portal.crctrust.com

- 华润深国投信托有限公司 -

Issued by WoSign Class 4 EV Pro Server CA

About this certificate

This digital certificate with serial number 50:eb:b2:bb:80:3a:33:41:01:97:45:19:d2:96:23:e9 was issued on by WoSign CA Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificate with an RSA key contains invalid key usage(s): KeyUsageKeyAgreement Key usage values digitalSignature, nonRepudiation, keyEncipherment, and dataEncipherment may only be present in an end entity certificate with an RSA key (RFC 3279: 2.3.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
  • RSA: Public exponent SHOULD be in the range between 2^16 + 1 and 2^256 - 1 (BRs: 6.1.6)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

华润深国投信托有限公司

Company registration number: 440301102858241
Organization: 华润深国投信托有限公司
Address: 深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层
Postal code: 518048
State / Province: 广东省
Locality: 深圳市
Country: CN

WoSign CA Limited

Organization: WoSign CA Limited
Country: CN

This certificate has expire since

Certificate Details

Serial Number (hex): 50:eb:b2:bb:80:3a:33:41:01:97:45:19:d2:96:23:e9
Serial Number (int): 107562054548809235484289268787904390121
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6e:ae:7d:77:de:50:ac:1d:26:a7:42:a4:57:24:80:cd:f0:7a:3f:94
AuthorityKeyId: 1a:19:83:de:d1:62:f3:91:76:14:9e:f2:d9:58:74:2d:08:48:c1:6c

Fingerprint (sha1): 79:a0:76:2b:87:f9:31:18:f9:fc:96:b8:fb:c6:cd:29:78:2b:27:fe
Fingerprint (sha256): a5:f6:0c:33:d3:e2:15:fc:85:23:70:3f:4f:6f:ee:b2:e5:8e:83:3d:49:41:fb:c8:74:2e:8f:51:51:b7:fd:8e

Issuing Certificate URL: http://pro-aia1.wosign.com/class4p.server.ca1.cer

Revocation information

OCSP Server: http://pro-ocsp1.wosign.com/class4p/server/ca1
CRL Distribution Point: http://pro-crls1.wosign.com/ca1-server-4p.crl

Check the revocation status for certificate portal.crctrust.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.crctrust.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment
Key Agreement

Extended Key Usages

Client Authentication
Server Authentication
Microsoft Server-Gated Cryptography
Netscape Server-Gated Cryptography

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.crctrust.com

Other certificates including the domain name crctrust.com

(limited to 100 certificates)
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
echain.crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
xchain.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
am.crctrust.com
mail.crctrust.com
crctrust.com
crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
crctrust.com
mcs.crctrust.com
sfvpn.crctrust.com
mcs.crctrust.com
mcs.crctrust.com
mail.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
mail.crctrust.com
mail.crctrust.com
if.crctrust.com
portal.crctrust.com
portal.crctrust.com
portal.crctrust.com
mail.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
mail.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com
portal.crctrust.com
sfvpn.crctrust.com
portal.crctrust.com

Certificate

The complete raw certificate details for portal.crctrust.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIDANBgkqhkiG9w0BAQEFAAOCAQ0AMIIBCAKCAQEA9NiIPItANOPhsHoKTanq
ONFb2rt6FO8YLaF+0DgcWbjroINOtupGNpYKnMOfU/igcsDd6gZnZTouCNk3Vp5v
VE0124+sVzwOsjBSG/heLmKTC7PBm0eScq+TU6j3KQwGrlQOH4u6zK7Che8MZkJ8
dVYCGoPTy2mTjMgyKjbnPEKTnrpNWvh4VywxgNMiPl6rfxwlfbT0SUzEgg4d4PdK
ugFiK7xZG0jCEPpGOIUeCT1YGiHBNnVE24XJlgMheIPYzAeJJ05ywG+JbylhD3lA
N7+pjjqoj+o2ABNwZ4NZ3xYlyKG3OG1Y+Cdw8YZnA7mId7FG5Ujv9OqMamE//7PN
jwIBAw==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 107562054548809235484289268787904390121
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WoSign Class 4 EV Pro Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-29 10:08:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-29 10:08:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Guangdong'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shenzhen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '440301102858241'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '广东省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '518048'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '深圳市福田区中心四路1-1号嘉里建设广场第三座第10-12层'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '华润深国投信托有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.crctrust.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2144 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30908922406228378802464742805028674065609351843253252483025878477211351578740443000922624977719378343021403053254772748196176395687496506768649417400945540839066277755660072121160114961097212273221797746922029647854666696664070139513806992568785266539244132663025495978914267100429288227134849693903364264155079220331402317971704299701867878621020670234155174813404834130629036061636123949427646376798580236973220116075571060216509060456570390144557930703081164315976560710264469715727317799585156168380851838725214674251767718745861297868922151600877591363775969055473136480625642352695695635281978581114560678448527
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 3

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (5 bits)
							03a8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.10.3.3 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.4.1 (serverGatedCrypto)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6eae7d77de50ac1d26a742a4572480cdf07a3f94
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1a1983ded162f39176149ef2d958742d0848c16c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-ocsp1.wosign.com/class4p/server/ca1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-aia1.wosign.com/class4p.server.ca1.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pro-crls1.wosign.com/ca1-server-4p.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.crctrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (77 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.36305.1.4.4.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.wosign.com/policy/'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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