*.agrupemonos.cl

- Cuponatic Latam SA -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 22:3f:44:ad:74:93:c6:43:ce:1e:4c:41 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Cuponatic Latam SA

Organization: Cuponatic Latam SA
State / Province: Santiago
Locality: Santiago
Country: CL

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 22:3f:44:ad:74:93:c6:43:ce:1e:4c:41
Serial Number (int): 10598976981169289586775313473
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 35:b1:23:4e:e1:8f:cd:30:15:d7:f9:a1:35:e3:6f:5c:2f:52:3f:62
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 53:31:00:e7:60:7f:1d:07:12:cf:ae:51:b0:ec:ac:33:3a:b8:8e:1f
Fingerprint (sha256): 9e:c3:33:96:c3:b4:37:2f:ef:29:74:18:6c:9f:9b:de:0c:56:25:6e:31:a2:7a:01:a9:c3:88:33:05:b3:3d:cc

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.agrupemonos.cl

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.agrupemonos.cl

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.agrupemonos.cl
agrupemonos.cl

Other certificates including the domain name agrupemonos.cl

(limited to 100 certificates)
cyberfalcon.nl
www.diaryhomework.app
admin.dheoab.dev
*.agrupemonos.cl
drugs.joshuabennett.dev
login.agrupemonos.cl
turlockjournal.column.us
auth.agrupemonos.cl
www.fragatta.it
*.agrupemonos.cl
geolocation.rayrok.com
fandestination.com
*.agrupemonos.cl
*.agrupemonos.cl
arowanadigital.com
auth.agrupemonos.cl
eipets.com
www.f10.ai
authfb.agrupemonos.cl
login.addressbooktest.gcp.coin.it
*.agrupemonos.cl

