*.gruppoacquistoibrido.it

Issued by Actalis Domain Validation Server CA G2

About this certificate

This digital certificate with serial number 4b:6d:2f:8c:72:12:90:74:b0:ac:c1:34:0d:a3:20:76 was issued on by Actalis S.p.A./03358520967.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.gruppoacquistoibrido.it,OU=Domain Control Validated by Actalis S.p.A.

Actalis S.p.A./03358520967

Organization: Actalis S.p.A./03358520967
State / Province: Bergamo
Locality: Ponte San Pietro
Country: IT

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:6d:2f:8c:72:12:90:74:b0:ac:c1:34:0d:a3:20:76
Serial Number (int): 100259024441946844262525551852843638902
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d8:a3:0c:d1:bf:d5:8c:fc:98:fa:65:4f:20:62:09:29:b3:b6:46:15
AuthorityKeyId: d5:40:08:f7:96:22:4e:19:b3:da:e5:61:93:ba:ba:b7:3e:eb:b9:cd

Fingerprint (sha1): 2d:12:3b:c4:07:18:8f:e0:31:45:8d:2e:56:9a:8b:96:4b:61:1c:53
Fingerprint (sha256): d6:b4:bc:bf:80:84:c4:81:b3:b6:a4:10:ec:1d:67:48:7b:48:d1:2f:41:25:20:a9:2b:d2:21:21:0e:49:26:5b

Issuing Certificate URL: http://cacert.actalis.it/certs/actalis-autdvg2

Revocation information

OCSP Server: http://ocsp06.actalis.it/VA/AUTHDV-G2
CRL Distribution Point: http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL

Check the revocation status for certificate *.gruppoacquistoibrido.it

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.gruppoacquistoibrido.it

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gruppoacquistoibrido.it
*.gruppoacquistoibrido.it

Other certificates including the domain name gruppoacquistoibrido.it

(limited to 100 certificates)
*.gruppoacquistoibrido.it
forms.tacotruck.ca
gruppoacquistoibrido.it
gruppoacquistoibrido.it
forms.fleissig.co.in
form.farsight24.com
gruppoacquistoibrido.it
*.gruppoacquistoibrido.it
*.gruppoacquistoibrido.it
*.gruppoacquistoibrido.it
*.gruppoacquistoibrido.it
forms.insurancespecialists.com.au
forms.fleissig.co.in
*.gruppoacquistoibrido.it
forms.irecruiter.ai
gruppoacquistoibrido.it
forms.fleissig.co.in
forms.gruppoacquistoibrido.it
gruppoacquistoibrido.it
forms.fleissig.co.in
*.gruppoacquistoibrido.it
apply.lenderping.com
forms.fleissig.co.in
forms.laureatesociety.org
forms.fleissig.co.in
*.gruppoacquistoibrido.it

