test.glauscasting.ch
Issued by Hostpoint DV SSL CA - G2
About this certificate
This digital certificate with serial number 5d:14:4e:11:7b:8d:7d:4f:dc:20:60:31:0d:2f:12:ce was issued on by Hostpoint AG.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
Certificate Subject
CN=test.glauscasting.ch
Hostpoint AG
Organization:
Hostpoint AG
Organization unit: Domain Validated SSL
Organization unit: Domain Validated SSL
Country:
CH
This certificate has expire since
Certificate Details
Serial Number (hex): 5d:14:4e:11:7b:8d:7d:4f:dc:20:60:31:0d:2f:12:ceSerial Number (int): 123723632958233426822967503855381582542
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId:
AuthorityKeyId: b4:e3:2a:8e:85:bb:b2:b7:27:3c:e9:ce:9a:a0:80:6f:0a:4b:02:48
Fingerprint (sha1): 12:e6:dc:8c:29:24:79:de:0c:b2:c3:2a:b4:0d:c4:82:9b:90:e3:f3
Fingerprint (sha256): 7d:28:83:90:08:b6:88:7b:cd:fd:f0:64:63:34:e1:19:c5:61:5b:d5:e7:62:66:1a:a3:e0:37:35:22:76:b2:f3
Issuing Certificate URL: http://hostpoint-aia.digitalcertvalidation.com/hostpointg2.crt
Revocation information
OCSP Server: http://hostpoint-ocsp.digitalcertvalidation.comCRL Distribution Point: http://hostpoint-crl.digitalcertvalidation.com/hostpointg2.crl
Check the revocation status for certificate test.glauscasting.ch
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for test.glauscasting.ch
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
test.glauscasting.ch
Other certificates including the domain name glauscasting.ch
(limited to 100 certificates)
glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
ta.glauscasting.ch
www.glauscasting.ch
ta.glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
kartei.glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
kartei.glauscasting.ch
www.glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
glauscasting.ch
www.glauscasting.ch
www.ta.glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
ta.glauscasting.ch
kartei.glauscasting.ch
glauscasting.ch
glauscasting.ch
kartei.glauscasting.ch
www.ta.glauscasting.ch
ta.glauscasting.ch
glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
ta.glauscasting.ch
www.glauscasting.ch
ta.glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
kartei.glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
test.glauscasting.ch
kartei.glauscasting.ch
www.glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
glauscasting.ch
www.glauscasting.ch
www.ta.glauscasting.ch
www.glauscasting.ch
glauscasting.ch
glauscasting.ch
www.glauscasting.ch
test.glauscasting.ch
glauscasting.ch
test.glauscasting.ch
www.glauscasting.ch
ta.glauscasting.ch
kartei.glauscasting.ch
glauscasting.ch
glauscasting.ch
kartei.glauscasting.ch
www.ta.glauscasting.ch
ta.glauscasting.ch
glauscasting.ch
Certificate
The complete raw certificate details for test.glauscasting.ch in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIQXRROEXuNfU/cIGAxDS8SzjANBgkqhkiG9w0BAQsFADBm MQswCQYDVQQGEwJDSDEVMBMGA1UEChMMSG9zdHBvaW50IEFHMR0wGwYDVQQLExRE b21haW4gVmFsaWRhdGVkIFNTTDEhMB8GA1UEAxMYSG9zdHBvaW50IERWIFNTTCBD QSAtIEcyMB4XDTE3MDEyNjAwMDAwMFoXDTE4MDEyNjIzNTk1OVowHzEdMBsGA1UE AwwUdGVzdC5nbGF1c2Nhc3RpbmcuY2gwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQDEdmqBcUGgBRDS6kvPZQbyDpeomeNJpSnq7mV/I9SrhIV5gosTMuLB RPiZNu99d8K9VEi+IqwiLS8VL6mWr/tsERsgZYGsuKe0h8TkGxVNI0V92uT3pQxE zNOQUGvP3djldPPy714OQe6yUZm/SSYIdWPYsJ1mlaXxYzOs9AB9BVFPo0aeAwA1 aruyG3EG196kF9bMAAnIw2UqEgUuiXwC4VcuJX/d3V0n1VjJNwQhuX6JhsXItGqJ iUQ5QhC2NzCwc3SBTL6hR3U8a+hjWxJ/2emDXqfHSN+aW94CSVDqsjSkuIDCeIqw bBw0xg0Ms9bQeKPZoYYH3pd6Pv2N8l8nAgMBAAGjggMVMIIDETAfBgNVHREEGDAW ghR0ZXN0LmdsYXVzY2FzdGluZy5jaDAJBgNVHRMEAjAAME8GA1UdHwRIMEYwRKBC oECGPmh0dHA6Ly9ob3N0cG9pbnQtY3JsLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5j b20vaG9zdHBvaW50ZzIuY3JsMIGdBgNVHSAEgZUwgZIwgY8GBmeBDAECATCBhDA/ BggrBgEFBQcCARYzaHR0cHM6Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9y