Certificate

The complete raw certificate details for *.agrupemonos.cl in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGnDCCBYSgAwIBAgIMIj9ErXSTxkPOHkxBMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzExMjAxOTUxMTVaFw0y
NDEyMjExOTUxMTRaMGsxCzAJBgNVBAYTAkNMMREwDwYDVQQIEwhTYW50aWFnbzER
MA8GA1UEBxMIU2FudGlhZ28xGzAZBgNVBAoTEkN1cG9uYXRpYyBMYXRhbSBTQTEZ
MBcGA1UEAwwQKi5hZ3J1cGVtb25vcy5jbDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAO0LaRhcYpL4yQuCxv95FFOUfYhZYKZ8pn2dvD51qq+ZiFD2Zsxm
lp5OSHJjMCHgw/2m5tQx160bHDaRtQ2zkRsnJLJsoObeE9OBu1Vj6d2MbY9BWxlQ
buYF52XntLoF/pjw0d600ir+m6DIK1EaOQR/qJ3ivoRxEmNhjw08Q3/cKKWImVlN
kvSE/Pjx6wVx9V5h4RYu5v67uYWslbCYwEfdGgQ22RBGPSkmOohsDtopGe1xMnt+
HWnnYa9o5IoltXXJBJ7lyW5QszKsm6OoWIzOIN4O67FdyeT2hEBMWUGSICOZDMpX
ZNO6KNyngqrhrm6zpfUpPGWco+zTOOXv2bUCAwEAAaOCA1kwggNVMA4GA1UdDwEB
/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUF
BzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92
c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDovL2NybC5nbG9i
YWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDArBgNVHREEJDAighAqLmFn
cnVwZW1vbm9zLmNsgg5hZ3J1cGVtb25vcy5jbDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjxhwMCs+swHQYD
VR0OBBYEFDWxI07hj80wFdf5oTXjb1wvUj9iMIIBfQYKKwYBBAHWeQIEAgSCAW0E
ggFpAWcAdgA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYvuSYFk
AAAEAwBHMEUCICC81wtBl/WB8X0RtdMFqnl8cTO5u+uG++Vse/LQFcwmAiEAs+1p
aBsJ8yRWCfwAsVtRLSkZariv1Nusf2rOe3Ea2coAdQDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYvuSYQ9AAAEAwBGMEQCID26oD28ieeOW92dtS7p
E2bexu9a+mFRMTIv/NHo1zflAiAqjNZD97xD4TYJY0hJAYjRx2ic6cDjnvITUXA1
ujM8egB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABi+5JgU8A
AAQDAEcwRQIhAPh+70O7jcvXzEPsXqa0zBL0yLBSlAt3P7cOMO/H5sY1AiAp5IYK
Fm6nyXFfgVdrXRs7Ye1lQ6AhMyanTiJ68bGF/TANBgkqhkiG9w0BAQsFAAOCAQEA
VkHeyKdOknLnMVf9Tc7800O1yKiReyb6S3jYQO2x1z9WkzLR9Lr4isntc+n48f+X
uBFj7O7ZcGJkEMjaqhGuuiL21JB1ZoocLIEDLDN3wghZM8UNAZfnoGnFwhxGZ3R5
W4cAlYKcRydR8DUDMiXOwNscJCXljWaGfAMWPJ4PkS2oq/MlKqKzXozv/i24pWhC
h7W3a4X1dfjx78PAvRnTaniEXpIO6K1lk3YGVvdaaxSaAlVI6XCDczmioUKerw4D
iAE1nWRjjxxXBUjGaDUkntQRX4jChwBZtMeITqIYK0WkqVOP72heo5vkYe3Lstps
gwkkBu0r1Szr7sQ05tyyeQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QtpGFxikvjJC4LG/3kU
U5R9iFlgpnymfZ28PnWqr5mIUPZmzGaWnk5IcmMwIeDD/abm1DHXrRscNpG1DbOR
Gycksmyg5t4T04G7VWPp3Yxtj0FbGVBu5gXnZee0ugX+mPDR3rTSKv6boMgrURo5
BH+oneK+hHESY2GPDTxDf9wopYiZWU2S9IT8+PHrBXH1XmHhFi7m/ru5hayVsJjA
R90aBDbZEEY9KSY6iGwO2ikZ7XEye34daedhr2jkiiW1dckEnuXJblCzMqybo6hY
jM4g3g7rsV3J5PaEQExZQZIgI5kMyldk07oo3KeCquGubrOl9Sk8ZZyj7NM45e/Z
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10598976981169289586775313473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-20 19:51:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-21 19:51:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santiago'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cuponatic Latam SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.agrupemonos.cl'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29924105018008186494374105549180642980523810724415845905044317990695352742851400872851879520175341426934972996879562176702436630419999593886106383604287186686116066737929946721501210376532896471340924253359236171981926360560038715839655895222646058789938100201089331384891468664647789256360965312586020313097892910567343255394935881090296354625272651928794091018742398316637227043436114399774178293394633479326803933606621240114185911298269792299023690543343962664825546071345085726487213400542829600571640255735406314357035063094183883888645368557223961533751364172873591252954827331737399690005758269538679028439477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.agrupemonos.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'agrupemonos.cl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35b1234ee18fcd3015d7f9a135e36f5c2f523f62
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076003f174b4fd7224758941d651c84be0d12ed90377f1f856aebc1bf2885ecf8646e0000018bee4981640000040300473045022020bcd70b4197f581f17d11b5d305aa797c7133b9bbeb86fbe56c7bf2d015cc26022100b3ed69681b09f3245609fc00b15b512d29196ab8afd4dbac7f6ace7b711ad9ca007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bee49843d000004030046304402203dbaa03dbc89e78e5bdd9db52ee91366dec6ef5afa615131322ffcd1e8d737e502202a8cd643f7bc43e136096348490188d1c7689ce9c0e39ef213517035ba333c7a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bee49814f0000040300473045022100f87eef43bb8dcbd7cc43ec5ea6b4cc12f4c8b052940b773fb70e30efc7e6c635022029e4860a166ea7c9715f81576b5d1b3b61ed6543a0213326a74e227af1b185fd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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