tensio.ca
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 54:15:e0:91:8b:8a:cc:dc:0d:8d:04:b7:aa:c2:59:76 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=tensio.ca
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 54:15:e0:91:8b:8a:cc:dc:0d:8d:04:b7:aa:c2:59:76Serial Number (int): 111768744670983162796919275618302056822
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: ba:f3:6d:7c:81:74:83:8e:84:b8:d8:3d:45:88:7e:99:26:02:07:f4
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 1b:82:8b:6d:dc:8d:f9:60:5b:6d:c2:c5:c7:b6:24:fc:3b:46:31:c0
Fingerprint (sha256): 96:f3:07:80:38:e9:81:af:94:3d:2b:1b:f5:85:3f:8b:81:c8:3c:a1:bc:bc:79:21:b5:76:e5:79:cc:3c:9b:14
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/TJ48309eKA4CRL Distribution Point: http://crls.pki.goog/gts1p5/II4xTF4ajug.crl
Check the revocation status for certificate tensio.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for tensio.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
tensio.ca
Other certificates including the domain name tensio.ca
(limited to 100 certificates)
static.ges.digital
www.rostykerei.nl
dev.app.tensio.ca
www.celestialwalk.fr
partner.rezoy.app
beta.superfonik.com
talvi.com.ar
www.missioncreek29acres.com
paradaobrigatoria.lupi.delivery
kfzbook.de
greenwind.berlin
www.portaforza.com
management.thermolog.biz
tensio.ca
molity.com
www.bickle.dev
tleilax.dev
devfest.gdgtarragona.net
www.unleash.com.br
www.stellarjaysoftware.com
auth.test.spiritory.de
srv.divriots.com
www.somreview.com.br
app.plan-play.com
w38fh.podc.incentable.com
ls.nhayeu.com
staging.platform.simskills.io
bestel.speeltuin.watdrinkje.be
www.tuerkiyereal.estate
www.spacerooters.com
m.renown.ai
dl.yokara.com
www.ethionest.com
farb.com.br
tensio.ca
www.umadelicia.com.br
www.i3software.in
auditor.axyma.com.br
abrahamk.in
santiagojimenez.dev
alejandroandre.com.ar
mythicalsociety.app
app.moretrash.id
tensio.ca
dev-app.dieseldispatch.com
www.enlaceterceracultura.com
servantnunooministry.com
pulpox.com.co
tensio.ca
tensio.ca
www.melbournewebco.com
www.learnwithnat.com
tensio.ca
healthcare.dena.com
kenko.pedidomovil.es
elisecasey.com
www.imaginechatapp.com
tensio.ca
www.chwan1.info
johannborg.com
tensio.ca
management.thermolog.biz
escode.lv
www.pmrealty-group.com
tensio.ca
kindleebooks-wnyo.ebookbes.com
swabisnack.com
tensio.ca
spiritsaved.com
kingsolutions.pacmanager.com
genetype.lis.mobi
order-now.app
quickmathz.xyz
zandula.com
wd.easycloud.tv
anexo3contabilidade.com.br
www.nubbar.com.br
electricworkofnyc.com
trx.udel.vip
toby.insurfun.com
superbmeteor.co
gobanano.com
www.rostykerei.nl
dev.app.tensio.ca
www.celestialwalk.fr
partner.rezoy.app
beta.superfonik.com
talvi.com.ar
www.missioncreek29acres.com
paradaobrigatoria.lupi.delivery
kfzbook.de
greenwind.berlin
www.portaforza.com
management.thermolog.biz
tensio.ca
molity.com
www.bickle.dev
tleilax.dev
devfest.gdgtarragona.net
www.unleash.com.br
www.stellarjaysoftware.com
auth.test.spiritory.de
srv.divriots.com
www.somreview.com.br
app.plan-play.com
w38fh.podc.incentable.com
ls.nhayeu.com
staging.platform.simskills.io
bestel.speeltuin.watdrinkje.be
www.tuerkiyereal.estate
www.spacerooters.com
m.renown.ai
dl.yokara.com
www.ethionest.com
farb.com.br
tensio.ca
www.umadelicia.com.br
www.i3software.in
auditor.axyma.com.br
abrahamk.in
santiagojimenez.dev
alejandroandre.com.ar
mythicalsociety.app
app.moretrash.id
tensio.ca
dev-app.dieseldispatch.com
www.enlaceterceracultura.com
servantnunooministry.com
pulpox.com.co
tensio.ca
tensio.ca
www.melbournewebco.com
www.learnwithnat.com
tensio.ca
healthcare.dena.com
kenko.pedidomovil.es
elisecasey.com
www.imaginechatapp.com
tensio.ca
www.chwan1.info
johannborg.com
tensio.ca
management.thermolog.biz
escode.lv
www.pmrealty-group.com
tensio.ca
kindleebooks-wnyo.ebookbes.com
swabisnack.com
tensio.ca
spiritsaved.com
kingsolutions.pacmanager.com
genetype.lis.mobi
order-now.app
quickmathz.xyz
zandula.com
wd.easycloud.tv
anexo3contabilidade.com.br
www.nubbar.com.br
electricworkofnyc.com
trx.udel.vip
toby.insurfun.com
superbmeteor.co
gobanano.com
Certificate
