www.clustium.com

Issued by RapidSSL SHA256 CA

About this certificate

This digital certificate with serial number 55:e1:68:fb:cb:1c:ba:1b:b9:4c:46:a4:b8:4a:f1:35 was issued on by GeoTrust Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Certificate Subject

CN=www.clustium.com

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 55:e1:68:fb:cb:1c:ba:1b:b9:4c:46:a4:b8:4a:f1:35
Serial Number (int): 114154775754615942055578075272286236981
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 97:c2:27:50:9e:c2:c9:ec:0c:88:32:c8:7c:ad:e2:a6:01:4f:da:6f

Fingerprint (sha1): 06:4d:33:56:c8:7f:df:07:80:27:86:24:b5:02:f1:2b:de:0a:68:67
Fingerprint (sha256): b9:5c:19:1d:64:89:da:35:a2:b9:87:3a:fb:93:fd:df:d9:6e:1c:36:d3:11:62:37:ec:de:cf:63:d5:d7:3b:2e

Issuing Certificate URL: http://gp.symcb.com/gp.crt

Revocation information

OCSP Server: http://gp.symcd.com
CRL Distribution Point: http://gp.symcb.com/gp.crl

Check the revocation status for certificate www.clustium.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.clustium.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.clustium.com
clustium.com

Other certificates including the domain name clustium.com

(limited to 100 certificates)
socius.loadsure.net
hkumed.eventxtra.com
www.sintelly.com
www.feofex.com
www.cambodiacountry.com
www.gapcrossdev.com
bienestardigital.cl
wycena.internationalwindows.pl
www.dailyfreshkiosk.com
costvet.com
creatoradar.com
activepro.tech
gaon.cl
www.clustium.com
kwasic.com
auth.google.urbanplay.com.br
jmcreate.co.jp
astroholidayz.gurutu.in
*.clustium.com
admin.qa.mylnk.app
www.stevenminken.nl
aplug.io
www.androidaudioplugin.org
lightpc.in
tknokrs.witsmate.com
*.clustium.com
fresh4you.app
hkumed.eventxtra.com
www.cargo-planner.com
loggbok.net
danlowe.dev
kromit.at
threeswithfriends.com
www.firstflagservice.com
www.gapcrossdev.com
sergiomedina.io
s.aiii.ai
www.edgaadi.com
jmcreate.co.jp
wycena.internationalwindows.pl
loggbok.net
www.codecerc.com.ve
astroholidayz.gurutu.in
invite.beatme.app
www.codecerc.com.ve
portela.dev
thotcloud.wired-shop.com
app.test.evitect.com
s.aiii.ai
www.clustium.com
sergiomedina.io
www.sintelly.com
www.edgaadi.com
www.clustium.com
app.id-ods.org
app.equestrian.digital
app.id-ods.org
old.clustium.com
www.databizz.com.br
www.donnemoilesroues.com
blog2.tsugitta.com
www.arceptive.com
www.bodysynthase.fr
good360-test.cpptl.co
translate.emlions.com
www.donnemoilesroues.com
logowl.io
www.clustium.com
jp.ilb.io
www.databizz.com.br
addesignshow.xtend.community
www.actmettet.be

