*.lexus.com.sg

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 09:3a:af:b2:45:66:62:4d:71:07:f8:0c:8b:ec:6e:ab was issued on by DigiCert, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.lexus.com.sg

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 09:3a:af:b2:45:66:62:4d:71:07:f8:0c:8b:ec:6e:ab
Serial Number (int): 12267768725631069771698182752006074027
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 60:22:30:1e:10:81:e3:84:47:a7:3d:ea:f3:d6:a4:26:ac:8c:2c:7a
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 32:92:b6:0b:aa:77:46:05:11:6e:6b:22:cc:c0:fa:4b:56:57:84:fb
Fingerprint (sha256): ee:47:8f:2a:78:89:62:62:34:99:7f:00:98:b4:aa:02:24:01:16:ff:a0:94:66:01:93:4b:f2:ec:bb:9c:0a:85

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate *.lexus.com.sg

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.lexus.com.sg

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.lexus.com.sg
lexus.com.sg

Other certificates including the domain name lexus.com.sg

(limited to 100 certificates)
www.lexus.com.sg
forms.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
sni.cloudflaressl.com
www.lexus.com.sg
auction.lexus.com.sg
www.lexus.com.sg
*.lexus.com.sg
auction.lexus.com.sg
auction.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
*.lexus.com.sg
www.lexus.com.sg

