okdiario.com

- DOS MIL PALABRAS SL -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 0a:f7:e7:1d:7d:a5:38:b0:21:63:82:bb:19:68:bc:b1 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

DOS MIL PALABRAS SL

Company registration number: B87277455
Organization: DOS MIL PALABRAS SL
Organization unit: Financiero
State / Province: Madrid
Locality: Alcobendas
Country: ES

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f7:e7:1d:7d:a5:38:b0:21:63:82:bb:19:68:bc:b1
Serial Number (int): 14579464855027784292279280667422407857
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 80:24:0a:95:7b:d9:7e:23:ee:db:3f:7f:4c:73:ae:16:7b:94:36:40
Fingerprint (sha256): 81:8d:33:83:1d:d5:0f:f4:63:20:c4:ac:ff:e4:07:fe:cb:66:81:a0:7b:6d:b7:ba:f8:ab:48:c8:7c:1d:de:55

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate okdiario.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for okdiario.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

okdiario.com
www.okdiario.com

Other certificates including the domain name okdiario.com

(limited to 100 certificates)
vibes.okdiario.com
*.okdiario.com
ssl368696.cloudflaressl.com
sni.cloudflaressl.com
*.okdiario.com
support.intercityxpress.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
dogs.danby.ny.gov
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
billing.embark.fm
cdn.arkadiumhosted.com
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
ssl368694.cloudflaressl.com
plans.flowgardeners.com
*.okdiario.com
cdn.arkadiumhosted.com
ssl368696.cloudflaressl.com
subscriptions.wstwn.com
cdn.arkadiumhosted.com
*.okdiario.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
support.techprosecurity.com
inconformistas-area.okdiario.com
pre.portadas.okdiario.com
inconformistas.okdiario.com
ssl368695.cloudflaressl.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
ssl368695.cloudflaressl.com
ssl368696.cloudflaressl.com
cdn.arkadiumhosted.com
help.bidorbuy.co.za
*.okdiario.com
subscripciones.lkv.cl
billing.ipfy.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
cdn.arkadiumhosted.com
sni.cloudflaressl.com
subscripciones.lkv.cl
inconformistas-dev.okdiario.com
cdn.arkadiumhosted.com
*.okdiario.com
subscription.eklavvya.com
inconformistas-dev.okdiario.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
ssl368694.cloudflaressl.com
inconformistas.okdiario.com
cdn.arkadiumhosted.com
vibes.okdiario.com
ssl368695.cloudflaressl.com
inconformistas-area.okdiario.com
pre.okjuridico.okdiario.com
ssl368694.cloudflaressl.com
pre.usuarios.okdiario.com
ssl368694.cloudflaressl.com
subscriptions.cabmastersoftware.com
jayash.me.musegravity.com
*.okdiario.com
support.proovstation.com
billing.forgestop.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
sni.cloudflaressl.com
sni.cloudflaressl.com
okdiario.com
cdn.arkadiumhosted.com
billing.smartsp.es
jayash.me.musegravity.com
pre.diariomadridista.okdiario.com
bolsa.okdiario.com
cdn.arkadiumhosted.com
pre.look.okdiario.com
cdn.arkadiumhosted.com
help.turnsapp.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
jayash.me.musegravity.com
*.okdiario.com
ssl368695.cloudflaressl.com
jayash.me.musegravity.com
cdn.arkadiumhosted.com
cdn.arkadiumhosted.com
pre.look.okdiario.com
*.okdiario.com
cdn.arkadiumhosted.com
subscriptions.digistax.com
tienda.okdiario.com
cdn.arkadiumhosted.com
billing.incthr.com
cdn.arkadiumhosted.com
ssl368696.cloudflaressl.com
ssl368696.cloudflaressl.com
cdn.arkadiumhosted.com

Certificate

The complete raw certificate details for okdiario.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyqpAbCX3mhxi123wu5aj
nT1sxkY1sHQ9I0rVSYWbxMFWoEHMsgDLFw+lOrgK+i23TQqSOA0R6xVkGIhfyJVd
U6BoUpTEXAkVF9an5Tb1IzQsz/CjtgR4uEvOnDSdVx15Z+1u1iOFLEdRmSAm0gCz
worFWteHq5bx/5MyhjJ7x+9UJXssKRhUKWUnUY4A4FxgI2XZ5ahpeqemvx4VY/UQ
/32eP6U0N4mbXAOXvr9N/3j3gE49YVj8v76d+NLz0DifefOGGXCYYXChTqi4nwqq
sGNQE94w76Vqsj5h1aXbHoxg79439TWg7+d72MquJt+MPfG3S/MgfdpeKDhdGDG4
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14579464855027784292279280667422407857
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-07-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'B87277455'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Alcobendas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DOS MIL PALABRAS SL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Financiero'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'okdiario.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25584091820880042809728075306847100227972655249348979347065527415140405248914952950881424369221502515690638743594423505746798305437828243934720156140730894142490930404192613776896863729089680988308469710756851284893500442505411510223857804824490259606281201028051478779559186075169404579776590728846399244482852956383714902084462717305305696769938606605970853295545039948176529296579230319289055452684456054563641284850445282274783789326847859169511337728924192378890058108824839156354074110675341060039157560437918659501715123424559916545908104550190331351049677340880189117085314864252489654948984645245331370522859
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okdiario.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.okdiario.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc000001563096dcde0000040300483046022100e6cf52b4a0c5f03a6834e480c3cc080779905c8d90c1a19c49be23d3826076ac022100b0f7e3b97ed4e9e96e8c6e5857f58aa3d703491f713c2ffdec05b7ea532e8632007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001563096dd860000040300473045022100f25df770af45907e32140e26d05a7047e51e6b39e371f08af5685136b3add46102203b0c523bcf0c1f7e665c1187f919675332c1ce089bcb697836661b9e4de12a9d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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