www.klab.com
Issued by RapidSSL CA
About this certificate
This digital certificate with serial number 12:0f:26 was issued on by GeoTrust, Inc..
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
SERIALNUMBER=W3IRj1uY2VL2cJMvyUavjQ-y/dEkefZo,CN=www.klab.com,OU=GT64746700+OU=See www.rapidssl.com/resources/cps (c)12+OU=Domain Control Validated - RapidSSL(R)
GeoTrust, Inc.
Organization:
GeoTrust, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 12:0f:26Serial Number (int): 1183526
Serial Number lenght: 21 bits, 3 octets
SubjectKeyId: 5d:29:e6:9b:28:29:d4:29:32:55:ec:96:3a:36:f4:46:28:bb:ea:8f
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30
Fingerprint (sha1): 60:52:fe:12:54:50:09:cd:89:93:ba:cb:52:2b:63:7b:49:cf:3e:c5
Fingerprint (sha256): 9b:0f:38:56:9c:ce:bd:4e:8b:27:f0:0e:77:b0:2a:a4:bd:d0:f0:d0:10:7a:71:06:39:09:f7:2a:65:7a:cd:77
Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt
Revocation information
OCSP Server: http://rapidssl-ocsp.geotrust.comCRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl
Check the revocation status for certificate www.klab.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.klab.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.klab.com
klab.com
klab.com
Other certificates including the domain name klab.com
(limited to 100 certificates)
*.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com
www.klab.com
*.github.jp.klab.com
www.klab.com
ask.corp.klab.com
www.hueimaging.com
iatl-upnvyk.org
klab.com
inquiry.corp.klab.com
next-admin.tapnotion.com
*.github.jp.klab.com
www.convo.com.ua
stg.klab.com
klab.com
*.klab.com
lp.corp.klab.com
github.jp.klab.com
github.jp.klab.com
github.jp.klab.com
www.klab.com
lp.corp.klab.com
github.jp.klab.com
lp.corp.klab.com
www.klab.com
lp.corp.klab.com
*.klab.com
github.jp.klab.com
ask.corp.klab.com
www.klab.com
github.jp.klab.com
lp.corp.klab.com
stag.patient.umasalud.com.mx
ask.corp.klab.com
*.pcms.klab.com
www.klab.com
ask.corp.klab.com
schoolchecker.co.uk
github.jp.klab.com
www.klab.com
s.klab.com
ask.corp.klab.com
klab.com
www.bittbook.com
www.decorarte2000.com
ask.corp.klab.com
stg.klab.com
*.klab.com
rentalsunited.mysmarthotel.com
ask.corp.klab.com
spanner.fyi
*.klab.com
faq.corp.klab.com
*.pcms.klab.com
Certificate
The complete raw certificate details for www.klab.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFKDCCBBCgAwIBAgIDEg8mMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew HhcNMTQwNDEzMDQzNjI4WhcNMTYwOTEzMTQyOTUyWjCBuzEpMCcGA1UEBRMgVzNJ UmoxdVkyVkwyY0pNdnlVYXZqUS15L2RFa2VmWm8xEzARBgNVBAsTCkdUNjQ3NDY3 MDAxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg KGMpMTIxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk U1NMKFIpMRUwEwYDVQQDEwx3d3cua2xhYi5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCx2K4oSYbxaVF68oTpEyEdX+hfdUxCFn77bTV29mvzK5oD kYSYc4B5uYRRVN5+zMCxJbnZlaFhMWWAh/JK7IsB1jXA4m6y4Nx/VXXA3fGfpqwE K3s2YOtkYNTbHbWebjoxBCrA423HE/I+sbGv+ip00j0wcfN+HLQFwoMWJyJdbPwH