www.afdaniel.com

Issued by RapidSSL SHA256 CA - G3

About this certificate

This digital certificate with serial number 01:50:31 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.afdaniel.com,OU=GT86581581+OU=See www.rapidssl.com/resources/cps (c)14+OU=Domain Control Validated - RapidSSL(R)

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:50:31
Serial Number (int): 86065
Serial Number lenght: 17 bits, 3 octets

SubjectKeyId:
AuthorityKeyId: c3:9c:f3:fc:d3:46:08:34:bb:ce:46:7f:a0:7c:5b:f3:e2:08:cb:59

Fingerprint (sha1): 06:4d:4d:32:5c:18:61:8d:f1:2d:07:b2:1e:9a:32:0e:46:a3:ff:a0
Fingerprint (sha256): 5f:15:30:61:d3:d7:de:10:d7:45:f4:fb:40:09:c3:f2:42:23:bd:d4:fe:9b:6f:42:4d:d7:f9:02:49:73:e5:9c

Issuing Certificate URL: http://gv.symcb.com/gv.crt

Revocation information

OCSP Server: http://gv.symcd.com
CRL Distribution Point: http://gv.symcb.com/gv.crl

Check the revocation status for certificate www.afdaniel.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.afdaniel.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.afdaniel.com
afdaniel.com

Other certificates including the domain name afdaniel.com

(limited to 100 certificates)
sni75115.cloudflaressl.com
status.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
ssl376212.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
status.afdaniel.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
status.afdaniel.com
ssl376212.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
support.afdaniel.com
support.afdaniel.com
ssl376212.cloudflaressl.com
afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
support.afdaniel.com
dashboard.afdaniel.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
www.afdaniel.com
support.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
support.afdaniel.com
ssl376213.cloudflaressl.com
support.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
support.afdaniel.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
sni75115.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
ssl376212.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
status.afdaniel.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
ssl376211.cloudflaressl.com
status.afdaniel.com
dashboard.afdaniel.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
sni.cloudflaressl.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
status.afdaniel.com
ssl376212.cloudflaressl.com
status.afdaniel.com
ssl376212.cloudflaressl.com
www.afdaniel.com
afdaniel.com
ssl376213.cloudflaressl.com
status.afdaniel.com
status.afdaniel.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
kalturavirtualstatus.kaltura.com
ssl376213.cloudflaressl.com
www.afdaniel.com
ssl376212.cloudflaressl.com
ssl376211.cloudflaressl.com
support.afdaniel.com
ssl376213.cloudflaressl.com
ssl376213.cloudflaressl.com
ssl376212.cloudflaressl.com
ssl376213.cloudflaressl.com
kalturavirtualstatus.kaltura.com
status.afdaniel.com
ssl376213.cloudflaressl.com
dashboard.afdaniel.com
ssl376212.cloudflaressl.com
ssl376212.cloudflaressl.com

