arivo.app

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 53:59:44:e3:40:ce:11:2e:12:d1:dd:22:60:cb:7d:b8 was issued on by Google Trust Services LLC.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=arivo.app

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 53:59:44:e3:40:ce:11:2e:12:d1:dd:22:60:cb:7d:b8
Serial Number (int): 110789435279259716639091904609654635960
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fa:b2:40:22:c5:d2:31:97:aa:29:8c:b9:97:fa:24:f8:ce:94:d0:34
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): 65:63:d2:e1:fa:0c:4a:e2:25:d8:21:a3:84:01:4c:b2:67:34:90:85
Fingerprint (sha256): 6b:94:b2:0b:04:6a:3d:ec:ea:cf:d6:8f:d8:25:0a:22:af:f1:16:52:b0:e5:9e:64:b0:c0:f5:c3:cf:d8:fc:4f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/rUIDb0bKoBk
CRL Distribution Point: http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl

Check the revocation status for certificate arivo.app

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for arivo.app

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

arivo.app
www.arivo.app
wohnen.arivo.app
api.arivo.app
docs.arivo.app
www.docs.arivo.app

Other certificates including the domain name arivo.app

(limited to 100 certificates)
vitaliteitsplanner.tst.tempo-team.nl
abalogix.app
parkenplus.arivo.app
playcanvas.currentstudios.io
ciatres.com.br
wohnen.arivo.app
gigamusicgroup.com
hallofounder.com
arivo.app
arivo.app
www.conferencesmd.online
www.duck-developing-studio.ga
voto.tejidosocial.mx
graph.boosting.ai
notes.sunseasolutions.com
martinbonadeo.com.ar
bitcoin-extension.com
parkenplus.arivo.app
chatroom7.cf
pwa.netmaster.pt
abalogix.app
parkenplus.arivo.app
jenbach.arivo.app
open.chat.ac
arivo.app
spieleabend.app
api.arivo.app
www.arivo.app
tools.accesscard.arivo.app
lat.arivo.app
arivo.app
pwa.netmaster.pt
www.pavelcity.site
vignette-slowenien.at
hallofounder.com
onlineget.com
api.arivo.app
parken.arivo.app
hitomishokudo.for.dinii.jp
api.arivo.app
moonshot.ac
www.justrun.app
app.emailparser.no
mascontigo.com
sviluppatores.com
store.dimbiraza.me
arivo.app
arivo.app
dev.beepz.app
api.arivo.app
vanroey.ziggu.app
api.parken.arivo.app
tulln.arivo.app
api.arivo.app
www.curo.sk
tulln.arivo.app
jurerex.com.br
getguided.app
skilledbud.com
api.arivo.app
www.aprohirdetes.com
www.martinbonadeo.com.ar
api.arivo.app
short-test.jchacko.dev
arivo.app
api.arivo.app
www.unfolded.ai
cademeudinheiro.vpglab.com.br
www.dunion.info
accesscard.arivo.app
paperfree.app
tulln.arivo.app
api.arivo.app
docfinder.nextwil.com
www.jaspero.hr
api.parken.arivo.app
api.arivo.app
arivo.app
api.arivo.app
admin-client.rebus.com.co
www.oshamam.be
aprilhbailey.com
parkenplus.arivo.app
dotuml.com
api.arivo.app
firebase.bitjuno.com
tulln.arivo.app
api.parken.arivo.app
footuro.co
limbus.ai
vitaliteitsplanner.tst.tempo-team.nl
arivo.app
www.sbenfocus.com
accesscard.arivo.app
api.arivo.app
violas-stundenzettel.andipaetzold.com
firebase.shinilab.com
api.parken.arivo.app
arivo.app
graph.boosting.ai

