universeum.se
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number ca:72:1b:87:43:b7:f8:95:0d:60:cf:8c:56:68:a9:e7 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=universeum.se
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): ca:72:1b:87:43:b7:f8:95:0d:60:cf:8c:56:68:a9:e7Serial Number (int): 269096535332245117676444738382555818471
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 20:1e:d6:01:89:d2:c6:ff:37:ff:c4:38:ed:c0:d1:96:ef:77:72:a6
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 20:ad:2f:77:3e:51:0c:18:9e:dd:f8:4a:30:85:fb:d6:fd:d0:68:47
Fingerprint (sha256): 7d:0c:88:57:cf:f8:57:9e:01:66:45:9b:4a:77:96:6a:50:42:aa:9a:59:1c:2e:09:f9:d5:45:d7:94:7a:15:5e
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/yOUEqQk6tZQCRL Distribution Point: http://crls.pki.goog/gts1p5/Am8U2vI4qm0.crl
Check the revocation status for certificate universeum.se
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for universeum.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
universeum.se
*.universeum.se
*.universeum.se
Other certificates including the domain name universeum.se
(limited to 100 certificates)
www.freundeskult.de
universeum.se
egalaxy.universeum.se
universeum.se
connect.myplayer.io
eased-ui.com
www.alexey.co.uk
egalaxy.universeum.se
ticket.universeum.se
ticket.universeum.se
bokning.universeum.se
jobbahososs.universeum.se
www.arvin.app
jobbahososs.universeum.se
*.universeum.se
universeum.se
portal.equity.cwltech.com.br
vpn.universeum.se
covid19safe.es
universeum.se
bokning.universeum.se
ticket.universeum.se
*.universeum.se
egalaxy.universeum.se
firebase.jodiemason.me
apogya.fr
*.universeum.se
ticket.universeum.se
jobbahososs.universeum.se
universeum.se
bokning.universeum.se
www.tygirlsday.tw
stagingegalaxy.universeum.se
www.suchaktea.com
digitala.universeum.se
*.universeum.se
stearnsservices.com
*.universeum.se
*.universeum.se
ticket.universeum.se
ticket.universeum.se
admin.lottery.platforge.io
bokning.universeum.se
*.universeum.se
www.paygram.io
jobbahososs.universeum.se
universeum.se
ricmiskimmon.com
minresa.universeum.se
eased-ui.com
bokning.universeum.se
www.scrumit.app
flightintel.com
*.universeum.se
*.universeum.se
bokning.universeum.se
setbacker.com
ticket.universeum.se
*.universeum.se
www.universeum.se
www.wecare.ph
jjugul.kr
universeum.se
kingslanding.4dmanager.com
ticket.universeum.se
*.universeum.se
universeum.se
terminali.app
egalaxy.universeum.se
ticket.universeum.se
*.universeum.se
*.universeum.se
universeum.se
egalaxy.universeum.se
universeum.se
connect.myplayer.io
eased-ui.com
www.alexey.co.uk
egalaxy.universeum.se
ticket.universeum.se
ticket.universeum.se
bokning.universeum.se
jobbahososs.universeum.se
www.arvin.app
jobbahososs.universeum.se
*.universeum.se
universeum.se
portal.equity.cwltech.com.br
vpn.universeum.se
covid19safe.es
universeum.se
bokning.universeum.se
ticket.universeum.se
*.universeum.se
egalaxy.universeum.se
firebase.jodiemason.me
apogya.fr
*.universeum.se
ticket.universeum.se
jobbahososs.universeum.se
universeum.se
bokning.universeum.se
www.tygirlsday.tw
stagingegalaxy.universeum.se
www.suchaktea.com
digitala.universeum.se
*.universeum.se
stearnsservices.com
*.universeum.se
*.universeum.se
ticket.universeum.se
ticket.universeum.se
admin.lottery.platforge.io
bokning.universeum.se
*.universeum.se
www.paygram.io
jobbahososs.universeum.se
universeum.se
ricmiskimmon.com
minresa.universeum.se
eased-ui.com
bokning.universeum.se
www.scrumit.app
flightintel.com
*.universeum.se
*.universeum.se
bokning.universeum.se
setbacker.com
ticket.universeum.se
*.universeum.se
www.universeum.se
www.wecare.ph
jjugul.kr
universeum.se
kingslanding.4dmanager.com
ticket.universeum.se
*.universeum.se
universeum.se
terminali.app
egalaxy.universeum.se
ticket.universeum.se
*.universeum.se
*.universeum.se
Certificate
