legacy.denverpost.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number 52:26:08:c0:66:a2:7a:37:09:e6:bc:29:5d:2a:2b:1e was issued on by Google Trust Services LLC.
With 72 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=legacy.denverpost.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 52:26:08:c0:66:a2:7a:37:09:e6:bc:29:5d:2a:2b:1eSerial Number (int): 109194180437835351108662612905746377502
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 38:ff:f9:29:5f:38:ca:a2:2d:bb:c8:c1:f1:e1:ac:af:7b:19:5f:6f
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): 44:d9:c3:7c:98:7f:da:c9:a5:dc:78:45:29:2c:2d:4f:ce:69:2e:62
Fingerprint (sha256): 52:90:51:9b:33:e4:25:95:15:74:c8:f4:2e:c6:04:aa:72:08:40:0a:3f:4e:ba:be:f0:e4:47:81:79:95:e6:82
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1d4/YNT1-N_vpN4CRL Distribution Point: http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl
Check the revocation status for certificate legacy.denverpost.com
72
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for legacy.denverpost.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
legacy.denverpost.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com
www.statsdigital.com
mobileobits.advocate-news.com
obituaries.advocate-news.com
mobileobits.gazettes.com
obituaries.gazettes.com
mobileobits.mendocinobeacon.com
obituaries.mendocinobeacon.com
obituaries.nydailynews.com
obits.ocregister.com
obituaries.pilotonline.com
mobileobits.pvnews.com
obituaries.pvnews.com
dailytribune.rememberingmi.us
grandtraverse.rememberingmi.us
macombdaily.rememberingmi.us
morningstarpublishing.rememberingmi.us
sourcenewspapers.rememberingmi.us
theleader.rememberingmi.us
themorningsun.rememberingmi.us
theoaklandpress.rememberingmi.us
voicenews.rememberingmi.us
trentonian.rememberingnj.us
dailyfreeman.rememberingny.us
oneidadispatch.rememberingny.us
saratogian.rememberingny.us
troyrecord.rememberingny.us
morningjournal.rememberingoh.us
news-herald.rememberingoh.us
berksmontnews.rememberingpa.us
buckslocalnews.rememberingpa.us
dailylocal.rememberingpa.us
delconewsnetwork.rememberingpa.us
delcotimes.rememberingpa.us
mainlinemedianews.rememberingpa.us
montgomerynews.rememberingpa.us
phoenixvillenews.rememberingpa.us
pottsmerc.rememberingpa.us
southernchestercountyweeklies.rememberingpa.us
southjerseylocalnews.rememberingpa.us
thereporteronline.rememberingpa.us
timesherald.rememberingpa.us
obituaries.tbrnews.com
membership.mcall.com
chicagomag.com
insidebiz.com
www.insidebiz.com
membership.sun-sentinel.com
membership.orlandosentinel.com
membership.pilotonline.com
membership.dailypress.com
membership.courant.com
membership.nydailynews.com
classified.orlandosentinel.com
membership.baltimoresun.com
membership.capitalgazette.com
membership.chicagotribune.com
openhomes.delmartimes.net
openhomes.lajollalight.com
openhomes.encinitasadvocate.com
openhomes.pomeradonews.com
openhomes.ramonasentinel.com
openhomes.ranchosantafereview.com
myappstest.tribpub.com
statsdigital.com
myapps.tribpub.com
marketplace.baltimoresun.com
askingeric.com
www.askingeric.com
cportal.medianewsgroup.com
cportal-remote.medianewsgroup.com
placeanad.sandiegouniontribune.com
www.statsdigital.com
Other certificates including the domain name denverpost.com
(limited to 100 certificates)
cdn-le4.arkadiumhosted.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com
myaccount.mercurynews.com
dns-vetting1-jeffg-noah.map.fastly.net
denverpost.com
dns-vetting1m.map.fastly.net
jobs.bayareanewsgroup.com
