www.servicesusa.ford.com

- Ford Motor Company -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 11:21:03:bf:b1:91:d1:8d:1e:56:6e:41:90:ac:54:12:26:f9 was issued on by GlobalSign nv-sa.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Ford Motor Company

Organization: Ford Motor Company
State / Province: Michigan
Locality: Dearborn
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:03:bf:b1:91:d1:8d:1e:56:6e:41:90:ac:54:12:26:f9
Serial Number (int): 1492143161962541933566365994372803647907577
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: cb:1e:f0:5f:e3:2b:7f:0d:09:da:21:17:08:cd:03:81:be:38:82:1a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 44:98:12:a2:bc:a0:c1:cf:88:04:a8:1d:b6:60:f0:da:3d:a6:1c:78
Fingerprint (sha256): 82:c0:42:52:37:24:e2:60:55:ba:aa:a1:b0:7b:e0:9c:1b:92:0c:d8:e7:7f:7d:54:c2:f0:ed:5b:61:ee:ea:21

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.servicesusa.ford.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.servicesusa.ford.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.servicesusa.ford.com
services.forddirect.fordvehicles.com
servicesa.forddirect.ford.com
servicesb.forddirect.ford.com
services.forddirect.ford.com
servicesa.forddirect.fordvehicles.com
servicesb.forddirect.fordvehicles.com
www.servicesus.ford.com
www.servicesusb.ford.com
servicesusa.ford.com

Other certificates including the domain name ford.com

(limited to 100 certificates)
www.dfyservicesa.ford.com
ito18615.hosts.cloud.ford.com
ito069762.hosts.cloud.ford.com
ito069763.hosts.cloud.ford.com
applyforcredit.ford.com
web2.gemstest.ford.com
www.payments.ford.com
webqa-global8d.app.ford.com
www.gspoolselection.ford.com
www.proximity.auros.ford.com
home-tpd-dlr.prod.cf.app.ford.com
mysite.spt.ford.com
SZARG00117.b2d.ford.com
ito028496.hosts.cloud.ford.com
ITA68500.b2d.ford.com
mqa2usapi.cv.ford.com
ito069762.hosts.cloud.ford.com
corptest-sts-ext.pp.cf.app.ford.com
www.wltpfe.ford.com
ito069762.hosts.cloud.ford.com
www.ffe-norway.ford.com
outdoorgateway.ford.com
fordprotect-br.prod.cf.app.ford.com
www-pcf.emivis.ford.com
esp11910.b2d.ford.com
api-wings-o.prod.cf.app.ford.com
ito024572.hosts.cloud.ford.com
origin-m2.ford.com
support.ford.com
www.ford.com
www-ccd-dealerconnection-com.prod.cf.app.ford.com
api-uat-vehiclesetup-isis.pp.cf.app.ford.com
ito069763.hosts.cloud.ford.com
ito13256.hosts.cloud.ford.com
ito025397.hosts.cloud.ford.com
wwwqa-webexteams.pp.cf.app.ford.com
ivssqa.security.ford.com
ito069764.hosts.cloud.ford.com
www.lom.ford.com
wwwqa-scorm-dealerconnection-com.pp.cf.app.ford.com
api-msvpud-webbff.prod.cf.app.ford.com
ito13255.hosts.cloud.ford.com
ito080725.hosts.cloud.ford.com
wwwqa2.ivsu.ziphandler.ford.com
web.stamps-j2.ford.com
gvmsr-vinreceiver.ford.com
servicesa.forddirect.fordvehicles.com
DEU1A200.b2d.ford.com
sm-fdspcl-dlr.prod.cf.app.ford.com
www.aerovision-stage.ford.com
wwwqa.credit-am-eu.ford.com
www.owner.ford.eu
adm.spt.ford.com
wwwqa.webexteams.ford.com
ito029228.hosts.cloud.ford.com
DEU2A140.b2d.ford.com
www.globaluptime.ford.com
wwwdev.ownerservicesalta.ford.com
fuatuis.cv.ford.com
wwwqa.superg.ford.com
web-ecommercefma-lnc.prod.cf.app.ford.com
*.awsussb01.cf.ford.com
DEU1G8B0.b2d.ford.com
www.batch.fceaims.ford.com
ito028495.hosts.cloud.ford.com
api-qa-reservas.pp.cf.app.ford.com
www-dealoptimizer-dlr.prod.cf.app.ford.com
www.ontrack.ford.com
gateway-55021-perf.app.gcp.ford.com
security-restrictions-qavehicleremarketing.pp.cf.app.ford.com
www.brandeub.ford.com
ito069763.hosts.cloud.ford.com
owa.ford.com
ito069762.hosts.cloud.ford.com
www-gtacng-dealerconnection-com.prod.cf.app.ford.com
accessories.ford.com
ito13256.hosts.cloud.ford.com
wwwqa.imagine.ford.com
www.fordclassic.ford.com
decisioningService.ici.ford.com
api-msvpud-tripfulfillment.prod.cf.app.ford.com
www.fordlpg.ford.com
www.secureauthf.ford.com
tvr.ford.com
mcs-prod.prod.cf.app.ford.com
api-uat-adminservices-gtacng-dlr.pp.cf.app.ford.com
ito069764.hosts.cloud.ford.com
www.brandusa.ford.com
wwwqa3.rvcm.ford.com
psoh-wlp-prd.prod.cf.app.ford.com
fcealfa-rds-sit-fcealfa.pp.cf.app.ford.com
bdronen-testing.caas.ford.com
wwwqa.ivis3.ford.com
cloud.eustage.ford.com
accessories.ford.com
wwwqa.fdse1.ford.com
ito061410.hosts.cloud.ford.com
mqacntest.cv.ford.com
wwwmg2.pers.ford.com
api-vehicleinfo-gtacng-dlr.prod.cf.app.ford.com

