adv.aftonbladet.se

- Schibsted Products & Technology AB -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:6a:31:15:32:23:8a:2b:af:1c:2f:83:13:c6:0a:cb was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schibsted Products & Technology AB

Organization: Schibsted Products & Technology AB
Locality: Stockholm
Country: SE

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:6a:31:15:32:23:8a:2b:af:1c:2f:83:13:c6:0a:cb
Serial Number (int): 12514430946448141703316768167064636107
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:7b:72:09:a6:c7:a4:a5:8e:d7:87:20:dd:0e:6b:e5:e8:e4:8d:3b
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 24:bb:6d:9c:bf:e2:cb:c7:dd:1d:c1:64:22:81:ec:a8:f1:6c:13:56
Fingerprint (sha256): 6a:ce:9c:fd:bb:a6:d2:cb:10:b5:57:45:09:6b:24:77:e2:aa:e2:59:59:c2:a6:0c:a3:3e:62:2e:f1:96:d6:f6

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate adv.aftonbladet.se

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adv.aftonbladet.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adv.aftonbladet.se
adv.hitta.se
adv.klart.se
adv.omni.se
adv.prisjakt.nu
adv.svd.se
adv.tv.nu

Other certificates including the domain name aftonbladet.se

(limited to 100 certificates)
clicks-beta-pr-33.service.aftonbladet.se
*.aftonbladet.se
vektklubb-iris-pr-374.review.service.aftonbladet.se
ekorren-pr-9.review.service.aftonbladet.se
sni.cloudflaressl.com
sni.cloudflaressl.com
wellobe-iris-pr-610.review.service.aftonbladet.se
widget-dashboard-pr-111.review.service.aftonbladet.se
*.aftonbladet.se
salesposter-pr-327.review.service.aftonbladet.se
*.aftonbladet.se
aftonbladet-iris-pr-100.review.review.aftonbladet.se
rss-pr-59.review.service.aftonbladet.se
match.norst.at
support.aftonbladet.se
hyperion-pr-293.review.service.aftonbladet.se
cmp.aftenbladet.no
vox.aftonbladet.se
sni.cloudflaressl.com
hyperion-pr-646.review.service.aftonbladet.se
tlahuizcalpantecuhtli-pr-85.review.service.aftonbladet.se
*.aftonbladet.se
ab-docker-a01.aftonbladet.se
a3.shared.global.fastly.net
vglive.no
*.aftonbladet.se
tlahuizcalpantecuhtli-pr-88.review.service.aftonbladet.se
*.internstory.aftonbladet.se
vglive.no
rabattkoder.aftenposten.no
*.aftonbladet.se
www.aftonbladet.se
id.aboutme.schibsted.com
ads.aftonbladet.se
ssl421014.cloudflaressl.com
hyperion-pr-587.review.service.aftonbladet.se
medvind.schibsted.se
id-pre.aftonbladet.se
ssl.1.damoh.aftonbladet.se
id.adressa.no
hyperion-pr-690.review.service.aftonbladet.se
editorialtools-pr-63.review.service.aftonbladet.se
salesposter-pr-365.review.service.aftonbladet.se
arke-gui-pr-99.review.service.aftonbladet.se
hyperion-pr-249.review.service.aftonbladet.se
*.aftonbladet.se
tethys-pr-62.review.service.aftonbladet.se
beta.viktklubb.aftonbladet.se
www.aftonbladet.se
arke-gui-pr-93.review.service.aftonbladet.se
id.morgenlevering.no
salesposter-pr-325.review.service.aftonbladet.se
hyperion-pr-476.review.service.aftonbladet.se
stage-malservice.aftonbladet.se
www-beta-pr-29.service.aftonbladet.se
match.norst.at
cabinet-pr-106.review.service.aftonbladet.se
energy-compass-pr-80.review.service.aftonbladet.se
a3.shared.global.fastly.net
iris-pr-279.review.service.aftonbladet.se
telelistan.aftonbladet.se
frontpagefeed-pre.aftonbladet.se
access.schibsted.digital
hyperion-pr-378.review.service.aftonbladet.se
segmentate-pr-74.review.service.aftonbladet.se
aftonbladet.se
*.malservice.aftonbladet.se
*.aftonbladet.dev
hyperion-pr-646.review.service.aftonbladet.se
tipsa-archive.aftonbladet.se
clicks-beta-pr-39.service.aftonbladet.se
osiris-pr-41.review.service.aftonbladet.se
ai-buffe-pr-35.review.service.aftonbladet.se
sni.cloudflaressl.com
*.service.aftonbladet.se
sni.cloudflaressl.com
login.aftonbladet.se
abplus.aftonbladet.se
aftonbladet-iris-pr-176.review.service.aftonbladet.se
support.aftonbladet.se
cmp.aftenbladet.no
clicks-beta-pr-31.service.aftonbladet.se
a3.shared.global.fastly.net
clio-pr-320.review.review.aftonbladet.se
cmp.aftenbladet.no
a3.shared.global.fastly.net
*.review.aftonbladet.se
stage-malservice.aftonbladet.se
wellobe-iris-pr-468.review.service.aftonbladet.se
*.aftonbladet.se
ssl421012.cloudflaressl.com
godare-iris-pr-97.review.service.aftonbladet.se
a3.shared.global.fastly.net
*.aftonbladet.se
election2022-compass-pr-133.review.service.aftonbladet.se
rr.aftonbladet.se
hyperion-pr-547.review.service.aftonbladet.se
sni.cloudflaressl.com
tv.aftonbladet.se
livsstil-hyperion-pr-125.review.review.aftonbladet.se