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
dns-vetting1h.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1j.map.fastly.net
hiring.wandtv.com
dns-vetting1a.map.fastly.net
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
jobs.bayareanewsgroup.com
cdn-le4.arkadiumhosted.com
dfm.map.fastly.net
jobs.bayareanewsgroup.com
ads.denverpost.com
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1j.map.fastly.net
dns-vetting1-jeffg-noah.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
dns-vetting1i.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1a.map.fastly.net
legacy.denverpost.com
twp.denverpost.com
dns-vetting1m.map.fastly.net
mylocal.denverpost.com
vpn.medianewsgroup.com
jobs.bayareanewsgroup.com
dfm.map.fastly.net
twp.denverpost.com
test.checkout.mercurynews.com
hiring.wandtv.com
test.myaccount.mercurynews.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
dfm.map.fastly.net
mylocal.denverpost.com
dns-vetting1a.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
dfm.map.fastly.net
dev.myaccount.mercurynews.com
dns-vetting1m.map.fastly.net
promote.denverpost.com
businessdirectory.denverpost.com
blogs.denverpost.com
twp.denverpost.com
dns-vetting1a.map.fastly.net
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
ads.denverpost.com
businessdirectory.denverpost.com
dns-vetting1a.map.fastly.net
jobs.bayareanewsgroup.com
dns-vetting1j.map.fastly.net
cdn-le4.arkadiumhosted.com
dns-vetting1j.map.fastly.net
denverpost.com
dptv.denverpost.com
dns-vetting1a.map.fastly.net
twp.denverpost.com
twp.denverpost.com
dfm.map.fastly.net
dfm.map.fastly.net
dfm.map.fastly.net
hiring.wandtv.com
dns-vetting1j.map.fastly.net
dns-vetting1m.map.fastly.net
games.denverpost.com
cdn-le4.arkadiumhosted.com
dns-vetting1a.map.fastly.net
dns-vetting1h.map.fastly.net
dns-vetting1a.map.fastly.net
twp.denverpost.com
mg2access.mercurynews.com
hiring.wandtv.com
businessdirectory.denverpost.com
ssl.smugmug.com
dns-vetting1a.map.fastly.net
secure.www.denverpost.com
dns-vetting1m.map.fastly.net
dns-vetting1j.map.fastly.net
uploads.denverpost.com
ssl.smugmug.com
Certificate
The complete raw certificate details for legacy.denverpost.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIINhjCCDG6gAwIBAgIQUiYIwGaiejcJ5rwpXSorHjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDA2MDcxODM2MTFaFw0yNDA5MDUx OTIxNTRaMCAxHjAcBgNVBAMTFWxlZ2FjeS5kZW52ZXJwb3N0LmNvbTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAJyOedpr+GxHGSppiz7B7ONuPgvu4+7J ciHey/vXxkz4OL2XxCXrPW46VXD9Q4p18NSZ3GeqJXYlJDWbbTaL3Pe/WkvlOY70 aTIH4/i9ou/gxh2StXECXaz6zykxh4HZtvwISoBkYSPoeWucO1i9EatgLddVmPs8 npwG07kuzlHXqBxo/wg1vZQjyAd68npXKLVcizbSnabKfCAj90eh4fR5FOAw3hJP gx51KUpSTTRgha6nutXj4qet5/dscokvOCDpsrUxOdgfdSXOdUmIP8LrE/DxTbyk sNKeuWPgYwvF5MKzO5UrJNZ8Iqu2D8VHxyrUJxsOudveshGPfZFV808CAwEAAaOC CpQwggqQMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQ4//kpXzjKoi27yMHx4ayvexlfbzAfBgNVHSME GDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYB BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L1lOVDEtTl92cE40 MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQu ZGVyMIIINgYDVR0RBIIILTCCCCmCFWxlZ2FjeS5kZW52ZXJwb3N0LmNvbYIdbW9i aWxlb2JpdHMuYWR2b2NhdGUtbmV3cy5jb22CHG9iaXR1YXJpZXMuYWR2b2NhdGUt bmV3cy5jb22CGG1vYmlsZW9iaXRzLmdhemV0dGVzLmNvbYIXb2JpdHVhcmllcy5n YXpldHRlcy5jb22CH21vYmlsZW9iaXRzLm1lbmRvY2lub2JlYWNvbi5jb22CHm9i aXR1YXJpZXMubWVuZG9jaW5vYmVhY29uLmNvbYIab2JpdHVhcmllcy5ueWRhaWx5 bmV3cy5jb22CFG9iaXRzLm9jcmVnaXN0ZXIuY29tghpvYml0dWFyaWVzLnBpbG90 