Certificate

The complete raw certificate details for www.afdaniel.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEtTCCA52gAwIBAgIDAVAxMA0GCSqGSIb3DQEBCwUAMEcxCzAJBgNVBAYTAlVT
MRYwFAYDVQQKEw1HZW9UcnVzdCBJbmMuMSAwHgYDVQQDExdSYXBpZFNTTCBTSEEy
NTYgQ0EgLSBHMzAeFw0xNDEyMjgxMzQ0MDhaFw0xNTEyMzEwNDMyNTNaMIGUMRMw
EQYDVQQLEwpHVDg2NTgxNTgxMTEwLwYDVQQLEyhTZWUgd3d3LnJhcGlkc3NsLmNv
bS9yZXNvdXJjZXMvY3BzIChjKTE0MS8wLQYDVQQLEyZEb21haW4gQ29udHJvbCBW
YWxpZGF0ZWQgLSBSYXBpZFNTTChSKTEZMBcGA1UEAxMQd3d3LmFmZGFuaWVsLmNv
bTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ4+G6VzIYAsntf50Si4
lH4oTpY9e+0uDlrxhdkiIo0QTeIh8+rtGd6nKXlfrP2aJOWBlY6/Jv5xBjvWb0QC
lrRpgsPIAhuffuM1WW3x7YkZzXIU0EQP7FyBPBrewOnuaJNppFkiAK8UyIZuL8DJ
ffRDgxy4prL7772ha0eVRBv11RR01DY8OaTbo0DjpdfLA6fKKNW77WdS71XRc2t2
JQ1dAdX1BF0PWpsiI56SrYGER+TfcM6ZfwMZ9mCo9s4/iEHyCy03tZTNvNm6kpH0
Amkkuyb9DdscZOnWL8qIdo5sm6qY9SXyRED0H/BDGaQnll1Fb/bPlFomtSRHbZ+F
qmkCAwEAAaOCAVowggFWMB8GA1UdIwQYMBaAFMOc8/zTRgg0u85Gf6B8W/PiCMtZ
MFcGCCsGAQUFBwEBBEswSTAfBggrBgEFBQcwAYYTaHR0cDovL2d2LnN5bWNkLmNv
bTAmBggrBgEFBQcwAoYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcnQwDgYDVR0P
AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjApBgNVHREE
IjAgghB3d3cuYWZkYW5pZWwuY29tggxhZmRhbmllbC5jb20wKwYDVR0fBCQwIjAg
oB6gHIYaaHR0cDovL2d2LnN5bWNiLmNvbS9ndi5jcmwwDAYDVR0TAQH/BAIwADBF
BgNVHSAEPjA8MDoGCmCGSAGG+EUBBzYwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93
d3cucmFwaWRzc2wuY29tL2xlZ2FsMA0GCSqGSIb3DQEBCwUAA4IBAQBmwkDniHHl
9tVoAc8iy6HGdRCHz+Fajvw6Oj5dpVCK/sxpDXeKTIU2yvpEFf6xSFSSKfeQaV1T
woIdSSzxvmPSdbG7C3LxTfZ5cev9BHqtECP/xn0gYETaGKvgSYxkah9ehqUPrXOb
CdBFOKcw9gt+HKvGGWD8cAI6ino1WXqROixKkU6Tnbr97Jif3dv3M12VZ5aqSKn7
9q8MGUMSVc6q3UKLvunAoQs1Bvn7qtzE1ZhaZG1BKYtlU9u6kgBGj5hS4O4fe2h8
gXlSssUo/hiQs184daiWwVqTH/K0zLgzOj0t+cum2a9rD0BFD1ieHFJcTvurJpuk
IFl5lWBphONf
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnj4bpXMhgCye1/nRKLiU
fihOlj177S4OWvGF2SIijRBN4iHz6u0Z3qcpeV+s/Zok5YGVjr8m/nEGO9ZvRAKW
tGmCw8gCG59+4zVZbfHtiRnNchTQRA/sXIE8Gt7A6e5ok2mkWSIArxTIhm4vwMl9
9EODHLimsvvvvaFrR5VEG/XVFHTUNjw5pNujQOOl18sDp8oo1bvtZ1LvVdFza3Yl
DV0B1fUEXQ9amyIjnpKtgYRH5N9wzpl/Axn2YKj2zj+IQfILLTe1lM282bqSkfQC
aSS7Jv0N2xxk6dYvyoh2jmybqpj1JfJEQPQf8EMZpCeWXUVv9s+UWia1JEdtn4Wq
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 86065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-12-28 13:44:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-12-31 04:32:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT86581581'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)14'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.afdaniel.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19976278777608422559659611583148177596910246715877505309943624839411198130837365872974531632706677230638444764675659799854310650156695419357186667795485516168848441764115077726847037259352970730394552618567520040995169005719930534152306096907460116119969095613935963824172899548562302742945282900629866171039168561795930960442439635018702700558951517130394537114952567523291495421106908798853911111411995902572483932187149598566887579468283314383887422142394065840437313990360285446762066081863405005815671787795825083140423094475031459313585085842210346416488076353271081136991026353604055935478118432052625608649321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c39cf3fcd3460834bbce467fa07c5bf3e208cb59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.afdaniel.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'afdaniel.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gv.symcb.com/gv.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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