Certificate

The complete raw certificate details for adv.aftonbladet.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6iqrV0hyIKTl6m4In2y+
KoS6lvT3/iRutFIgmKXLMI/OWHhEhi+0DvW+o03WuWBWFPer7ewcgtG7sUMpm9lw
Lb7FrA2cXutzvGIGCYk5YkVqBcchkBrna5c0YzuqHBYLiWcEJswF8M9tXh3l93uk
8STe/cvCqBWnhDwVtmBMTkfbULCoACRUDyPNrbEkKqzBWGLQ6NLmY2rBzV35LEbV
k4Gij7L6bQIn3ZcG2Rbs+gFG7VogKMbALKgzn9O27DTMm/tz5AE9UnnZXNlK1e1s
W8ULhr4ucrbPON9wJNpY8D+PwnNbZG8smiRC1tDFjzWrpnixUPv7GspQ9aevub6D
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12514430946448141703316768167064636107
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stockholm'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Schibsted Products & Technology AB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adv.aftonbladet.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29560804378384492139835551237045220674023345826448437790458866769311071856487527138469976595327364054671658263646523498441956379546999957320682380749433853211621619149705509069085971179619262691988058244591193622867706514000494575665488115601731042065774382120458773225185516610371616734955169885165642446958446620480329195020771310024353792605334598800510497417514438564872563514780425571845795777489699329889211646207607062293587041129937036973577485729424647451352548378716095882182217813027461957989512339747923222529913727246313242212050203550233939340586109909745225005887748260928717091169393805018045882467091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							417b7209a6c7a4a58ed78720dd0e6be5e8e48d3b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.aftonbladet.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.hitta.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.klart.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.omni.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.prisjakt.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.svd.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adv.tv.nu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016301a173e70000040300483046022100c55680bbec48ff3aeef0e5a0276201024e9576901aae09b684e1adb11ac37918022100998a8b0615932131a4ae68692fd3c0cd0849c41148e324751f0dd6c7a6001be70076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016301a17510000004030047304502206cfa38b2de9ad96b1df69753eed76c4cd144bfbc349e4091069b19c3c0726761022100dea467b3714b5b544d1fa471af662209f66b8a615cd5feee08fb37ceb8e60ad7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000d15878a084e0c97017d650128cceecdc6178d2c6a517e109aea3a5d0e578ce778c83595e65122fcf42534d340b1f961cd161c6dfafd904234ab46ea83845612e7a52fff3f1acc662a446fdee642c3acb084d491f4990f9723a8c716f7d03895caed9ebf51b02aa2f774b522c075431a7d0c5b30e3c1181e2a056820956de7cd5d1b838b46100b73025a5041d5abd700b41980ecbaf959e73be45ab4d6e21ccaa4dd0c10c0ae881bea95982bd3eb4cb0a3cd9bccc221c7d39e9ab1962a721423e7ba31f0a9fb83f71c4c68894a2c5ae763d6c178edd9bf7b931ec081ab23bbfaeb298d2341f1bb0d87831ebeab881bfc75a196b46737603e57f5bb4bf5f9508e