b25saW5lLmNvbYIWbW9iaWxlb2JpdHMucHZuZXdzLmNvbYIVb2JpdHVhcmllcy5w dm5ld3MuY29tgh1kYWlseXRyaWJ1bmUucmVtZW1iZXJpbmdtaS51c4IeZ3JhbmR0 cmF2ZXJzZS5yZW1lbWJlcmluZ21pLnVzghxtYWNvbWJkYWlseS5yZW1lbWJlcmlu Z21pLnVzgiZtb3JuaW5nc3RhcnB1Ymxpc2hpbmcucmVtZW1iZXJpbmdtaS51c4Ih c291cmNlbmV3c3BhcGVycy5yZW1lbWJlcmluZ21pLnVzghp0aGVsZWFkZXIucmVt ZW1iZXJpbmdtaS51c4IedGhlbW9ybmluZ3N1bi5yZW1lbWJlcmluZ21pLnVzgiB0 aGVvYWtsYW5kcHJlc3MucmVtZW1iZXJpbmdtaS51c4Iadm9pY2VuZXdzLnJlbWVt YmVyaW5nbWkudXOCG3RyZW50b25pYW4ucmVtZW1iZXJpbmduai51c4IdZGFpbHlm cmVlbWFuLnJlbWVtYmVyaW5nbnkudXOCH29uZWlkYWRpc3BhdGNoLnJlbWVtYmVy aW5nbnkudXOCG3NhcmF0b2dpYW4ucmVtZW1iZXJpbmdueS51c4IbdHJveXJlY29y ZC5yZW1lbWJlcmluZ255LnVzgh9tb3JuaW5nam91cm5hbC5yZW1lbWJlcmluZ29o LnVzghxuZXdzLWhlcmFsZC5yZW1lbWJlcmluZ29oLnVzgh5iZXJrc21vbnRuZXdz LnJlbWVtYmVyaW5ncGEudXOCH2J1Y2tzbG9jYWxuZXdzLnJlbWVtYmVyaW5ncGEu dXOCG2RhaWx5bG9jYWwucmVtZW1iZXJpbmdwYS51c4IhZGVsY29uZXdzbmV0d29y ay5yZW1lbWJlcmluZ3BhLnVzghtkZWxjb3RpbWVzLnJlbWVtYmVyaW5ncGEudXOC Im1haW5saW5lbWVkaWFuZXdzLnJlbWVtYmVyaW5ncGEudXOCH21vbnRnb21lcnlu ZXdzLnJlbWVtYmVyaW5ncGEudXOCIXBob2VuaXh2aWxsZW5ld3MucmVtZW1iZXJp bmdwYS51c4IacG90dHNtZXJjLnJlbWVtYmVyaW5ncGEudXOCLnNvdXRoZXJuY2hl c3RlcmNvdW50eXdlZWtsaWVzLnJlbWVtYmVyaW5ncGEudXOCJXNvdXRoamVyc2V5 bG9jYWxuZXdzLnJlbWVtYmVyaW5ncGEudXOCInRoZXJlcG9ydGVyb25saW5lLnJl bWVtYmVyaW5ncGEudXOCHHRpbWVzaGVyYWxkLnJlbWVtYmVyaW5ncGEudXOCFm9i aXR1YXJpZXMudGJybmV3cy5jb22CFG1lbWJlcnNoaXAubWNhbGwuY29tgg5jaGlj YWdvbWFnLmNvbYINaW5zaWRlYml6LmNvbYIRd3d3Lmluc2lkZWJpei5jb22CG21l bWJlcnNoaXAuc3VuLXNlbnRpbmVsLmNvbYIebWVtYmVyc2hpcC5vcmxhbmRvc2Vu dGluZWwuY29tghptZW1iZXJzaGlwLnBpbG90b25saW5lLmNvbYIZbWVtYmVyc2hp cC5kYWlseXByZXNzLmNvbYIWbWVtYmVyc2hpcC5jb3VyYW50LmNvbYIabWVtYmVy c2hpcC5ueWRhaWx5bmV3cy5jb22CHmNsYXNzaWZpZWQub3JsYW5kb3NlbnRpbmVs LmNvbYIbbWVtYmVyc2hpcC5iYWx0aW1vcmVzdW4uY29tgh1tZW1iZXJzaGlwLmNh cGl0YWxnYXpldHRlLmNvbYIdbWVtYmVyc2hpcC5jaGljYWdvdHJpYnVuZS5jb22C GW9wZW5ob21lcy5kZWxtYXJ0aW1lcy5uZXSCGm9wZW5ob21lcy5sYWpvbGxhbGln aHQuY29tgh9vcGVuaG9tZXMuZW5jaW5pdGFzYWR2b2NhdGUuY29tghpvcGVuaG9t ZXMucG9tZXJhZG9uZXdzLmNvbYIcb3BlbmhvbWVzLnJhbW9uYXNlbnRpbmVsLmNv bYIhb3BlbmhvbWVzLnJhbmNob3NhbnRhZmVyZXZpZXcuY29tghZteWFwcHN0ZXN0 LnRyaWJwdWIuY29tghBzdGF0c2RpZ2l0YWwuY29tghJteWFwcHMudHJpYnB1Yi5j b22CHG1hcmtldHBsYWNlLmJhbHRpbW9yZXN1bi5jb22CDmFza2luZ2VyaWMuY29t ghJ3d3cuYXNraW5nZXJpYy5jb22CGmNwb3J0YWwubWVkaWFuZXdzZ3JvdXAuY29t giFjcG9ydGFsLXJlbW90ZS5tZWRpYW5ld3Nncm91cC5jb22CInBsYWNlYW5hZC5z YW5kaWVnb3VuaW9udHJpYnVuZS5jb22CFHd3dy5zdGF0c2RpZ2l0YWwuY29tMCEG A1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+g LYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMWQ0L2NISTBsam1tSXZRLmNybDCC AQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOze w1FIWUZxH7WbAAABj/QznTwAAAQDAEcwRQIhANI4xrQivNIdef9001m4UZLmaEC2 RMMM2fvOIVD4VxWqAiAnggwbf0vux5aU/jBE1QinCRKutwj6MYmK/iHBpxWYFQB2 AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABj/QznWUAAAQDAEcw RQIhAMXgRTuz9yCtQJQTU/TgV92LiH7UClfmamVpZVlqMthxAiBDdIEaTkPI7hxY XA/RkPSi2xBLVbewv/ZDUArNuESuNjANBgkqhkiG9w0BAQsFAAOCAQEAbaT7Ju6L a9TApdg4u3LrYh25UoO+H8mdGH2W7uqN5dCPhPupn7xlPRhc36agTcMjGlQFdK+M aOXV+ut7BCIz4v0B0PgFZQ+asotHmuK3o/i2c6P3qKfr1zgrNLa7wfP0FCUl8vY1 i9wqYUm3LjoIMjphcmwIUgTAperL3uhCLPq0Kxk7q9ToDGmAKPcnxHlVlPtehtP2 CXrwT7ynjxLMPYTXaoeZcjct+5u2AmPVxPW1mQPpzMmZhX3GTpc3XKq9cVdSNZbU euolLOjA4BVWow+1Q77s/m315AVuj4GJYipP7J0vtoz1jbyLIAVj+GuGkz9V/sud v5xJnJUBMJmgBA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI552mv4bEcZKmmLPsHs 424+C+7j7slyId7L+9fGTPg4vZfEJes9bjpVcP1DinXw1JncZ6oldiUkNZttNovc 979aS+U5jvRpMgfj+L2i7+DGHZK1cQJdrPrPKTGHgdm2/AhKgGRhI+h5a5w7WL0R q2At11WY+zyenAbTuS7OUdeoHGj/CDW9lCPIB3ryelcotVyLNtKdpsp8ICP3R6Hh 9HkU4DDeEk+DHnUpSlJNNGCFrqe61ePip63n92xyiS84IOmytTE52B91Jc51SYg/ wusT8PFNvKSw0p65Y+BjC8XkwrM7lSsk1nwiq7YPxUfHKtQnGw65296yEY99kVXz TwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 109194180437835351108662612905746377502 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-07 18:36:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-05 19:21:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'legacy.denverpost.