Certificate

The complete raw certificate details for *.gruppoacquistoibrido.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIG0jCCBbqgAwIBAgIQS20vjHISkHSwrME0DaMgdjANBgkqhkiG9w0BAQsFADCB
kDELMAkGA1UEBhMCSVQxEDAOBgNVBAgMB0JlcmdhbW8xGTAXBgNVBAcMEFBvbnRl
IFNhbiBQaWV0cm8xIzAhBgNVBAoMGkFjdGFsaXMgUy5wLkEuLzAzMzU4NTIwOTY3
MS8wLQYDVQQDDCZBY3RhbGlzIERvbWFpbiBWYWxpZGF0aW9uIFNlcnZlciBDQSBH
MjAeFw0xOTA0MTMwNTM1NTBaFw0yMDA3MTMwNTM1NTBaMFkxMzAxBgNVBAsMKkRv
bWFpbiBDb250cm9sIFZhbGlkYXRlZCBieSBBY3RhbGlzIFMucC5BLjEiMCAGA1UE
AwwZKi5ncnVwcG9hY3F1aXN0b2licmlkby5pdDCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMHQXB20alQGu8Qz3pFF+GtrvCml+TdiyNQhv0g7j0DmgdPk
3RJiBHFwl4TaAhTeEEgJnX+1y0GbpPSAzZaoQZQwSxlp3MKA5zj4La9SRmHvhK/l
A1I2IBIUt2AbBtS7KRb0zwvrV4yKuG+9pVDO90Sl980p2ODsmhI4EbC5ugRztzAo
1R9u1rtxgGj3hYul5Oj0xUQLlbLSd5gr8KQlxgJTp/2LrImxaTRBB3MDfVp2FeaP
sDjPO2kg311wycDm6/PMr2EQOiFRFwxsbom8amyAn3WK8GFGWpaBtr5p/Vsz41ql
IoN1ObGfYb6AH99RSwNChAi4y2BU9BwEQIOfYh8CAwEAAaOCA1wwggNYMAwGA1Ud
EwEB/wQCMAAwHwYDVR0jBBgwFoAU1UAI95YiThmz2uVhk7q6tz7ruc0wfQYIKwYB
BQUHAQEEcTBvMDoGCCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0LmFjdGFsaXMuaXQv
Y2VydHMvYWN0YWxpcy1hdXRkdmcyMDEGCCsGAQUFBzABhiVodHRwOi8vb2NzcDA2
LmFjdGFsaXMuaXQvVkEvQVVUSERWLUcyMD0GA1UdEQQ2MDSCF2dydXBwb2FjcXVp
c3RvaWJyaWRvLml0ghkqLmdydXBwb2FjcXVpc3RvaWJyaWRvLml0MFEGA1UdIARK
MEgwPAYGK4EfARcBMDIwMAYIKwYBBQUHAgEWJGh0dHBzOi8vd3d3LmFjdGFsaXMu
aXQvYXJlYS1kb3dubG9hZDAIBgZngQwBAgEwHQYDVR0lBBYwFAYIKwYBBQUHAwIG
CCsGAQUFBwMBMEgGA1UdHwRBMD8wPaA7oDmGN2h0dHA6Ly9jcmwwNi5hY3RhbGlz
Lml0L1JlcG9zaXRvcnkvQVVUSERWLUcyL2dldExhc3RDUkwwHQYDVR0OBBYEFNij
DNG/1Yz8mPplTyBiCSmztkYVMA4GA1UdDwEB/wQEAwIFoDCCAXwGCisGAQQB1nkC
BAIEggFsBIIBaAFmAHYAxlKg7EjOs/yrFwmSxDqHQTMJ6ABlomJSQBujNioXxWUA
AAFqFTsGzwAABAMARzBFAiAOKdu9+sc/KOjTE5Kq0BGoEyZlDR3S+vhUUqjuQtsP
WQIhANETt7ORBk4ZaZ0jsI38YdJX5CpjoAbF/Qe7FTZiwuR0AHUA8JWkWfIA0YJA
EC0vk4iOrUv+HUfjmeHQNKawqKqOsnMAAAFqFTsG6wAABAMARjBEAiAvC/oC1vnA
L5aQ89Uh7I+Rd7xy4im2x+NDnhwJX88EpgIgQE8tzTQSylGAWXpjJjg5f8a7WYHo
QCd6RPRX/lC2+ocAdQC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAA
AWoVOwagAAAEAwBGMEQCIHkzclgc/NBstihBJGD0l5orzqiHJmZ/MY6AHH6GDGxc
AiBb8/5tXqlcdHNgBf3+gwNDI7WciGa4o07R4k+5KQApLjANBgkqhkiG9w0BAQsF
AAOCAQEApceSJl9RtSdo1xqAnVfQyhQF4L7TQpQ58XmporCia9wtCIZhaijj/itq
1msaCnVkdQ+oLB67Gp/vNqnvEynSVnIRzVCMjT92zJ3mYTAVWHqtf8+8mDY7qCNk
CyuU7Qm/OVF8IgzxWn28kJVhw9Lur8iVTSBECjLxMvGh5drlGfwkVfjHYrzdJ2VF
cjMp6ELv4+Ho8A4+3gbtTonfV7CYyM2k8g3FZcfEWZ+Hu5ZWvej7yPFtCTfldfnd
PBhX4bSS9HjgI099183SNTdyCtODaoOBpHSzzUydGYkhFDtWDYsmhSulmcK+UUct
dEbL06gftd6Ozid2zPFUgkt+pKOb8w==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdBcHbRqVAa7xDPekUX4
a2u8KaX5N2LI1CG/SDuPQOaB0+TdEmIEcXCXhNoCFN4QSAmdf7XLQZuk9IDNlqhB
lDBLGWncwoDnOPgtr1JGYe+Er+UDUjYgEhS3YBsG1LspFvTPC+tXjIq4b72lUM73
RKX3zSnY4OyaEjgRsLm6BHO3MCjVH27Wu3GAaPeFi6Xk6PTFRAuVstJ3mCvwpCXG
AlOn/YusibFpNEEHcwN9WnYV5o+wOM87aSDfXXDJwObr88yvYRA6IVEXDGxuibxq
bICfdYrwYUZaloG2vmn9WzPjWqUig3U5sZ9hvoAf31FLA0KECLjLYFT0HARAg59i
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 100259024441946844262525551852843638902
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bergamo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ponte San Pietro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis S.p.A./03358520967'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Actalis Domain Validation Server CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-13 05:35:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 05:35:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Domain Control Validated by Actalis S.p.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.gruppoacquistoibrido.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24466738919161693040753470275575019921907615200342993552274199181551911086769904970644496900504922350079342479069367388748114076443843383321123739071056846127815630733882927490458928351827606228859318130552527187658978252304968915278482435997126817348050750939808921153113932441254624889628944129051907844690475215515269902116439107304059396078320756282473304140842499037556761630860565814585360945007429317541874590041855456913192853559289176501894239351581911020885236053066011963718095619727509688059976378513735876038179096441416944123179353864125438650650599300545950237199726633190750449274863997027430483059231
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d54008f796224e19b3dae56193babab73eebb9cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (113 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacert.actalis.it/certs/actalis-autdvg2'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp06.actalis.it/VA/AUTHDV-G2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gruppoacquistoibrido.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gruppoacquistoibrido.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.159.1.23.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.actalis.it/area-download'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (65 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl06.actalis.it/Repository/AUTHDV-G2/getLastCRL'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d8a30cd1bfd58cfc98fa654f20620929b3b64615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007600c652a0ec48ceb3fcab170992c43a87413309e80065a26252401ba3362a17c5650000016a153b06cf000004030047304502200e29dbbdfac73f28e8d31392aad011a81326650d1dd2faf85452a8ee42db0f59022100d113b7b391064e19699d23b08dfc61d257e42a63a006c5fd07bb153662c2e474007500f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb2730000016a153b06eb000004030046304402202f0bfa02d6f9c02f9690f3d521ec8f9177bc72e229b6c7e3439e1c095fcf04a60220404f2dcd3412ca5180597a632638397fc6bb5981e840277a44f457fe50b6fa87007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a153b06a000000403004630440220793372581cfcd06cb628412460f4979a2bcea88726667f318e801c7e860c6c5c02205bf3fe6d5ea95c74736005fdfe83034323b59c8866b8a34ed1e24fb92900292e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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