wstore.uwaterloo.ca

- University of Waterloo -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 5f:e6:c2:18:56:cd:f5:f6:4b:4a:04:65 was issued on by GlobalSign nv-sa.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Waterloo

Organization: University of Waterloo
State / Province: Ontario
Locality: Waterloo
Country: CA

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 5f:e6:c2:18:56:cd:f5:f6:4b:4a:04:65
Serial Number (int): 29680045459613606614898705509
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 5d:1f:d6:ee:50:32:4c:ab:3c:a1:eb:39:e0:52:55:d0:0f:d4:2f:07
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 98:f2:96:4a:b4:cc:b8:bc:50:7c:95:42:a6:bb:0a:9e:f7:51:47:83
Fingerprint (sha256): 00:58:5a:9a:de:9e:e4:fc:cf:80:a1:a5:a4:a9:90:0e:1b:dd:f6:d2:8e:a1:ac:0b:1a:c8:2f:e9:7d:37:d7:8d

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate wstore.uwaterloo.ca

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for wstore.uwaterloo.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

wstore.uwaterloo.ca
wstore.ca
w-store.ca
wprint.ca
wstore-munin.uwaterloo.ca
mad-wstore.uwaterloo.ca
sdc-wstore.uwaterloo.ca
payment-wstore.uwaterloo.ca
eco-wstore.uwaterloo.ca

Other certificates including the domain name uwaterloo.ca

(limited to 100 certificates)
cn-ipam-mc.uwaterloo.ca
rshiny.math.uwaterloo.ca
bolek.uwaterloo.ca
cemc2.math.uwaterloo.ca
icinga.cscf.uwaterloo.ca
cryptoworks21.uwaterloo.ca
bonavista.uwaterloo.ca
git.iqc.uwaterloo.ca
env-emp-vlnx1.uwaterloo.ca
wstore.uwaterloo.ca
epark1.uwaterloo.ca
databace.scisat.ca
www.cs.uwaterloo.ca
ppcentre.uwaterloo.ca
s4b-ec2-fe-ext.uwaterloo.ca
sneaky.uwaterloo.ca
wiki.uwaterloo.ca
ibis.uwaterloo.ca
account.watcard.uwaterloo.ca
cte-blog.uwaterloo.ca
subjectguides.uwaterloo.ca
aurora.uwaterloo.ca
uwhvz.uwaterloo.ca
o365activation.uwaterloo.ca
www.igloosoftware.com
cemc2.math.uwaterloo.ca
cclr.uwaterloo.ca
quark.uwaterloo.ca
shop.uwaterloo.ca
mailservices.uwaterloo.ca
canadianfoodstudies.uwaterloo.ca
koios.cs.uwaterloo.ca
www.igloosoftware.com
multicom-pc20.uwaterloo.ca
env-gisdev.uwaterloo.ca
learntest.uwaterloo.ca
blockchain-group.cs.uwaterloo.ca
evaluate.uwaterloo.ca
info.uwaterloo.ca
lineone.uwaterloo.ca
webreg.uwaterloo.ca
nagios.cscf.uwaterloo.ca
aurora.uwaterloo.ca
epark.uwaterloo.ca
cn-vpn.uwaterloo.ca
ahs-jitsi.uwaterloo.ca
rcs.uwaterloo.ca
wchound.uwaterloo.ca
sasfilemaker.math.uwaterloo.ca
mmm.eng.uwaterloo.ca
essex.uwaterloo.ca
contensis.uwaterloo.ca
www.civil.uwaterloo.ca
cclr.uwaterloo.ca
lineone.uwaterloo.ca
chesp.uwaterloo.ca
learndev3.uwaterloo.ca
ugtwo.uwaterloo.ca
smbp.uwaterloo.ca
library.uwaterloo.ca
2fa.uwaterloo.ca
secure.ce.uwaterloo.ca
cn-vpn.uwaterloo.ca
shop.uwaterloo.ca
styx-reserve.shoshin.uwaterloo.ca
iis1.nexus.uwaterloo.ca
iisweb2.nexus.uwaterloo.ca
uwhvz.uwaterloo.ca
www.eng.uwaterloo.ca
shop.uwaterloo.ca
cewil.uwaterloo.ca
lss.uwaterloo.ca
rt.uwaterloo.ca
ne111.uwaterloo.ca
sslvs06.igloosoftware.com
uqml.iqc.uwaterloo.ca
env-kix-tours.uwaterloo.ca
learndevdav.uwaterloo.ca
qoqiwiki.iqc.uwaterloo.ca
learn.uwaterloo.ca
wcms-training.uwaterloo.ca
mansci045.uwaterloo.ca
ctf.uwaterloo.ca
sesoc.uwaterloo.ca
courseware.cemc.uwaterloo.ca
healthy.uwaterloo.ca
ivc.uwaterloo.ca
mansci045.uwaterloo.ca
courses.math.uwaterloo.ca
artsonline.uwaterloo.ca
staff.retailservices.uwaterloo.ca
ist.uwaterloo.ca
himrod-reserve.cs.uwaterloo.ca
wiki.math.uwaterloo.ca
macduff.private.uwaterloo.ca
wcms-training.uwaterloo.ca
quest.pecs.uwaterloo.ca
libanswers.uwaterloo.ca
stargroup.uwaterloo.ca
mansci045e.uwaterloo.ca

