*.cbslocal.com

- CBS Broadcasting Inc. -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:1e:e0:a0:b3:dc:01:5f:96:51:07:43:51:30:a7:81 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

CBS Broadcasting Inc.

Organization: CBS Broadcasting Inc.
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1e:e0:a0:b3:dc:01:5f:96:51:07:43:51:30:a7:81
Serial Number (int): 1489552893461967882203303258209953665
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: de:8d:29:27:1c:d0:0c:c8:3d:8a:7a:a2:4c:4a:c6:c9:62:99:86:47
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): c8:2c:d9:c6:13:e4:44:00:43:07:da:fd:40:85:e7:21:df:d5:b0:7d
Fingerprint (sha256): 5a:6d:49:0b:08:ed:f2:2c:4b:7d:c5:b9:49:23:1b:44:66:45:2d:6d:cf:b1:63:89:37:5c:28:4f:bb:67:90:a8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.cbslocal.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cbslocal.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cbslocal.com
cbslocal.com

Other certificates including the domain name cbslocal.com

(limited to 100 certificates)
kezk.cbslocal.com
cbslocal.com
enewsadmin.cbslocal.com
viacomcbs.com
offers.cbslocal.com
br.bikeradar.com
sacramento.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
mobileapi.cbslocal.com
br.bikeradar.com
jira.cbslocal.com
detroit.cbslocal.com
newyork.cbslocal.com
*.cbslocal.com
cleveland.cbslocal.com
dfw.cbslocal.com
connecticut.cbslocal.com
cwtampa.cbslocal.com
preprod.mobileapi.cbslocal.com
cwatlanta.cbslocal.com
viacomcbs.com
chicago.cbslocal.com
*.cbslocal.com
dfw.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
www.gfrealfood.com
viacomcbs.com
wsivideofeed.cbslocal.com
937thefan.cbslocal.com
*.cbslocal.com
offers.cbslocal.com
*.cbslocal.com
jira.cbslocal.com
atlanta.cbslocal.com
cwseattle.cbslocal.com
dallas.cbslocal.com
enewsscrape.cbslocal.com
cwsanfrancisco.cbslocal.com
br.bikeradar.com
miami.cbslocal.com
mms.cbslocal.com
device-feeds.cbslocal.com
enewsscrape.cbslocal.com
br.bikeradar.com
br.bikeradar.com
enewsscrape.cbslocal.com
*.cbslocal.com
*.cbslocal.com
enewsadmin.cbslocal.com
tampa.cbslocal.com
enewsscrape.cbslocal.com
device-feeds.cbslocal.com
*.cbslocal.com
tls.automattic.com
cwdetroit.cbslocal.com
viacomcbs.com
cwdetroit.cbslocal.com
echo-feeds.cbslocal.com
viacomcbs.com
tampa.cbslocal.com
mms.cbslocal.com
stlouis.cbslocal.com
mms.cbslocal.com
my.cbslocal.com
br.bikeradar.com
viacomcbs.com
gooddaysacramento.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
viacomcbs.com
tampa.cbslocal.com
preprod.yourday.cbslocal.com
tampa.cbslocal.com
br.bikeradar.com
br.bikeradar.com
admin.groupcommerce.com
stlouis.cbslocal.com
*.cbslocal.com
cbslocal.com
philadelphia.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
lasvegas.cbslocal.com
cdn.audioadcenter.com
cwatlanta.cbslocal.com
mms.cbslocal.com
cwsacramento.cbslocal.com
preprod.cbslocal.com
br.bikeradar.com
device-feeds.cbslocal.com
viacomcbs.com
device-feeds.cbslocal.com
dfw.cbslocal.com
washington.cbslocal.com
denver.cbslocal.com
*.cbslocal.com
mobileapi.cbslocal.com

Certificate

The complete raw certificate details for *.cbslocal.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7tlXm7Re4pXR3IJtx0sq
nhePdk3fpO1L1jst4zhri+cWKp3H0pRmNnPXauh4s4RyJMi3in/pM0QfFHVSQVoi
4bmLiSc5+7HLzILttcROCdOnsflGWnKbaaQ0gjRlADcP4KWZgB6DzkBd6C6JhEuH
7BgrABw1/0FCFMPbjf2t5osT+bg5UY5V8/mi5I6Yi965KGLE8Q1GPvdg7Z69uigA
+L5G8JxF7PTebcrw9koftflBv2/jYgKTiBhfEQbCf+ijyqzgSl/OiYqO7GAnoO+c
qL+rvZeXt+P7+pxTnIhc4AGoU/Ay/5E5HO6amZAYUXzt/4MO+wHStP7bs1IW5v5i
iXedeDZW2eMHYaXYiNEYXlD/vuSYHJHpLqEH+XjrBAcB1Q/eWANrPAxsOp2+B/O9
1EJMgSryknLtKCZnwrh3mbknYhswa93dVINEa+n1mqcMlnO8nULWFDr6mibnwaZP
Eg7jyihR8FW4gD0zWegmcD1Iwfifpv5qaNDI1qPPHz8xrljDDfKPz03jD8Je7Mgx
V0A7DCwpnxNkDkedxRJDkiWgKwev5DmHdxd03MYRcbKqV2gSCtrHpaJqMxLhi37E
Xte9N/GOrpZg7hCJTAGipHh3sEwjE1Kg4o5pxh7XSSdHIvp/y2WFtNdzIqfLAqZz
ON/tYvkQWbsi8c6j+HCv83ECAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1489552893461967882203303258209953665
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CBS Broadcasting Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cbslocal.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 974418877630100585596851643228275424841063993379967824191183042327756215473660405493802125689742167358555940526776292875616608490059889857664186212181108980497179504046435275627731567758808522841515203024619996225770211211227213556157060423268518518584111994040740176163484765258548042099109756494861058609630558197399185542703591783254077279234737562513857321080956815404068437593493932387129278905923851533513417792739361417238761050954647510568572809985105400031042423043582492350125039189520868182903685649317024060598389423060324279264363774837593972819152771715164830370510801434247068044975096437526649348382888135437497759524607945668507512709260911947076068592120705345531629771327876090633392526566416681528549951406846733521138185817399770049859319035372043613801796116041693127484044536332041056920769830915649849915530054791918970253315590334920876614193574503723904766062652826510933971167911018875620560716743597261451044982415087880042189493910137311892641268522731760721075493706211289861631192099917078019695019672702834721130055932231232104709634855111086432660574070493510407843501469134046541520115480602081223122223583735922548652334509457948488704019286075388338068755282735377949653968540035930330981108544369
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							de8d29271cd00cc83d8a7aa24c4ac6c962998647
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cbslocal.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cbslocal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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