The complete raw certificate details for tensio.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVzCCBD+gAwIBAgIQVBXgkYuKzNwNjQS3qsJZdjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzA5MjEyMzU3NDdaFw0yMzEyMjAy MzU3NDZaMBQxEjAQBgNVBAMTCXRlbnNpby5jYTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBAKdHqucngb5q6gJcEH8aJEhFSCOH5zbhMcLVd3aT0cNjhpg9 vQfaFt8FlYzCdWzuUZG+dH3NP1IhE0DwYysaCgLAxGLOLBe98gDfqtZLcmVHDaIK 5FfWSuio9qdF1lIcKo7LOnNGs2QkDrfn98SG0S6NJLlZW6v542rgRpm+kpsS/NMl 35/nSIgTEg5RgCnY4+k01H5VlO/AKrCApjHpAmWOTDZzAUOH3ITmSBBo/EaMcjIJ dCFV8SICbPQby0xdD3ylXfS/FMkjzCIC+d3pF8sLgnHXXiSnrpuRpRMIIi32DbeY ASGqoRZay8obb+cZk3UdZmcwawITiCOzz0XrO90CAwEAAaOCAnEwggJtMA4GA1Ud DwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0G A1UdDgQWBBS68218gXSDjoS42D1FiH6ZJgIH9DAfBgNVHSMEGDAWgBTV/J4N3x7K 3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6 Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L1RKNDgzMDllS0E0MDEGCCsGAQUFBzAC hiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVyMBQGA1UdEQQN MAuCCXRlbnNpby5jYTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUD MDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFwNS9J STR4VEY0YWp1Zy5jcmwwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgB6MoxU2Lct tiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYq6ZJOeAAAEAwBHMEUCIQD/eYhV CaTTeNzJy0AJS+QKY31CNKgKKWTeAtU9wB3gZwIgDJcV0dM3eX8R7WYXXDnxYsyw GbDnDrQZH28yWZnSRM4AdwCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yC igAAAYq6ZJOfAAAEAwBIMEYCIQC3aBfjqVMyY4t8DMjn2VXKK9TRak2WrZ5erb+g ojjMVgIhANjK41JPmw0oJpXCsEJfIlc1WDAvvr9Wt+8Yxmo8iT/hMA0GCSqGSIb3 DQEBCwUAA4IBAQCwt1FZbc3zSAo5ykSGmigzkauG3CWUPIAEnFyP/WsbB+ZVx3r2 8TeRb1y4+p9PdsjS0PYYGue5ZCv7bcswZOmKGj4hWfLKtyKydh+FRdT/Jin7Fj+E oBtKS7a23WYL/ePtJ35KR9Vf/brOZZQL7RVtnAZvgOk7Zb84QtmIw9PFtZaud70D 4bSBMvJkIXgEk/rdMqUYYmOT9u2bT34aWfequARf35oyqPt5le9ufaj49lhHovuK jCEon9A1ObEaFYLsPe/0zYgjrQaBmj0E/UVx8Jv9/cILuKEJf0DfDT2SQ+l7UUfw IWc9MDIDB5xuPBqf5F2Wp+mZ+LHU9l3kOVJx -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0eq5yeBvmrqAlwQfxok SEVII4fnNuExwtV3dpPRw2OGmD29B9oW3wWVjMJ1bO5Rkb50fc0/UiETQPBjKxoK AsDEYs4sF73yAN+q1ktyZUcNogrkV9ZK6Kj2p0XWUhwqjss6c0azZCQOt+f3xIbR Lo0kuVlbq/njauBGmb6SmxL80yXfn+dIiBMSDlGAKdjj6TTUflWU78AqsICmMekC ZY5MNnMBQ4fchOZIEGj8RoxyMgl0IVXxIgJs9BvLTF0PfKVd9L8UySPMIgL53ekX ywuCcddeJKeum5GlEwgiLfYNt5gBIaqhFlrLyhtv5xmTdR1mZzBrAhOII7PPRes7 3QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 111768744670983162796919275618302056822 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-21 23:57:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-20 23:57:46 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tensio.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21117137534943248570911620995757061357090867342896505092478958825027360126907783707053855565797775705576990447628439712108597234156036655575349584483698524823932811985232145137026407984338601353285550458952350180638918402772139943109358578185529284430425106714884332116344482552618077910340951535612827461902952669729446644090060178606789686916085305421716101035959621380779351121873901440429897044448320995560318379465184380671666699050782740849117730721146316578462492725366336666105626121896183001475792397194438042558602195181103533117012551525632285386382349458436123580753374087074968187778043190939459395468253 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) baf36d7c8174838e84b8d83d45887e99260207f4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/TJ48309eKA4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tensio.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/II4xTF4ajug.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f10076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018aba64939e0000040300473045022100ff79885509a4d378dcc9cb40094be40a637d4234a80a2964de02d53dc01de06702200c9715d1d337797f11ed66175c39f162ccb019b0e70eb4191f6f325999d244ce007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018aba64939f0000040300483046022100b76817e3a95332638b7c0cc8e7d955ca2bd4d16a4d96ad9e5eadbfa0a238cc56022100d8cae3524f9b0d282695c2b0425f22573558302fbebf56b7ef18c66a3c893fe1 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b0b751596dcdf3480a39ca44869a283391ab86dc25943c80049c5c8ffd6b1b07e655c77af6f137916f5cb8fa9f4f76c8d2d0f6181ae7b9642bfb6dcb3064e98a1a3e2159f2cab722b2761f8545d4ff2629fb163f84a01b4a4bb6b6dd660bfde3ed277e4a47d55ffdbace65940bed156d9c066f80e93b65bf3842d988c3d3c5b596ae77bd03e1b48132f26421780493fadd32a518626393f6ed9b4f7e1a59f7aab8045fdf9a32a8fb7995ef6e7da8f8f65847a2fb8a8c21289fd03539b11a1582ec3deff4cd8823ad06819a3d04fd4571f09bfdfdc20bb8a1097f40df0d3d9243e97b5147f021673d303203079c6e3c1a9fe45d96a7e999f8b1d4f65de4395271