*.usantotomas.edu.co

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 05:4c:f3:2e:77:6f:c8:77:8c:de:6f:b4:b6:68:63:d5 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.usantotomas.edu.co

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:4c:f3:2e:77:6f:c8:77:8c:de:6f:b4:b6:68:63:d5
Serial Number (int): 7045686847166242889686980656712147925
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 76:4d:76:ce:cc:a4:ab:f1:98:93:12:83:fc:0c:3c:f7:6b:80:99:72
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): f6:c4:77:ad:d3:65:c1:ed:8e:f5:32:67:2a:65:a1:cb:aa:b8:62:2a
Fingerprint (sha256): c8:31:9d:30:b2:99:ab:66:60:cd:37:46:24:b6:f4:5f:69:20:15:53:b7:64:fa:9d:6c:f1:83:07:f9:91:33:ba

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate *.usantotomas.edu.co

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.usantotomas.edu.co

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.usantotomas.edu.co
usantotomas.edu.co

Other certificates including the domain name usantotomas.edu.co

(limited to 100 certificates)
craibooklick.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
zonedirector.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
bucket.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
centrodesoporteacademico.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
mesadeayuda.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
capacitacioncsa.usantotomas.edu.co
craibooklick.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.crai-ustadigital.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
craibooklick.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
*.usantotomas.edu.co
catalogocrai.usantotomas.edu.co
*.usantotomas.edu.co