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19763433103465077511534816526045140026497729708026717430435556187263684665235639454527025276586195914651726324402721057545487015909758756165547884752816705403230331519292323170950641991045023269990143228592010879660195940573290415280904370679553145303393437129863427188165436436541371198052243082194009067425003626959380553760276274665350250631228847194177565257234221883752868049107205144506670543284753433383292517050304516864354239070165108479799396999236285806416635211816563960627044744317932062282610431971874638871416299507455411108969022737326589696879145020031486344243448623161154086586294868971096991200079 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 38fff9295f38caa22dbbc8c1f1e1acaf7b195f6f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/YNT1-N_vpN4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2093 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'legacy.denverpost.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.advocate-news.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.advocate-news.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.gazettes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.gazettes.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.mendocinobeacon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.mendocinobeacon.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.nydailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obits.ocregister.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pilotonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobileobits.pvnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.pvnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailytribune.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandtraverse.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macombdaily.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningstarpublishing.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sourcenewspapers.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theleader.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'themorningsun.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theoaklandpress.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voicenews.rememberingmi.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trentonian.rememberingnj.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailyfreeman.rememberingny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneidadispatch.rememberingny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saratogian.rememberingny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'troyrecord.rememberingny.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'morningjournal.rememberingoh.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'news-herald.rememberingoh.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'berksmontnews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'buckslocalnews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dailylocal.