qOoLUZDlsTGBdn5GqhvacsVmBxKA6dtCJce7iMVEudvzRNHWJXbiDGX61VfqdmsL uTQpu1BdaXQRbSj0emYdkN/u5rU/RqcUG2KL4OqvT6K1akzgeHoX1DZ7/D7+IXvk rZnVHazRZx89tXJMdBEdT+VDHZHA5eD53A0A6e3BAgMBAAGjggGxMIIBrTAfBgNV HSMEGDAWgBRraT1qGEJK3Y8CZTn9NSSGeJEWMDAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMCEGA1UdEQQaMBiCDHd3dy5rbGFi LmNvbYIIa2xhYi5jb20wQwYDVR0fBDwwOjA4oDagNIYyaHR0cDovL3JhcGlkc3Ns LWNybC5nZW90cnVzdC5jb20vY3Jscy9yYXBpZHNzbC5jcmwwHQYDVR0OBBYEFF0p 5psoKdQpMlXsljo29EYou+qPMAwGA1UdEwEB/wQCMAAweAYIKwYBBQUHAQEEbDBq MC0GCCsGAQUFBzABhiFodHRwOi8vcmFwaWRzc2wtb2NzcC5nZW90cnVzdC5jb20w OQYIKwYBBQUHMAKGLWh0dHA6Ly9yYXBpZHNzbC1haWEuZ2VvdHJ1c3QuY29tL3Jh cGlkc3NsLmNydDBMBgNVHSAERTBDMEEGCmCGSAGG+EUBBzYwMzAxBggrBgEFBQcC ARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczANBgkqhkiG 9w0BAQUFAAOCAQEAQaInFrqWrC3+0YwOLUJsEwz3AIzEkNEirRYHf0Ay4/utX652 rzZ48PQaudOazrdIuPymD0linFv7gsLbcDFifbMPicSyjhEK4W+P2LQfuF0mLYHj BcLgGn6IbK65NOGOcZee/q3Pm1UHIyxl1Q24J1Bg7iLe9vhiUPxOPzz5Gn7uA7pA pQViBd+ic8x66Wkz8MaVAhaqqj8bJspeWiOr50gShbX0Hxbdn3gEr98+5ZPE/O/g xF6XuYJd1Yl6ECqr8HZXaLzMohA4A8rFGLPOOBxQoVVs6BZoyvpf4U/JgDoBZ0vm a7BtG/c3Tq1HLBU/L1Ywl5Cw1p0yKIDIDYfeiQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsdiuKEmG8WlRevKE6RMh HV/oX3VMQhZ++201dvZr8yuaA5GEmHOAebmEUVTefszAsSW52ZWhYTFlgIfySuyL AdY1wOJusuDcf1V1wN3xn6asBCt7NmDrZGDU2x21nm46MQQqwONtxxPyPrGxr/oq dNI9MHHzfhy0BcKDFiciXWz8B6jqC1GQ5bExgXZ+Rqob2nLFZgcSgOnbQiXHu4jF RLnb80TR1iV24gxl+tVX6nZrC7k0KbtQXWl0EW0o9HpmHZDf7ua1P0anFBtii+Dq r0+itWpM4Hh6F9Q2e/w+/iF75K2Z1R2s0WcfPbVyTHQRHU/lQx2RwOXg+dwNAOnt wQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1183526 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-13 04:36:28 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-13 14:29:52 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'W3IRj1uY2VL2cJMvyUavjQ-y/dEkefZo' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT64746700' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)12' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.klab.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22451029018342253677362092881824798493646365484833098018292133546161003392377846542111072754893164794085544356043582050593113883005383192090685111825740546418590316043967599030818906092461415154176061304215786796975587743904270235148539017936818871745459603511951179662830036323307617837452104367064938855593979041266319445016906866308486491268907016255247049664523392942939037740107532114922890349999652218349801487041478156626003269938653870724789660151792592248803700628854546621441899249621882501874190203729168090011185515140060075746629899263766162037203804393443243019030974646951445404965945639907859452521921 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.klab.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'klab.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 5d29e69b2829d4293255ec963a36f44628bbea8f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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