The complete raw certificate details for universeum.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFcDCCBFigAwIBAgIRAMpyG4dDt/iVDWDPjFZoqecwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMzI5MDE0ODM1WhcNMjQwNjI3 MDE0ODM0WjAYMRYwFAYDVQQDEw11bml2ZXJzZXVtLnNlMIIBIjANBgkqhkiG9w0B AQEFAAOCAQ8AMIIBCgKCAQEAlKw1XdW4Xvsl3OLvXdur/W8y5wChEo8+SiucqSua +5884abWcWIZCfKd+uHwZJqYfBWfjAiokOM3NMY1uUNDSLI1/oH7GcB/VTIuePot iFc49/Mu48vgznnLZOHpJ+1dDTg6GuQzoUJ149tyq5I2PBulGj2dTfERN5hmfHmd LSAOLFRni2eR/pdJTeSoK5cR+O3ZgaGhUkqaWuRfsSDMt0RsQ7bG3E8TlMGnjl/q ZwUhSOi0s+tVNtsL9QUjIjUZds/p1n8fBzNdsglpp3c5SwE5nONjU+mCrU8Y8ug4 wRg6LNgeNbNKigpNzmwaiC5lVbrAVf3ayVZGlxKs89MZxQIDAQABo4IChTCCAoEw DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC MAAwHQYDVR0OBBYEFCAe1gGJ0sb/N//EOO3A0Zbvd3KmMB8GA1UdIwQYMBaAFNX8 ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUveU9VRXFRazZ0WlEwMQYIKwYB BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwKQYD VR0RBCIwIIINdW5pdmVyc2V1bS5zZYIPKi51bml2ZXJzZXVtLnNlMCEGA1UdIAQa MBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0 cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L0FtOFUydkk0cW0wLmNybDCCAQQGCisG AQQB1nkCBAIEgfUEgfIA8AB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZx H7WbAAABjogb8FUAAAQDAEcwRQIgA6vonaIhfgn+Mjcp9nET6KMd7xxavs9WXl/u lstfDGwCIQDJc5U8YgiRHa+Fv4MFrhz22nfq05Ozshz/k75azerzUgB2AKLiv9Ye 3i8vB6DWTm03p9xlQ7DGtS6i2reK+Jpt9RfYAAABjogb8HEAAAQDAEcwRQIgH9OK 535lYj1pj/WJbC1tbvD5KsPGmmm2rfeN6dcdfw4CIQCShGLJLFqjidkg46RSgXu3 dm72f6hAt2HlxdIlofqS4jANBgkqhkiG9w0BAQsFAAOCAQEARU7DZ3aq4xyF3sQ2 +Kau1Xq00y2Hgxd8Mk3WwS/3ehAt3UW/+91UXzA9XMkb+/Sf7IDhKvkLj3RPvEov nAenAXFbW3OpgFN0NM5rPxmWNl4WxXwtkaRdQCbKfRie6duE0uN6pEyFBiRf0VWz PHQnu91lO+GGBvqmDCksnK706mbXow06ZSU8DPDUbSk0Nx6sUEms07isbsiyP9J9 CR+7+mUftUZZIvmxShMO/g4LFKPNol5VxnMxyh0zxfGBLkJPKH8IUlnC0cztopXQ tYsxtzOqzvClLm8vO7xFYP8Bu4k0a/4UtCAfOIBzqE9aUCeMXDGrl3g4htntZv6m JlKqwA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKw1XdW4Xvsl3OLvXdur /W8y5wChEo8+SiucqSua+5884abWcWIZCfKd+uHwZJqYfBWfjAiokOM3NMY1uUND SLI1/oH7GcB/VTIuePotiFc49/Mu48vgznnLZOHpJ+1dDTg6GuQzoUJ149tyq5I2 PBulGj2dTfERN5hmfHmdLSAOLFRni2eR/pdJTeSoK5cR+O3ZgaGhUkqaWuRfsSDM t0RsQ7bG3E8TlMGnjl/qZwUhSOi0s+tVNtsL9QUjIjUZds/p1n8fBzNdsglpp3c5 SwE5nONjU+mCrU8Y8ug4wRg6LNgeNbNKigpNzmwaiC5lVbrAVf3ayVZGlxKs89MZ xQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269096535332245117676444738382555818471 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-29 01:48:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-27 01:48:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'universeum.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18768188293090004659190112200557055052873449472696398529157376477297004731238523073199780552976263858717762418537639831630393250819737332060169584329791189847328135734961950324465814695104114013607132234995649712974129749294245810176407506929180627206961144007298749417930111525648764091919702685568191619867428883956105851682949889121495703959605288571384965937064993213511324739201163665616196328972865564416236408931029382144370486062765062650191053933071373802861087696780665100876373877010423949304391650131270473335968272329454657651503526392398909240736720318064318121918649370619546347299092399518085440281029 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 201ed60189d2c6ff37ffc438edc0d196ef7772a6 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/yOUEqQk6tZQ' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'universeum.se' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.universeum.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/Am8U2vI4qm0.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e881bf0550000040300473045022003abe89da2217e09fe323729f67113e8a31def1c5abecf565e5fee96cb5f0c6c022100c973953c6208911daf85bf8305ae1cf6da77ead393b3b21cff93be5acdeaf352007600a2e2bfd61ede2f2f07a0d64e6d37a7dc6543b0c6b52ea2dab78af89a6df517d80000018e881bf071000004030047304502201fd38ae77e65623d698ff5896c2d6d6ef0f92ac3c69a69b6adf78de9d71d7f0e022100928462c92c5aa389d920e3a452817bb7766ef67fa840b761e5c5d225a1fa92e2 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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