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delconewsnetwork.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delcotimes.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mainlinemedianews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'montgomerynews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenixvillenews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottsmerc.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southernchestercountyweeklies.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southjerseylocalnews.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thereporteronline.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'timesherald.rememberingpa.us' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obituaries.tbrnews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.mcall.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chicagomag.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'insidebiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.insidebiz.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.sun-sentinel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.orlandosentinel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.pilotonline.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.dailypress.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.courant.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.nydailynews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classified.orlandosentinel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.baltimoresun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.capitalgazette.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'membership.chicagotribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.delmartimes.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.lajollalight.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.encinitasadvocate.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.pomeradonews.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ramonasentinel.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'openhomes.ranchosantafereview.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myappstest.tribpub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'statsdigital.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myapps.tribpub.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'marketplace.baltimoresun.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'askingeric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.askingeric.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal.medianewsgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cportal-remote.medianewsgroup.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'placeanad.sandiegouniontribune.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.statsdigital.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/cHI0ljmmIvQ.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018ff4339d3c0000040300473045022100d238c6b422bcd21d79ff74d359b85192e66840b644c30cd9fbce2150f85715aa022027820c1b7f4beec79694fe3044d508a70912aeb708fa31898afe21c1a715981500760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018ff4339d650000040300473045022100c5e0453bb3f720ad40941353f4e057dd8b887ed40a57e66a656965596a32d87102204374811a4e43c8ee1c585c0fd190f4a2db104b55b7b0bff643500acdb844ae36 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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