Certificate

The complete raw certificate details for www.servicesusa.ford.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0CKvzuPRI36iBGr3eDT
UPAJGm5mY2nw39ep2BWnsSyCDPpmMByGJYJYxkXZw/s8lMvsIpGMt5YbpautJkhb
YYDCZeNTTL7YWaFCo/1Rlu9hQ2kiyy1WAztkXyqGrc80ZWrKQPAtigwbk3UQjlZM
2EBP5kkOOCQqVhYh0144g2KOoIoyajCa1hDrNAcfuN/0Mo4v+oqnZDQ6Gj2A59RT
bJrKsiynVxbAgfI/bdp3AwQqW7QKDt9pmcu5rsBKT2qK5gHDaCEYGm6k1kcKsWeh
avT1S1NljUNRsvWDg1orDpyU6jWKN8MuLC0OwoQAb31BnUSM2sZBMFJ0yDGXwW2L
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492143161962541933566365994372803647907577
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-30 13:30:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-30 13:30:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dearborn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ford Motor Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.servicesusa.ford.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23638389865429481305321704733476131008171386475300244405105385260542524439220745437822867538935663202874492428771469599438622036591990117359042590210672534791754964434560370372002005551410112796768764279725907204185124215123163716791417858321067123857515239180147478776699379896940560632901134563358273634284263984840555105563150432192047529826071056366465649729033135820991338968066169380583957882747642085689766657851243426748787627168919921469127417786315735935163090697518866503586908145784318158887579626709503917738000173671508673218762143411042828644475254187496387202485614248823329744888739489321266801642379
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesusa.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.forddirect.fordvehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesa.forddirect.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesb.forddirect.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.forddirect.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesa.forddirect.fordvehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesb.forddirect.fordvehicles.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesus.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.servicesusb.ford.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'servicesusa.ford.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb1ef05fe32b7f0d09da211708cd0381be38821a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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