ZXBvc2l0b3J5L2xlZ2FsMEEGCCsGAQUFBwICMDUMM2h0dHBzOi8vd3d3Lmdlb3Ry dXN0LmNvbS9yZXNvdXJjZXMvcmVwb3NpdG9yeS9sZWdhbDAfBgNVHSMEGDAWgBS0 4yqOhbuytyc86c6aoIBvCksCSDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI KwYBBQUHAwEGCCsGAQUFBwMCMIGZBggrBgEFBQcBAQSBjDCBiTA7BggrBgEFBQcw AYYvaHR0cDovL2hvc3Rwb2ludC1vY3NwLmRpZ2l0YWxjZXJ0dmFsaWRhdGlvbi5j b20wSgYIKwYBBQUHMAKGPmh0dHA6Ly9ob3N0cG9pbnQtYWlhLmRpZ2l0YWxjZXJ0 dmFsaWRhdGlvbi5jb20vaG9zdHBvaW50ZzIuY3J0MIIBBAYKKwYBBAHWeQIEAgSB 9QSB8gDwAHYA3esdK3oNT6Ygi4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZ3I/H lAAABAMARzBFAiAiIZy8RJfdN7k5D5Ykghg9grOD1GrTtgIM2t8fbArB0wIhANHi Vk09VltOkJl21GnGoUet5B4VjQXMH4jNYaxp/R6bAHYApLkJkLQYWBSHuxOizGdw Cjw1mAT5G9+443fNDsgN3BAAAAFZ3I/HxwAABAMARzBFAiEA2MBMpaf2x/Fm//QA Rsm8Hc6mSoHIHpxKikgfRKFWBD0CIF79MkslzSDe3GxuE+mCAE24r0NEJ2RJnqTI YiS6vVG3MA0GCSqGSIb3DQEBCwUAA4IBAQCiqc+HeImbE8XFVc81zBAQQoA3Ty4M sFyyvzINvK58G36I3urD//KteGz1qnIK10PTWB7PXqI5JifYfYbEAaAPGZpLf5d1 uVBd/A+tfLctMV5P4F4gnZjw0E4RmKbxKizvzcD+cOrpDDnxVFWc3S1FiiXH5tuA EMH+NTXZcHnoeXuL/gzey7zyWEiauK/Zp0JfetoFuqzKNVFPteVhHnQoO+outRct Roc0iPZXn+BoGxdgKxo1ZfTqYz21EADQmPjhhD8V3EkzBIKOmjk4k6iAyTQ8VEtL 6wQ308LFMm+zINMMfFe6enzuU6TqjzF1CX2saVuOwsVHRcL0wD67exgU -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHZqgXFBoAUQ0upLz2UG 8g6XqJnjSaUp6u5lfyPUq4SFeYKLEzLiwUT4mTbvfXfCvVRIviKsIi0vFS+plq/7 bBEbIGWBrLintIfE5BsVTSNFfdrk96UMRMzTkFBrz93Y5XTz8u9eDkHuslGZv0km CHVj2LCdZpWl8WMzrPQAfQVRT6NGngMANWq7shtxBtfepBfWzAAJyMNlKhIFLol8 AuFXLiV/3d1dJ9VYyTcEIbl+iYbFyLRqiYlEOUIQtjcwsHN0gUy+oUd1PGvoY1sS f9npg16nx0jfmlveAklQ6rI0pLiAwniKsGwcNMYNDLPW0Hij2aGGB96Xej79jfJf JwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 123723632958233426822967503855381582542 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hostpoint AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Validated SSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hostpoint DV SSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-01-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-26 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test.glauscasting.ch' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24801100897846563540812531027572843935608028018271858141546468251869129103832270346179867131890991362092297136985102777352322668318647153627300158450939559459244345958810121613379805310195980576563144871605156275684761325012514959298134549118666018178846784755308160270449913481780631592492616021301479764696108473980177615252124157108232198260197079151122382522603257634457623533631538592070938582380106513245007269219202144305402088365582730255911267104985756724701630728887601059165701700952299619630355623914015529747286215457971367653006717183784652781363069692834056932390155503164001206413800122755520461430567 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.glauscasting.ch' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-crl.digitalcertvalidation.com/hostpointg2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b4e32a8e85bbb2b7273ce9ce9aa0806f0a4b0248 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (140 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-ocsp.digitalcertvalidation.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://hostpoint-aia.digitalcertvalidation.com/hostpointg2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000159dc8fc7940000040300473045022022219cbc4497dd37b9390f962482183d82b383d46ad3b6020cdadf1f6c0ac1d3022100d1e2564d3d565b4e909976d469c6a147ade41e158d05cc1f88cd61ac69fd1e9b007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000159dc8fc7c70000040300473045022100d8c04ca5a7f6c7f166fff40046c9bc1dcea64a81c81e9c4a8a481f44a156043d02205efd324b25cd20dedc6c6e13e982004db8af43442764499ea4c86224babd51b7 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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