241d89c9d007500747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc5600000165d23fea520000040300463044022022f2ac2d78e3c5a03363b648ca0dfcb0e2215f366c7889a0e08d60d06bed873302207f13bfbf78b94b9cd54297d57d126b727253469d9ce9990a62ce817a81f9a9ae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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