Certificate

The complete raw certificate details for arivo.app in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFqTCCBJGgAwIBAgIQU1lE40DOES4S0d0iYMt9uDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yNDA1MDYxNDEyMTVaFw0yNDA4MDQx
NTA0MDdaMBQxEjAQBgNVBAMTCWFyaXZvLmFwcDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBALktJVyY4bLUwfFO2MIYw2YMPTc+p5HNMhM6XOFshY/FPphu
RjDXHgE6Oo/4D5InARHVK5IrzgWUrCKzw3vhTuHdXnq9gmF1AU9wvFEzzmX+KkyM
VXVb4oJn2OFnU2Sls58udRE68CoOP61HWbV84/p4L38thfiApWa/1Xc3eKq50HWt
M85JJhD3WjtORJrRfj6p4yn/ID9yTEzVsvwOdVhXDcZb8ZheJtT4Ap+MfbMVywqI
yjKQt9R4Gk3FeuChK8QDDjt+HAG6UbcWacE9/wf3c72IKHcFh0u4oVLNy7NGHkQ1
NkjeujcyRVntw/zkD6CowliBglO/o+aDX7tNdbsCAwEAAaOCAsMwggK/MA4GA1Ud
DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G
A1UdDgQWBBT6skAixdIxl6opjLmX+iT4zpTQNDAfBgNVHSMEGDAWgBQl4hgOsleR
lCrl1F2GkIPeU7O4kjB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6
Ly9vY3NwLnBraS5nb29nL3MvZ3RzMWQ0L3JVSURiMGJLb0JrMDEGCCsGAQUFBzAC
hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxZDQuZGVyMGgGA1UdEQRh
MF+CCWFyaXZvLmFwcIINd3d3LmFyaXZvLmFwcIIQd29obmVuLmFyaXZvLmFwcIIN
YXBpLmFyaXZvLmFwcIIOZG9jcy5hcml2by5hcHCCEnd3dy5kb2NzLmFyaXZvLmFw
cDAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMw
MaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFkNC9TOXZUSmNXTVZSMC5j
cmwwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdgDuzdBk1dsazsVct520zROiModG
fLzs3sNRSFlGcR+1mwAAAY9OdnDYAAAEAwBHMEUCIQDcpuwchCtEaQvi58LctX2o
6My3CBDj63GT7Jq9fLI9dwIgFPKn0EIDouxZ8viFJP6lE6T8mPnifTODdC5kBDrc
ko4AdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAY9OdnDpAAAE
AwBGMEQCIDIcW5rN6CXILL0FEUIWjiT6jjBXi72JkEnwREOExILTAiBY/UtGAFI+
MEgpurwdQuNufNMnFEtKOFZtfV02Rp1mNjANBgkqhkiG9w0BAQsFAAOCAQEAXxxj
Rh4f2HmSiKUVcy4swGM/4He9sgO88EgI9ZZOhWBSPxKKlIayxIwHWIzyeVuKrmoK
/PuQOExcTNGioffiQItS/BuGf4LsuPamdNkK+CPtDGlPhTgT4QD1AULd2ACJTbkt
/aX83G9BDx4vPJ0OWGoYuT6XSvBg1uqOM+kHD/izaEl387+lefP8Im6eqsr9peBd
IfLDH91/mtSEo17VO8bT+67ktBZrNL1BsWH8eRc9/Tt9ebB2xuG/mqaYtqdewnLX
jAz3zxVLl+PG0PqbHvZjGQs084Jt1SWMqbzOWZmw5ZZrn2OiXr6u24DcMw7vejz6
CW9Wysi3+MHIp26e0g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuS0lXJjhstTB8U7YwhjD
Zgw9Nz6nkc0yEzpc4WyFj8U+mG5GMNceATo6j/gPkicBEdUrkivOBZSsIrPDe+FO
4d1eer2CYXUBT3C8UTPOZf4qTIxVdVvigmfY4WdTZKWzny51ETrwKg4/rUdZtXzj
+ngvfy2F+IClZr/Vdzd4qrnQda0zzkkmEPdaO05EmtF+PqnjKf8gP3JMTNWy/A51
WFcNxlvxmF4m1PgCn4x9sxXLCojKMpC31HgaTcV64KErxAMOO34cAbpRtxZpwT3/
B/dzvYgodwWHS7ihUs3Ls0YeRDU2SN66NzJFWe3D/OQPoKjCWIGCU7+j5oNfu011
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110789435279259716639091904609654635960
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 14:12:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-04 15:04:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'arivo.app'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23376348713518679407667879172323314803424446659593476003767124908662810465921495039561654518800720903234689179672850533406570824760867336656750253850079977166491652539685311258437243985395009687569547323883508631495296750923126910583473758196978779068400462673337382712564556777609793603097128911283361446311494114166926800136373771716136656173838343150870673397383404530507296852850568238127153731056678299246149569006672229724941605306302389313437449154161591223922866170658537761455647002731975678632762902156192382188657367295889552664013212275891379602692218495813605193700971447385371692271957877682153131439547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fab24022c5d23197aa298cb997fa24f8ce94d034
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/rUIDb0bKoBk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arivo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.arivo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wohnen.arivo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.arivo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'docs.arivo.app'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.docs.arivo.app'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/S9vTJcWMVR0.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f4e7670d80000040300473045022100dca6ec1c842b44690be2e7c2dcb57da8e8ccb70810e3eb7193ec9abd7cb23d77022014f2a7d04203a2ec59f2f88524fea513a4fc98f9e27d3383742e64043adc928e0075003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018f4e7670e900000403004630440220321c5b9acde825c82cbd051142168e24fa8e30578bbd899049f0444384c482d3022058fd4b4600523e304829babc1d42e36e7cd327144b4a38566d7d5d36469d6636
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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