collctiv.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number e3:7f:17:24:43:0b:db:fe:11:d5:83:f4:31:0c:f3:38 was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=collctiv.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): e3:7f:17:24:43:0b:db:fe:11:d5:83:f4:31:0c:f3:38Serial Number (int): 302394646112594393486987181925323305784
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 4b:89:bf:9c:70:9d:4f:8f:4c:4a:54:c3:ed:6b:f1:73:f1:fe:6d:96
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 37:80:1a:d3:29:e5:dc:d5:95:1c:d0:fd:4a:08:6d:a1:89:a5:b7:b0
Fingerprint (sha256): f6:5d:9b:b5:e6:44:8b:ab:cd:8d:f6:e6:68:09:56:cc:32:bd:6c:11:92:d9:23:3d:89:e8:5f:ad:ce:ce:61:87
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/OWj6VUchhdICRL Distribution Point: http://crls.pki.goog/gts1p5/9kUILVJnPiU.crl
Check the revocation status for certificate collctiv.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for collctiv.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
collctiv.com
*.collctiv.com
*.collctiv.com
Other certificates including the domain name collctiv.com
(limited to 100 certificates)
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
ik.imagekit.io
ik.imagekit.io
analytics.actionableagile.com
ik.imagekit.io
collctiv.com
ik.imagekit.io
ik.imagekit.io
cdn.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
sni.cloudflaressl.com
collctiv.com
ik.imagekit.io
www.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
www.collctiv.com
blog.yukarium.net
adserve.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
ik.imagekit.io
www.collctiv.com
ik.imagekit.io
collctiv.com
collctiv.com
collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
sni.cloudflaressl.com
collctiv.com
ik.imagekit.io
ik.imagekit.io
collctiv.com
player.soundon.fm
bi.services.collctiv.com
collctiv.com
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
www.demex.xyz
ik.imagekit.io
3pmedia.leroymerlin.co.za
collctiv.com
www.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
www.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
ik.imagekit.io
ik.imagekit.io
analytics.actionableagile.com
ik.imagekit.io
collctiv.com
ik.imagekit.io
ik.imagekit.io
cdn.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
sni.cloudflaressl.com
collctiv.com
ik.imagekit.io
www.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
www.collctiv.com
blog.yukarium.net
adserve.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
ik.imagekit.io
www.collctiv.com
ik.imagekit.io
collctiv.com
collctiv.com
collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
sni.cloudflaressl.com
collctiv.com
ik.imagekit.io
ik.imagekit.io
collctiv.com
player.soundon.fm
bi.services.collctiv.com
collctiv.com
ik.imagekit.io
3pmedia.leroymerlin.co.za
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
www.demex.xyz
ik.imagekit.io
3pmedia.leroymerlin.co.za
collctiv.com
www.collctiv.com
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
ik.imagekit.io
collctiv.com
www.collctiv.com
Certificate
The complete raw certificate details for collctiv.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIRAON/FyRDC9v+EdWD9DEM8zgwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMDA2MTk0NjM2WhcNMjQwMTA0 MTk0NjM1WjAXMRUwEwYDVQQDEwxjb2xsY3Rpdi5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCie/Kq3/Ntby0N7rNqbdzGwR9+AK7PMXjfZfr3hB2l fQ35usouy+EhO1hPLxpoZ2b6+gIfzVRv0HUQCzTvEHibWfY9m9Fwsi2JNKu36XVY aY2O4RPCFAXBLs8cPVgCASsSL4m2CS5OWjbdqtSn7ap7cQp+kCjrjEu3J4T9aIOQ XAzFfR51aoiL6HTlCp/b8MpyQqG+ln0hudD+SqG72BtPbmDVF19nY17htnQmR8nS CQ7YcwntAyacEcWRK2LoABP7u66uy0OMOxDRM04DhIrMqNkuQ5IJf3ar1YhFpaIL cSqLIBLmSN2HUDNc4nfF8iFaMFhEwltQj0jp+qu+eKkDAgMBAAGjggKEMIICgDAO BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUS4m/nHCdT49MSlTD7Wvxc/H+bZYwHwYDVR0jBBgwFoAU1fye