mail.crctrust.com

- 华润深国投信托有限公司 -

Issued by CA 沃通 EV Pro 服务器证书 G2

About this certificate

This digital certificate with serial number 2a:b6:33:a8:7f:d8:de:dc:c8:35:e5:45:36:f9:a4:fc was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

华润深国投信托有限公司

Company registration number: 440301102858241
Organization: 华润深国投信托有限公司
Address: 深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层
Postal code: 518048
State / Province: 广东省
Locality: 深圳市
Country: CN

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 2a:b6:33:a8:7f:d8:de:dc:c8:35:e5:45:36:f9:a4:fc
Serial Number (int): 56773621604007670584369949862803383548
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f6:7e:f3:6f:a8:fa:9a:66:b7:20:fb:98:3e:e5:9e:7f:ee:18:99:c7
AuthorityKeyId: 19:f4:5f:b6:ac:56:29:27:f5:ae:8e:7b:03:b7:5f:8d:81:f2:55:b8

Fingerprint (sha1): c7:ea:ae:57:68:71:36:49:98:67:04:9f:8d:5d:ef:cb:d7:6a:98:73
Fingerprint (sha256): 77:0e:1f:5a:f3:79:cb:5f:d3:4c:ae:a8:7c:e1:4d:1f:e8:1e:61:fc:de:d8:f2:1b:bc:b1:f6:91:ba:93:7e:e8

Issuing Certificate URL: http://pro-aia2.wosign.cn/ca2g2.server4p.cer

Revocation information

OCSP Server: http://pro-ocsp2.wosign.cn/ca2g2/server4p
CRL Distribution Point: http://pro-crls2.wosign.cn/ca2g2-server4p.crl

Check the revocation status for certificate mail.crctrust.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.crctrust.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.crctrust.com

Other certificates including the domain name crctrust.com

(limited to 100 certificates)
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
echain.crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
xchain.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
am.crctrust.com
mail.crctrust.com
crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
crctrust.com
mcs.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
mcs.crctrust.com
mail.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
mail.crctrust.com
mail.crctrust.com
if.crctrust.com
portal.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
mail.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com

Certificate

The complete raw certificate details for mail.crctrust.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7rAk1VOyhts4olEXm4rx
ED7hfzmT3vHXd5D0/ukfZZ9xQYmtQqX53BVKFoxFKlqGs8J1eGsHBcVZ711V7tr1
whbJ6FJ3yGMieOpZ5YrAW5Tz29LDSWgSVvzrf2esdVdeP/OHMbvfZ+0Xs4Ls0Pdx
8jl57Q1wY3XUWSJf0Y624RQZUtA/CDHWKJuleITg00xdG+MdyJEOKAuf7KxsMw/U
sULRCKqoFO/m/CzYb4nNzJD2psDTj5tJs4wny8JD4+lxDpa6n8FMol2USIr2wY3q
Qlqoysg8VVSUtgwsaRuDa47HzqQZqjKLZurK8EfC6fV1eRsRPXoBH1jnLVAzDHmt
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 56773621604007670584369949862803383548
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA 沃通 EV Pro 服务器证书 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-09 09:42:26 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-09 09:42:26 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Guangdong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Shenzhen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '440301102858241'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '广东省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '518048'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '华润深国投信托有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.crctrust.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30131576366513103887772217320334403273453460436813434638125552995115150521423525151273419555215177534155310966927950542004610077407429321730980681931865357587792111746474331403793100960066009991150566026930825187205818900351206666947895740491618493947087508696585263631831162031742303944204387966569537203196012240092426572733097756250541169351873843925431096269994920091172288250317384865112294911873249852849777041160335294798499377620258986930525019542166675935387018092300660010809572141023622434985110860285069509633336469730642934839476611323377950089356214047536143226394772826374540229816310851623608154434829
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f67ef36fa8fa9a66b720fb983ee59e7fee1899c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 19f45fb6ac562927f5ae8e7b03b75f8d81f255b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-ocsp2.wosign.cn/ca2g2/server4p'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-aia2.wosign.cn/ca2g2.server4p.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-crls2.wosign.cn/ca2g2-server4p.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.crctrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075007461b4a09cfb3d41d75159575b2e7649a445a8d27709b0cc564a6482b7eb41a30000014fb194004a000004030046304402203bc55462b9988fabd690848db47f81257172922a3c7d04ee6f85471365674e76022065d2b314bcff0ef1396bd9eaf5e80c780d52fcbc94a76c730efb4e038a31c31600760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014fb193ff0e0000040300473045022100fe0985080621fad04f12710f78c9f5c74e2e4f7a365486d4e488c9b94eb26c7b022015dbe815a60f799dbdbadeb25755013293740f7155743ff18fa47e05d5554023007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014fb193ff120000040300473045022100a2e74315b8c6f18a23715f1149a38e3bfed4d8e7d13d3d9090089662ae6041d702201be43bfce16c46bdd0c6f0c5e33979ff6ca1d281ccea772b6823843ea98b2a1c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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