Certificate

The complete raw certificate details for *.lexus.com.sg in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHljCCBX6gAwIBAgIQCTqvskVmYk1xB/gMi+xuqzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwNzIxMDAwMDAwWhcNMjQwODIwMjM1OTU5WjAZMRcwFQYDVQQDDA4qLmxleHVz
LmNvbS5zZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANz3kX9KTqYu
ElQDhYyLzOcq43OaxNmq+mxOgXz4XxLDuDWYk76X/MxxOjJMBzu7JPIe6cek1am8
ZA6olBX+NmiJL5lVbVZVuw4B+aUQ1wjL1FYsW6LZz6HVWcjHO3E895LivdcbVCsB
DfvF4WD325UN0S9B1SP9WGiaRpb/m0t6KScsgEqiET7yRgv7CYXEDpAPmjFyR0hL
s82g+l+yvBqJD2bd6IdZMK+BYchuzH7UaCudkLWt6i/jiNiqTHEJhSXc6EHM4Y6X
Xu9J4FCo8NMsABusNoyUuuVIAJNo6RJvwryln9ByJX8dzVqWpr2VUUl3zjQU5qYy
UFzdStsVIzECAwEAAaOCA5UwggORMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsB
KiAEuGYjMB0GA1UdDgQWBBRgIjAeEIHjhEenPerz1qQmrIwsejAnBgNVHREEIDAe
gg4qLmxleHVzLmNvbS5zZ4IMbGV4dXMuY29tLnNnMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwgZ8GA1UdHwSBlzCBlDBIoEag
RIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNB
NDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8vY3JsNC5kaWdpY2Vy
dC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNBMS5jcmww
PgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5k
aWdpY2VydC5jb20vQ1BTMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0
dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2Vy
dHMuZGlnaWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIw
MjJDQTEuY3J0MAkGA1UdEwQCMAAwggF+BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB3
AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABiXX51YsAAAQDAEgw
RgIhAIbvBW3DW8PFGht6dylcdEdwJItLYmYamiKUwaCKypi8AiEArhWr2luRu3X4
96MEDBaqHWvPRBCjz9KGoh3NhMNnHJwAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bd
LIHZu7+rOdiEcwAAAYl1+dXMAAAEAwBHMEUCIQDNiA44qc8VfAAm83woMj99o5EZ
Rq/lIdV+3C9B9DryFgIgaAEBLxLHGKT8MGSErwLD4DCBh7B6b+qmZoXo1QIHD/AA
dQDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYl1+dWiAAAEAwBG
MEQCIC9odeesdOmUQz8L4Ub4m8U+yA8ly1+qseJUzlItXwbdAiBnvo4VQK7Npt7f
QuZDIynSa5Zr8C1dpGmI9QxfY7w+2jANBgkqhkiG9w0BAQsFAAOCAgEAWgOt7a5y
Kwhj2uFhEBvNStkZctenfoFwnvwwDkuQ+2O1M8prLNj01mMAZe+iahglAL0oI3OI
oEd3syrsfecNE0I749jR2J8lQp7sm1fMZ6Tyeixsf0Pb0JkbgVa44U9tm9pRyE2y
e8KggEHpu1MpbQVWHO7cRqQdAP38LA6Lr/TRQ8z+0/0iCtB5d/kSy5lMJZCCJQCy
9c5A2jveEJz1uFKV0WKMa243ZeS9pNRmfbXcwDl8BfyHkwWIAFt0KrAoSO1XYiGz
FDttEVwg9zoc3U64p6FzqYFL+UJSbJMScwvS6Wci5VPet3H/pNm6+Dr6yO4uT1dd
ofiLl+nbZIJ8KQ5gnAFCvRi3JVMc00BAmuJ4OPaK7B/nL+/0QOUPyah7PwA3Rw0P
ApMOsRriD7/xP6k5Jdf8YXq22enHUkRoRWI1tcbDmJc+US7NGt6kzJ6rNnwIEife
saVMfzDb3w1b9wA+QrtR5wCCWVi8gYBL2t26G0TWihc1dqgui6IaStOMM0MUP+b4
F3+SFvfDV6XiqDYZ0h8MNcCSOZVjflW2WB76LClczxe6qp7Xh6AVEGKzSonvfa9R
h8UmNHM7zausysqXc4b2zSNd8qsJ0ugx+VyiIXhxATL/D7UQ7Uu/fw+TCRYvSx8w
SL+QrdzRj4ZbIIGp01Xs8Y9QDctf6GR3JCA=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PeRf0pOpi4SVAOFjIvM
5yrjc5rE2ar6bE6BfPhfEsO4NZiTvpf8zHE6MkwHO7sk8h7px6TVqbxkDqiUFf42
aIkvmVVtVlW7DgH5pRDXCMvUVixbotnPodVZyMc7cTz3kuK91xtUKwEN+8XhYPfb
lQ3RL0HVI/1YaJpGlv+bS3opJyyASqIRPvJGC/sJhcQOkA+aMXJHSEuzzaD6X7K8
GokPZt3oh1kwr4FhyG7MftRoK52Qta3qL+OI2KpMcQmFJdzoQczhjpde70ngUKjw
0ywAG6w2jJS65UgAk2jpEm/CvKWf0HIlfx3NWpamvZVRSXfONBTmpjJQXN1K2xUj
MQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12267768725631069771698182752006074027
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.lexus.com.sg'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27894507595203212751050012597592824054035481562670983174048047872036281677467595995058488317765550444965285231830658423718870798387352750058513481468516279781076080271301473060749094398109287124492245886579167043162307617649762839881065733829036283828308138979872993920608985613621884442009469942869502906000360686875486370171635475459907403981360000257611598135771542489875873163580161735352752755923825261868522177288906764732263991504827736121097312992856212268418986781158220689861314708056329220939022400627529522533072341093831160964250454862973305279256261206170003195092120439363796980074234574697157319009073
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6022301e1081e38447a73deaf3d6a426ac8c2c7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lexus.com.sg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexus.com.sg'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018975f9d58b000004030048304602210086ef056dc35bc3c51a1b7a77295c744770248b4b62661a9a2294c1a08aca98bc022100ae15abda5b91bb75f8f7a3040c16aa1d6bcf4410a3cfd286a21dcd84c3671c9c00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018975f9d5cc0000040300473045022100cd880e38a9cf157c0026f37c28323f7da3911946afe521d57edc2f41f43af21602206801012f12c718a4fc306484af02c3e0308187b07a6feaa66685e8d502070ff0007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018975f9d5a2000004030046304402202f6875e7ac74e994433f0be146f89bc53ec80f25cb5faab1e254ce522d5f06dd022067be8e1540aecda6dedf42e6432329d26b966bf02d5da46988f50c5f63bc3eda
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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