Dd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9PV2o2VlVjaGhkSTAxBggrBgEF BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAnBgNV HREEIDAeggxjb2xsY3Rpdi5jb22CDiouY29sbGN0aXYuY29tMCEGA1UdIAQaMBgw CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov L2NybHMucGtpLmdvb2cvZ3RzMXA1LzlrVUlMVkpuUGlVLmNybDCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRz AAABiwa9/zsAAAQDAEcwRQIgKTfnM4PgIeKUlGuIa3qd4Ie9js0N7VudtXHz3Yoi j0QCIQDNaprNWV8WV/98jl6MDJXZ+5Qn3ilT2tOUZpVWSn1qOgB3AHb/iD8KtvuV UcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABiwa9/0YAAAQDAEgwRgIhAOCKi6qk 7J8DdYihaLmVEwN5/q069UD62RQ2E3FnJZCtAiEAsj2HEzqbcL2Duk+wVnUkJO2w NbvPTBv5ds2PRQGUq8MwDQYJKoZIhvcNAQELBQADggEBAEScSO46sp83ENxFg6tx hS7r58p7gOkuhy8igDAN42Ue2cTfMtZOzrI+7cuoN7vSrxsyekJOlHzb8ouNNTSp NI+hsmRiLARyerS1RuK3QGx7vwujm9pO0o+7OM0WD3wi6zf90RvFq364CSz0tDQF nMP+ctNBR3eu+1NzV3gXMxf9769mhtn3119dABz/EK3pCOiXPqqcWlR+SR/mKHBT HgLJJw6i2Le5sXoyDfODrk8cIPIhZ0E6xZXrxFjSWCGO2fHunmSsLNobkFBwGxd/ dlxTOu6vmofUqdUPuwO3/OUeJ+UNui83KlW1k3RwW3ts0YhD44P7bN7SiuzVbwSi 2jU= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAonvyqt/zbW8tDe6zam3c xsEffgCuzzF432X694QdpX0N+brKLsvhITtYTy8aaGdm+voCH81Ub9B1EAs07xB4 m1n2PZvRcLItiTSrt+l1WGmNjuETwhQFwS7PHD1YAgErEi+JtgkuTlo23arUp+2q e3EKfpAo64xLtyeE/WiDkFwMxX0edWqIi+h05Qqf2/DKckKhvpZ9IbnQ/kqhu9gb T25g1RdfZ2Ne4bZ0JkfJ0gkO2HMJ7QMmnBHFkSti6AAT+7uurstDjDsQ0TNOA4SK zKjZLkOSCX92q9WIRaWiC3EqiyAS5kjdh1AzXOJ3xfIhWjBYRMJbUI9I6fqrvnip AwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 302394646112594393486987181925323305784 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-06 19:46:36 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-04 19:46:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'collctiv.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20511726401786674610248052170203726104089208114734946933127959600698952039460192965799879799011712231338723166954640433341294198096233264558872678844403011523130381628776064409015644165980030565440181266832634551397033467653756032259046171141423089060247231576027764391660818630549218046700038804394278954355559369101952876383000098042180857846539468713331560376909789149156221361335215819109469040096349543399475050849568585908277670141378069291746121945248329832038637295161436168188107355098750693097094170375170726477471379810769786384349771435976772164430931741428282592021590540503033646411465004163242141460739 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4b89bf9c709d4f8f4c4a54c3ed6bf173f1fe6d96 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/OWj6VUchhdI' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collctiv.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.collctiv.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/9kUILVJnPiU.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f100760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b06bdff3b000004030047304502202937e73383e021e294946b886b7a9de087bd8ecd0ded5b9db571f3dd8a228f44022100cd6a9acd595f1657ff7c8e5e8c0c95d9fb9427de2953dad3946695564a7d6a3a00770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b06bdff460000040300483046022100e08a8baaa4ec9f037588a168b995130379fead3af540fad914361371672590ad022100b23d87133a9b70bd83ba4fb056752424edb035bbcf4c1bf976cd8f450194abc3 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00449c48ee3ab29f3710dc4583ab71852eebe7ca7b80e92e872f2280300de3651ed9c4df32d64eceb23eedcba837bbd2af1b327a424e947cdbf28b8d3534a9348fa1b264622c04727ab4b546e2b7406c7bbf0ba39bda4ed28fbb38cd160f7c22eb37fdd11bc5ab7eb8092cf4b434059cc3fe72d3414777aefb53735778173317fdefaf6686d9f7d75f5d001cff10ade908e8973eaa9c5a547e491fe62870531e02c9270ea2d8b7b9b17a320df383ae4f1c20f22167413ac595ebc458d258218ed9f1ee9e64ac2cda1b9050701b177f765c533aeeaf9a87d4a9d50fbb03b7fce51e27e50dba2f372a55b59374705b7b6cd18843e383fb6cded28aecd56f04a2da35