*.hullaro.com

- MEDIOPIA TECH Corp. -

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 0d:77:ed:27:10:8a:c1:09:1f:7d:63:cc:6a:34:31:f2 was issued on by DigiCert Inc.

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

MEDIOPIA TECH Corp.

Organization: MEDIOPIA TECH Corp.
State / Province: Seoul
Locality: Gangnam-gu
Country: KR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:77:ed:27:10:8a:c1:09:1f:7d:63:cc:6a:34:31:f2
Serial Number (int): 17902657297463457843013572441079558642
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c9:82:8b:c3:b3:1e:00:ce:3f:50:82:ee:31:9e:ce:ec:4c:cf:9d:91
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): bb:bc:a8:62:ba:43:cd:d8:b4:ef:06:73:be:22:c1:4b:88:38:65:d7
Fingerprint (sha256): b9:8a:17:0b:10:5a:1b:66:0e:a6:d7:f1:3d:30:35:9f:dd:20:7d:e3:43:fe:f8:ce:69:3a:bf:7a:38:82:24:45

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate *.hullaro.com

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hullaro.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hullaro.com
abc.ocu.ac.kr
edu.auri.go.kr
edu.dominos.kr
edu.kelia.slic.kr
ehp.eunhapub.co.kr
e-learning.sc.or.kr
gkledu.grandkorea.com
kefedu.kefplaza.com
language.scau.ac.kr
www.daisoedu.co.kr
www.display-mooc.com
www.e-linklearn.com
www.eunhapub.co.kr
www.hanbitn.com
www.jobstart.co.kr
www.kanselearning.kr
www.kccisv.net
www.kdaonline.or.kr
www.kendi.or.kr
www.realhani.com
www.samsungenglishedu.com
www.silgi.co.kr
www.slic.kr
www.sonoline.co.kr
www.vital.co.kr
www.ymg.kr
hullaro.com
www.hyundai-mobilityschool.com
www.kdca-edu.kr

Other certificates including the domain name hullaro.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for *.hullaro.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTFV+XSx7CBG48DT+/Px
VcWswGEZjDkn9GeL4DQEy1ux7jbVmKSOpEK6JsFmsdWMMdOpuItaV4ehO5lyAIbD
zz1VaT/6gVB541QUa5Uqrcu1jVhizpW2DSHch7bVrvpWTsfF36dewlHToYwJypYE
l0jo7K67uLGmfRTaH++tan5uA9oGTC5ShX4JZZEeMf/N8N1DMslnVMBGUMbQUh3+
8MuCm9emWNpUC4xHlMhK71KWxyrPF7FQH2TYUym6djv/XvT47lca2daDwuLC0vNd
YGKG1CBHog3cIIzJSaUVfOrJDfBKtniQXmVau7R0dbzcL1umzn8LS565pk2nOoKz
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17902657297463457843013572441079558642
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-05 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seoul'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gangnam-gu'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MEDIOPIA TECH Corp.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.hullaro.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22873461607131081021331665760203660739617705085390419141564213915889832906546619730545142114959645517154430364509624067493845832514664217095387480397894864295472254114924806148489990093839789974401624665263176503122050304237820899540341139925939854840404426293199951407620882280216155348009630383472394067062627830205997829615278317621436608550123705916671096124116878130942867712777707643717892643165804530220069282190721836526695479346705378052570727092791432831132933597438581632471547745977276851390042803682755649715842036029822834713844986767058333154001922724014362598414689030786068560693728411521558083974047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9828bc3b31e00ce3f5082ee319eceec4ccf9d91
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (573 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hullaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abc.ocu.ac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.auri.go.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.dominos.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'edu.kelia.slic.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehp.eunhapub.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'e-learning.sc.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gkledu.grandkorea.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kefedu.kefplaza.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'language.scau.ac.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.daisoedu.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.display-mooc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.e-linklearn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eunhapub.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanbitn.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jobstart.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kanselearning.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kccisv.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdaonline.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kendi.or.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.realhani.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.samsungenglishedu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.silgi.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.slic.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sonoline.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vital.co.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ymg.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hullaro.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hyundai-mobilityschool.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kdca-edu.kr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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