Certificate

The complete raw certificate details for wstore.uwaterloo.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8Wtc5E4EpSy/JsfgLjC
gp9bXb97H571dZjc1HSuH/2A/xegUUCIohe04116vLrOzA2LuVpOYilLMZF/WL6V
LKo1kwY5a4mKoe68uxRszticObYPCKbbLEE0dnWnwhXjmSdeSydQUsfBZ87zlkaa
l5jCG7wLgxTg3/ZILz6/YIinQQHaZpUQmeUS+K6LsZdD+EIf6PsnYgUE2SyRD71+
8eWIH8ta5/JxQOObQirYomOHXuf/YXp6E/NGwBSTXCBdNuD4oRk4SZSb2jKULciu
eSwFEBYYuumSHt5hYjdZhFLyIPi5Azxlj3QPMvlD7CzoK2yQYhVsLwnaVNhqyNgB
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 29680045459613606614898705509
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-16 15:36:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-27 14:56:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Waterloo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wstore.uwaterloo.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23199088239134617145326378029578195135314684595737655950887725663890797841656992493701808063382006393755965162217644548203297803669871880592350982656016057083373957827358998187859998378236337990319565004235188130606444535084316472124778298563683518620932308691252812743656740287772582382022115140743575560420078061636892189395407911780268306853372139794820117887737654145836803961924755084140157321615174624894418381250347331959795820517100883840813264208661553018555906527161415361180106559314511761775019171434657335263541831581271269655698464145893754668856535924274719671505792723691421197788053171564052133445991
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (189 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstore.uwaterloo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstore.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-store.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wprint.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wstore-munin.uwaterloo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mad-wstore.uwaterloo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sdc-wstore.uwaterloo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payment-wstore.uwaterloo.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eco-wstore.uwaterloo.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5d1fd6ee50324cab3ca1eb39e05255d00fd42f07
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b00000188253463000000040300483046022100a738d5f770e7f1403e940da5ca198269f225f7a630818df9efb26bc8acd73fa2022100fe3d5692909b8fe681ab1b5fdc9b82be320bc745d824ef314d34ec227ca2af0300750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018825346014000004030046304402200bc733343c20875e0e9056683c5c721472afa2035adadca62f9f4a15ba9401f8022016b39c0f05d3561717d02dbb200af01407584ea8182a3d35de80165d635e9675007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab00000188253462ac0000040300483046022100b8e2ebfc2c6bd9fe0525d4e171cbae3cf6a831292425388aa1fe218f5384c174022100c8031b3dc0ff93d4170dc9ced54688f94c63c5e24e2b2efec359814afc3e5465
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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