www.payu.in

- PayU Payments Pvt. Ltd. -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 5b:65:9b:6c:27:f8:78:a6:3c:c3:22:e0:ff:1c:75:cb was issued on by GeoTrust Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

PayU Payments Pvt. Ltd.

Company registration number: 218612
Organization: PayU Payments Pvt. Ltd.
Organization unit: IT
State / Province: Haryana
Locality: Gurgaon
Country: IN

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5b:65:9b:6c:27:f8:78:a6:3c:c3:22:e0:ff:1c:75:cb
Serial Number (int): 121487321941639778311004922462745687499
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): 3b:40:5d:18:6d:47:7d:50:e4:6d:df:76:78:28:5f:f9:a1:f4:c1:d7
Fingerprint (sha256): 87:71:bd:3a:85:1a:a0:fb:12:56:82:f6:ed:5f:40:b8:5e:a1:03:bf:cb:6d:0c:bf:0b:e8:c9:b2:4e:41:17:0f

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate www.payu.in

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.payu.in

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.payu.in
fp.payu.in
info.payu.in
test.payu.in
www.payu.in
payu.in

Other certificates including the domain name payu.in

(limited to 100 certificates)
secure.payu.in
www.payu.com
secure.payu.in
accounts.payu.in
secure.payu.in
signup.payu.in
secure.payu.in
lp.payu.in
*.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
secure.payu.in
secure.payu.in
info.payu.in
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
www.payu.com
secure.payu.in
www.payu.in
enach.payu.in
nebula.payu.in
*.payu.in
secure.payu.in
secure.payu.in
secure.payu.in
obriskscore.payu.in
www.payu.com
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
secure.payu.in
*.payu.in
tpcs.payu.in
www.payu.com
pages.payu.in
payu.in
secure.payu.in
*.payu.in
www.payu.com
*.payu.in
www.payu.com
*.payu.in
test.payu.in
*.payu.in
secure.payu.in
capital.payu.in
secure.payu.in
*.payu.in
www.payu.com
www.payu.com
www.payu.com
*.payu.in
www.payu.in
secure.payu.in
jshb.payu.in
www.payu.in
*.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
www.payu.com
secure.payu.in
*.payu.in
dataplatform.payu.in
secure.payu.in
dda.payu.in
www.payu.com
secure.payu.in
www.payu.com
www.payu.com
www.payu.com
secure.payu.in
secure.payu.in
*.payu.in
*.payu.in
*.payu.in
accounts.payu.in
accounts.payu.in
secure.payu.in
*.payu.in
secure.payu.in
*.payu.in
*.payu.in
enach.payu.in
*.payu.in
docs.payu.in
secure.payu.in
secure.payu.in
dda.payu.in

Certificate

The complete raw certificate details for www.payu.in in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwycCwHNAh7QL1afYeUFh
bWZ1VhYZn4QAG0MGbZdZaX9rTpPcI5fKBmiTFiYaidtPjnzNVkaTiTka9sofmrqI
ilbM4Pe36ZaayCwOJRlgCSxvGFICwevg+bo2VmRdo0zz7/pqxUONB1xY6Pw0JUwa
iOmFQqjNAM3sXQIkVjC14TaRKXOuMyKnorONQhdewx0GjCk/OvZHzZkmpFZThcjk
/T2GF4CgFIc4ytJ0q8lM0Kv//HGVgffPH7vjhR/cOcJtKx2+KqxPDc0nsNRsB/yd
hSxgbL4BOIa01gKQu3sPE4N+BPxM74BN/3a7XEAzWJss2PEE61NJmhez3YDN1KFf
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121487321941639778311004922462745687499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-02-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '218612'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Gurgaon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PayU Payments Pvt. Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'www.payu.in'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24635706385711194483039443638557356662548489214604352340336537106211215821936819456238419683863184214877317332784622410921724258520673265713097734954047366709183359546903621607665646538057141102395332449710859078016786974986319883147134810148625071680781315589438644678356519086898944603100790156185480977526736929125024943572291694786900939039338225832034982855733407493820201152749831427517865316826605891261409823433155451057674815816384260306656108480331990878586400269840205264474590204428100815648100859033752325397892371848219013880221293113379843347982745508519349258106735770574662557840074720384445902315471
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'info.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payu.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payu.in'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (152 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014b4e33f071000004030046304402201a2a5b310c8f8b882412be4eed649287fd0b0e0d4adcad45ba262300af0ea7c1022051cff41b1bf35dc093a93c0e704435dcd50456c7fbf09a2a069124ba95d239180075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014b4e33f2fe00000403004630440220593071887f191e54683a21df5fe005a3c8c5bf575f21eef704a4de9cc0de932d022000ec22b19bd8ee3dae9f89419f9fd7306a09a2f51ce6c03885fcb79326a61ab300760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014b4e33f094000004030047304502204a4663a8cc65449b2a2b23535969497d5198ad65635bcc9268b49cfe79976158022100fa2faa6038378265a02b58e75b0f21c82719f1e049aee7600775d64f2fa88674
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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