bettycrocker.com

- General Mills -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number d2:ac:5a:99:1c:88:05:f1:51:5c:4b:4e:e8:b9:a0:b8 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

General Mills

Organization: General Mills
State / Province: Minnesota
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): d2:ac:5a:99:1c:88:05:f1:51:5c:4b:4e:e8:b9:a0:b8
Serial Number (int): 280032791722103539244514166313833832632
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2e:ae:16:e9:a7:d8:18:00:60:d3:6b:6e:5b:8d:c4:5b:a0:79:d4:f0
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): ce:3e:95:ef:91:56:27:0f:d4:8b:21:c7:fa:c7:d2:c8:80:18:8c:63
Fingerprint (sha256): 58:11:bd:04:09:2f:30:0c:e5:e5:88:ef:32:a3:2d:76:be:9b:d2:3d:ea:c7:a6:b8:fc:85:2b:7e:ee:2d:6a:ab

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate bettycrocker.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bettycrocker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bettycrocker.com
www.bettycrocker.com

Other certificates including the domain name bettycrocker.com

(limited to 100 certificates)
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
qa-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
sdc.bettycrocker.com
*.emails.bettycrocker.com
www.bettycrocker.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bettycrocker.com
recipe.bisquick.bettycrocker.com
blue.content.pillsbury.com
san-20-s12.tlsprovisioning.exacttarget.com
content.bettycrocker.com
www.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
communityadmin.bettycrocker.com
blue.content.pillsbury.com
bettycrocker.com
www.generalmills.com
content.bettycrocker.com
www.bettycrocker.com
admin-askbetty.bettycrocker.com
www.generalmills.com
bettycrocker.com
qa-askbetty.bettycrocker.com
blue.content.bettycrocker.com
login.bettycrocker.com
bettycrocker.com
recipe.bettycrocker.com
login.bettycrocker.com
login.bettycrocker.com
red.bettycrocker.com
click.email.bettycrocker.com
content.bettycrocker.com
login.bettycrocker.com
store.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
admin-askbetty.bettycrocker.com
www.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
discountmagazineoffer.bettycrocker.com
red.bettycrocker.com
www.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
www.bettycrocker.com
recipe.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
login.q.bettycrocker.com
askbetty.bettycrocker.com
data.bettycrocker.com
www.generalmills.com
qaadmin-askbetty.bettycrocker.com
www.bettycrocker.com
register.bettycrocker.com

www.generalmills.com
www.bettycrocker.com
red.bettycrocker.com
blue.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
blue.content.lifemadedelicious.ca
www.bettycrocker.com
bettycrocker.com
blue.content.pillsbury.com
content.bettycrocker.com
www.generalmills.com
d.blue.tablespoon.com
san-21-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
san-20-s12.tlsprovisioning.exacttarget.com
www.generalmills.com
content.bettycrocker.com
login.q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
register.bettycrocker.com
qaadmin-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
qa-askbetty.bettycrocker.com
q.bettycrocker.com
san-20-s12.tlsprovisioning.exacttarget.com
q.blue.bettycrocker.com
store.bettycrocker.com
san-21-s12.tlsprovisioning.exacttarget.com
recipe.bisquick.bettycrocker.com

Certificate

The complete raw certificate details for bettycrocker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKxvaPWQ3ShijFFN/sQ9
gPqRe1ATpMWfnmOiUYTbIWmpWqKl4rSMEvsxyUOhsz1eXLBTilpezOgjhv20qJda
V9FVl7WhW8YHXX8xbYNXRbgKWdG1ySqvOdnLbo659yAFvrmZjKN1vB155Swg3qWI
2+bJdl2bZG1V131j7rjX2daEjVQQS/pqzmdFD5bQXNKJ7hqCxrbmiGByGo62oFzV
6XXX4p5u0YWVFvj/XCONbd0A4dq1UZ5E98HUHPpvHM8Ma7NtRqikBeOPLkzUYTlZ
ppfiuhq8zb+k9Cr2Kzs1qEHYk3GgJyNQHYoEnUHI0hBASnXYnzY1LuwvG85ucfXW
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 280032791722103539244514166313833832632
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'General Mills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bettycrocker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22807925857840866782233646425026833312207552742999808884338130296010186833379777231223642794398023435820100426306618884202432365716924717864700374324114141441950170064944857184116368073356305601925527139068839640677796061105619281144336412112176876182474945885705887828434893064430694007168544501477755701330942750389678282972200068502501681329439808353611998761541134402028440475636064352117753545955211683250825049145251397992936723165500864941916234051185742345225718593354046800137883447697423653811302802189888948897979214484570175336160035469861792732113824053289344477380009072664603423223271435677985643288161
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2eae16e9a7d8180060d36b6e5b8dc45ba079d4f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bettycrocker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bettycrocker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e3cd5bd2b0000040300463044022041b63838485ac4163885776da8101b6aa6e5a56da1e93d4123de7400997a2b420220237649cd75d8bb3d9cfb53b788ecdfa11da958b7f2cca6eec9750191efd58b3b007700a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018e3cd5bcbd00000403004830460221009da84e4aee223ff2ad84f54d736965d8bc1e3601498f756f70e21ae37cc51f66022100b1cd85b8dc68a3fa93accdc3dd7c54f2d17c457ac8dfdbddf72b3bf458f482b80075004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e3cd5bcbb00000403004630440220287b3cc5378ac53e71fbfe3e16a5f514237add48ae03d3e4472c4e1c74a9be1c02202dc5d6cadcd66bea66655b91cfcf4277a5cb49c555f200a7e7ed9215ef8ec2e0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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