shop.steinberg.net

- Steinberg Media Technologies GmbH -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 11:d3:a3:46:78:15:28:cb:c8:2e:3c:8e was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Steinberg Media Technologies GmbH

Company registration number: HRB 86534
Organization: Steinberg Media Technologies GmbH
Address: Beim Strohhause 31
State / Province: Hamburg
Locality: Hamburg
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:d3:a3:46:78:15:28:cb:c8:2e:3c:8e
Serial Number (int): 5517099560563212950786948238
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 21:7e:e1:66:12:d8:ba:97:a3:5f:29:87:0f:69:61:c9:41:f2:3e:48
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 4f:8c:53:53:ca:23:3a:89:21:8d:9b:2d:a5:d2:95:3e:f3:18:81:19
Fingerprint (sha256): 52:8a:51:9f:65:fc:da:21:a8:64:0a:6c:a3:7d:e9:e0:e9:29:47:b8:13:be:0d:98:be:72:8c:35:50:d4:a7:fc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate shop.steinberg.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.steinberg.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.steinberg.net

Other certificates including the domain name steinberg.net

(limited to 100 certificates)
www.steinberg.net
id.steinberg.net
product-line-management.mbstage.steinberg.net
*.steinberg.net
shop.steinberg.net
shop.steinberg.net
www.steinberg.net
*.mbtest.steinberg.net
shop.steinberg.net
*.steinberg.net
download.steinberg.net
download.steinberg.net
steinberg.net
*.steinberg.net
download.steinberg.net
*.steinberg.net
pathfinder.playground.steinberg.net.io.steinberg.net
*.mb.steinberg.net
www.steinberg.net
product-line-management.mbstage.steinberg.net
beta.steinberg.net
download.steinberg.net
shop.steinberg.net
download.steinberg.net
news.steinberg.net
*.mb.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
*.mbstage.steinberg.net
b2b.steinberg.net
b2b.steinberg.net
mbstage.steinberg.net
*.mbstage.steinberg.net
testweb.steinberg.net
product-line-management.mb.steinberg.net
webmail.steinberg.de
news.steinberg.net
*.steinberg.net
www.steinberg.net
mb.steinberg.net
shop.steinberg.net
*.mbstage.steinberg.net
shop.steinberg.net
ru.steinberg.net
forums.steinberg.net
*.steinberg.net
shop.steinberg.net
news.steinberg.net
steinberg.net
product-line-management.mb.steinberg.net
ocl-steinberg-live.steinberg.net
shop.steinberg.net
shop.steinberg.net
id.steinberg.net
*.mbtest.steinberg.net
product-line-management.mbtest.steinberg.net
product-line-management.mb.steinberg.net
code-pool.test.io.steinberg.net
download.steinberg.net
steinberg.net
*.mbtest.steinberg.net
sdk.steinberg.net
*.mbtest.steinberg.net
steinberg.net
news.steinberg.net
www.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
id.steinberg.net
www.steinberg.net
shop.steinberg.net
mbstage.steinberg.net
mbtest.steinberg.net
newshub-publisher.mb.steinberg.net
*.mb.steinberg.net
news.steinberg.net
download.steinberg.net
pathfinder.io.steinberg.net
www.steinberg.net
www.steinberg.net
devweb.steinberg.net
forums.steinberg.net
*.mbstage.steinberg.net
sdk.steinberg.net
*.mb.steinberg.net
auth.steinberg.net
partner.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
openam-steinberg-euw-dev.id.forgerock.io
forums.steinberg.net
download.steinberg.net
*.mbtest.steinberg.net
news.steinberg.net
beta.steinberg.net
*.steinberg.net
news.steinberg.net
steinberg.net
steinberg.net
mb.steinberg.net

Certificate

The complete raw certificate details for shop.steinberg.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dvGcrOVBzJJz18UT7hQ
/JOTwdqmwOCgIJIuLWDJrbYov3VXFJAznqLkgRJrudQVQxNDu99shW9Sa+moolCl
pfQvNHiNNIab9aTaoKrmZH+d5KsOIFQ9rdNre0IleMG1hNRlOtqepoL/gnQlF7Eq
yzzpmCfN7Qtr07MGBfv2vCmsKlZEFqnWElvgcj59kvb2avxZz4vBIayS/eSIV6Bz
cv7E9BKL8ASIJJP560V2DWHviCVL+L0cH01ITSb6EQneadlTnWaQtO2T4CnjfeEc
L15x86vLMJmkJddQ2duoCD4SGaHxeOIfMIAKx3dap6Y1xUDD8f4sTkA8S49dm8cx
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5517099560563212950786948238
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-18 13:49:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-23 15:12:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HRB 86534'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Hamburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Beim Strohhause 31'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Steinberg Media Technologies GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'shop.steinberg.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29016947021483627690695791111298152126204533272624251603904311953687059897753539499661292759593929746142527699083859160093960108168334228597728007558235280052568421253889013266241147072615569883335045913806535189515535923148793598522934677932230786463110007096686078039974659600018967195542535850549121966753304208451066264959251373861550051345797180828059328074612762963368052569528830827012886438866913044121011131767696396367756314925308028973165652480148928966361557276381322767525536224405435912855630620991884234520154816533315834192387503200694454530423567665192563068447541260203372914027579031038151719596499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.steinberg.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							217ee16612d8ba97a35f29870f6961c941f23e48
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016ddf20fbc00000040300463044022048fe33e91a75f0e2283545518aa81c4e6bd9a34751b18c6d724c7a654ac6f36b022013561b43ccc66e3fc6accc84836bf413c320481c39c6b9e1ad833bb0e73186c4007600b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e0000016ddf20fb69000004030047304502201875105c4ce8cdb9f67297627407f409865834f3e5cee38ec601ac44797f69bd022100eb77761e8a2abea4b8f73eed9d0813d370abcca917fe43198df22facf6e587c2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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