Certificate

The complete raw certificate details for www.clustium.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHZDCCBkygAwIBAgIQVeFo+8scuhu5TEakuErxNTANBgkqhkiG9w0BAQsFADBC
MQswCQYDVQQGEwJVUzEWMBQGA1UEChMNR2VvVHJ1c3QgSW5jLjEbMBkGA1UEAxMS
UmFwaWRTU0wgU0hBMjU2IENBMB4XDTE2MTIyNjAwMDAwMFoXDTE5MTIyNjIzNTk1
OVowGzEZMBcGA1UEAwwQd3d3LmNsdXN0aXVtLmNvbTCCAiIwDQYJKoZIhvcNAQEB
BQADggIPADCCAgoCggIBAMS7rLE5A0yfFC1+XNEvjCVAj2GKf/r2+IeeA1oa9Uib
PEsnLwrtDVB8xi9zFv+qkOGjYLKZLoGJD9z4pp6wrZVRxmp7BQ9B7Rh5xEbEica0
7Lz7/9R6S/fMv8CTUUO+433PfuJTxzY3QjWskOuC9YVhu3f6pAjE/L1f3lLxfTIo
SM5Lv1G6JvtINiZjI40KQaJa16JZwUB58tp+AlxgDO5kgWCeFHYh4Y4W7V9yaYNz
o66ne2fWfauws5hNuMsjKwkK+JKMv4qnaDByhrjzXZh3H7nxs0aC8yeyLwIkWlBi
q1Jm2W0V+wnIgLuhZCxgpcuTLeLRK4xPKOTvaCXEd+ZeGu8myI0qjcMO+bGK5U0W
9W7v/4RD3GQ9NqAoEycDUAjhYLEqRBn9rMCbRh3Drz4XVkTyxKv4QrE1ZiRkQVfx
wxiLNk87p/C4vRdFvjUFnNZcT2wW/IY3Pkd3TwJKzvo3b0d1J/1RSQyhCzKFdWNj
LlGEbUqrFVHrYob2OywtitnJanAV5nubXK9Es5lFfCDEBcP6MuvJK/KLA8jku49w
8vvIhm591WxE6lSivkR3u94SXIVSGPuSVJ3IyKpG1tXzui5R5tFvwGLG7VmYgyGe
FL2+mmt1u9xGxWR8V3Wdwb0GdGrpkX39uoGPuHLA4J/0fgvokegerTw5irY2L+cx
AgMBAAGjggN7MIIDdzApBgNVHREEIjAgghB3d3cuY2x1c3RpdW0uY29tggxjbHVz
dGl1bS5jb20wCQYDVR0TBAIwADArBgNVHR8EJDAiMCCgHqAchhpodHRwOi8vZ3Au
c3ltY2IuY29tL2dwLmNybDBvBgNVHSAEaDBmMGQGBmeBDAECATBaMCoGCCsGAQUF
BwIBFh5odHRwczovL3d3dy5yYXBpZHNzbC5jb20vbGVnYWwwLAYIKwYBBQUHAgIw
IAweaHR0cHM6Ly93d3cucmFwaWRzc2wuY29tL2xlZ2FsMB8GA1UdIwQYMBaAFJfC
J1CewsnsDIgyyHyt4qYBT9pvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwVwYIKwYBBQUHAQEESzBJMB8GCCsGAQUFBzABhhNo
dHRwOi8vZ3Auc3ltY2QuY29tMCYGCCsGAQUFBzAChhpodHRwOi8vZ3Auc3ltY2Iu
Y29tL2dwLmNydDCCAfYGCisGAQQB1nkCBAIEggHmBIIB4gHgAHYA3esdK3oNT6Yg
i4GtgWhwfi6OnQHVXIiNPRHEzbbsvswAAAFZO02G0wAABAMARzBFAiBCIrVZ1bBG
SUNEAlG2VDh6GpMlJ4tnTgpNvb1cv5F3IAIhAJyXo1W9UY/EInqvSIgjw9u7BFE1
bPMAE63+0bK58Wh9AHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7iXqo/csA
AAFZO02HHwAABAMARzBFAiEA3v96YU/21Ih8FtU12VBxAMpswaRYfb5tj4k+I+Fc
x2wCIHN/OGRrvUU1KkIf+m16dnsaRo73A5TUDplaZXtMS/S3AHYAvHjh38X2PGhG
STNNoQ+hXwl5aSAJwIG08/aRfz7ZuKUAAAFZO02HyAAABAMARzBFAiB0wLHNnxtX
+XlOrj+D/NiHBe3eMzm/XziAH4sWixzDDAIhAIXHKObGPBkzyPvDx8JwT9y4AIom
eSGd/e5O7UhkejSrAHYApLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAA
AAFZO02G9QAABAMARzBFAiEAmDAUo35iEBsRUOnEjNQ3cfHYJlQr5rK8Nprl/NQT
iHUCIANp3mKKCg620G+b2yFLijfsClr7ANHW//BC/yJ7f8KEMA0GCSqGSIb3DQEB
CwUAA4IBAQAKSeBU6QvR8UtYhePVkHIAaf6QhZwmQGXgxL8YKjRCs4XnmL8Fo8dm
E49UMcLVxtkmvdVLkZQW9Sxf79ZmujSaSEprKJPZ4ZoBqn9L0GvLpO8JQda3h0hg
eqCtOluem4uZItlGlHILPhyOYK9P+ovkwG40OWlfHrnAMUq5R/WYFZPqd4vI0JO+
pXerqRqQsnA5PYtwAxwUNSER8V1mcS4uu1BOn/F0reawwPzfQG1NN/ifqkHZeyT2
/ZoNbKxxrxK+4r2NyCrF4n7QMBYmICp4NYWweqXB0R6Z8jVal5v7O8IGg6YcY/pi
BnISb13c/Eh3DEHia29T7Qi3S/uKHHCT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114154775754615942055578075272286236981
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL SHA256 CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.clustium.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 802601040002911106115243053558573925080921504396895424186480473235914900958703881448808011638273755256467623648447736427428211307468307855332560303534857994377823800081035025218258855471015978597109443652364020530152765122520937150817622843600014945957762588794228246760449787104790408321106773178879308619236143950385926277602736821824835287080482092488876471366653146914732335260192542015987504507053451159640210873058765531449174546630074870835092187292729237080769004835860303090335941023884656035846287235807162424298010297217849244342540487700635248999417873833173306673567525017298110489340320765243189197447887510783421274644967831066091596630306548019854216530994810947295117601062274949735336686163620068634501762011927780032876632803723795259777826980387666355352579409463339267466523430271896937929605381767715957633042820039532049934711506663048226655890841735729769954883133099577724524342871261145618699713648799466155177078142170594669667640344750158279333259397938660323150886221164024009528314414338336316322612899215890356337535016651333698994705172324913519130071148375772948049405104698436592080699012166577171210928723426315541509492540428454199545081099449243808840478142524771390167332992916930305038698407729
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.clustium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clustium.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.rapidssl.com/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 97c227509ec2c9ec0c8832c87cade2a6014fda6f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gp.symcb.com/gp.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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