Certificate

The complete raw certificate details for *.usantotomas.edu.co in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtzCCBZ+gAwIBAgIQBUzzLndvyHeM3m+0tmhj1TANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe
Fw0xODAyMDIwMDAwMDBaFw0yMDA5MjUxMjAwMDBaMB8xHTAbBgNVBAMMFCoudXNh
bnRvdG9tYXMuZWR1LmNvMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
1H9tNsdA+wuxJJm7SHZKoXuE3VruLH81CDfrY6yaX89v/j6zqFBA5CKEVdCkjJx9
cF9sTIOfu2p0841wHRP8U3f3oD3YFdiO+9X3qKncYiS/FqqzEMWNHpICIPR4Mf9W
/gAd42E9bggVm9NM0Yqgt8ja4cH2TJLWOINUkHz5xNE27cUsjIVjL/aSzlfPP2B4
D9v+VycmAOHGH99i0VTULX6aUUQZYYpvLnKu2zXU75H9lHwhi7jpUTL1jHxThdN5
8ZE58Suo6h4Ha++ji5oV4F+D8TYRzcG3ZaXv9YbJ+oNmW7m3blnzkK4/AeJvWYMR
ocz0a9sdijcmI+9nH6G7vwIDAQABo4IDrjCCA6owHwYDVR0jBBgwFoAUU8oXWfxr
wAMhLxqu5KqoHIJW2nUwHQYDVR0OBBYEFHZNds7MpKvxmJMSg/wMPPdrgJlyMDMG
A1UdEQQsMCqCFCoudXNhbnRvdG9tYXMuZWR1LmNvghJ1c2FudG90b21hcy5lZHUu
Y28wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcD
AjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBp
ZFNTTFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggr
BgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEw
dQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLnJhcGlk
c3NsLmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMucmFwaWRzc2wuY29t
L1JhcGlkU1NMUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIB8gYKKwYBBAHWeQIE
AgSCAeIEggHeAdwAdQCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAA
AWFW77HeAAAEAwBGMEQCIElyQXzMGrICZk3ertPC435lGroifWotEKIBIF4kUjaq
AiAbcnclHzIUk15XKxlTpaM/M3n+bZbDQN9Qz9rojo813wB1AId1v+dZfPiMQ5lf
vfNu/1aNR1Y2/0q1YMG06v9eoIMPAAABYVbvspMAAAQDAEYwRAIhAOStF6Dp2N9V
5zb6rV5aPW4OfuAQg4UiDrevZEFCVT1ZAh9lt8LiitDARFnhMbOdUAJ5quMevYlk
HvfrJ8Xl9fM0AHUAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUugakJZkNo4e0YUAAAFh
Vu+yrwAABAMARjBEAiAjB8GBP2nG2OHvOj+0xEWarvMSc1xVgEzazk3zVW2vAAIg
JGf4Fn+pYqb+hPnX0xRGxrAKdHiXOR28M9UFwm6v44YAdQBvU3asMfAxGdiZAKRR
Ff93FRwR2QLBACkGjbIImjfZEwAAAWFW77TJAAAEAwBGMEQCIEAugJnYkQYwGiQb
fa57mTdTW+y30rRB6MCYbklEalHyAiBmaWUUMPPUqkzlEw3jl1e+R9djkOwPhCuh
FS/BFZHMmDANBgkqhkiG9w0BAQsFAAOCAQEAdqwelXJFAD12hM0vtUiWlGOmzbcl
hJ6cGZCCo1LgL0R5q1R3XmyJ05PUrzpN5Zx5mXWRAQkvlaqWoiuhcZBxt7WeUVxW
+JodKNYB3ou2PQpLFEbl6cvBBUkcRo4EzAYPm6jL/jx0mLQ6os55xDXUhL9TqkXA
QD54/i9d8nuN12EXql8zmntRMBlmr51OJ514M1Lepkl/WyLxEao+8w0qoRVqkoTq
mnVkLQU95wsWSJkZGZVqBNbJlF0MeAwOHVvTkGu/2vz34i3gKqzH/olDRrGLrp0N
r9C4+TFi93nmApoq3Tj+JdLzAJraMNnVhXzDvlQvygHn80+6DaEOMdmXaQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H9tNsdA+wuxJJm7SHZK
oXuE3VruLH81CDfrY6yaX89v/j6zqFBA5CKEVdCkjJx9cF9sTIOfu2p0841wHRP8
U3f3oD3YFdiO+9X3qKncYiS/FqqzEMWNHpICIPR4Mf9W/gAd42E9bggVm9NM0Yqg
t8ja4cH2TJLWOINUkHz5xNE27cUsjIVjL/aSzlfPP2B4D9v+VycmAOHGH99i0VTU
LX6aUUQZYYpvLnKu2zXU75H9lHwhi7jpUTL1jHxThdN58ZE58Suo6h4Ha++ji5oV
4F+D8TYRzcG3ZaXv9YbJ+oNmW7m3blnzkK4/AeJvWYMRocz0a9sdijcmI+9nH6G7
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7045686847166242889686980656712147925
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-25 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.usantotomas.edu.co'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26825357059641916957962125468083031852153409189047039596202405797250019989350882757118703423737422104369233904187821401987202093731991092128982405066388976186432670486345452049683417288800691328002181881104852299813623181080524826543644652332694633549824001509505839603530651811902343468543950697147625189616975931305353284410422589398402592159652745852216050680088668639918204132652452291371961134064003453782158948125636813738677658692685774620008510560784658578982288049130952822471787996895803590770800540107084783610228708996369533113170674869643548899602884177756961027877544876319393280877407085330788174117823
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							764d76cecca4abf198931283fc0c3cf76b809972
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.usantotomas.edu.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'usantotomas.edu.co'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (478 bytes)
							01dc007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016156efb1de000004030046304402204972417ccc1ab202664ddeaed3c2e37e651aba227d6a2d10a201205e245236aa02201b7277251f3214935e572b1953a5a33f3379fe6d96c340df50cfdae88e8f35df0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016156efb2930000040300463044022100e4ad17a0e9d8df55e736faad5e5a3d6e0e7ee0108385220eb7af644142553d59021f65b7c2e28ad0c04459e131b39d500279aae31ebd89641ef7eb27c5e5f5f334007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016156efb2af000004030046304402202307c1813f69c6d8e1ef3a3fb4c4459aaef312735c55804cdace4df3556daf0002202467f8167fa962a6fe84f9d7d31446c6b00a747897391dbc33d505c26eafe3860075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016156efb4c900000403004630440220402e8099d89106301a241b7dae7b9937535becb7d2b441e8c0986e49446a51f202206669651430f3d4aa4ce5130de39757be47d76390ec0f842ba1152fc11591cc98
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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