acmsportal.infra.teams.microsoftonline.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 01:f9:c3:81:b8:b7:20:01:c8:87:bc:e4:b4:f8:72:7e was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:f9:c3:81:b8:b7:20:01:c8:87:bc:e4:b4:f8:72:7e
Serial Number (int): 2626075261032390748981011234030121598
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 24:1b:61:80:7b:47:00:e3:8e:b3:39:56:0b:5a:bb:5e:3e:7f:83:3b
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): d2:48:1f:28:a6:f0:ef:ff:74:41:f2:2d:bd:cd:2b:ff:a1:dd:56:af
Fingerprint (sha256): 00:69:62:47:16:ae:de:75:8f:2b:f7:60:d1:0a:65:10:58:8c:af:cf:ba:90:70:80:84:b0:e0:c1:23:39:fc:a8

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate acmsportal.infra.teams.microsoftonline.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acmsportal.infra.teams.microsoftonline.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acmsportal.infra.teams.microsoftonline.cn

Other certificates including the domain name microsoftonline.cn

(limited to 100 certificates)
IntuneDeviceUnlockAADSP.manage-ppe.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn

Certificate

The complete raw certificate details for acmsportal.infra.teams.microsoftonline.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1VHTv7wxHCWCXG8+OUwc
kiS82VA35CKkMeqy8ogE0y1f9FV6+BiJNGinC2jMInnAw0q+tlnb4iRPrRDVACR9
w8MygtQhuXlEaYG8v6p/OPwG2mstd44+H9XicR2hSx5JpHpgoLJMUqx3CbRFdBJi
Xej24SbcqfQrRkAjKEZZ10CDfgzGu+NHsOH67rbJLjGCw5llJzavEm/ZyJQNryNe
b/RjseyQ7pqnywj1UDqY5sfq+NwxnaQ4Wvhr9pjmg3Rv3CgFxW2Xndli1W1XQ+Sr
A9SfYru/iOUA5RCuSv+3DZysvD3srALrpEJPJM9eZNKSkMYpDI2cvhBRKlT+gaI5
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2626075261032390748981011234030121598
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acmsportal.infra.teams.microsoftonline.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26929109426554631249996691717835418137724104921750214765536429813468839391403492208850874395334489563999046177955145073319828334457940244470928340718131341855168848707452133837139187425105616358224937175509717182516933718998847844506696798547362348486007855991593104909727428174357084078058556656260482887964260974744424432078032171236991170146996814992929877405985263944290147261530203480104146984530141208407318279236739064269829944806493393802697123468433410237341372298002361433559885885166658048952467371610433537787291374785483260397219007362807296612453850506319308760279487699903098062883070929781101410007393
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							241b61807b4700e38eb339560b5abb5e3e7f833b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acmsportal.infra.teams.microsoftonline.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b27e2c83900000403004730450220766aa82dc88d2578d6addd09d8e42f6daa2a71d8f6699b68295fcc5e486729c90221009dddc38a2376ebf09fe680d0691a136b7b4e033278ed007f1adf347da2fc1f4a00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b27e2c860000004030047304502202c34d02847d37533f27b67da3e21410cba4a386e9ba9b3ff21a1837fae604b85022100a10e2d706e0c668e6722f3c3c7cfd7b98674ae4600946245fab8c0800016ee4e007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b27e2c84f0000040300473045022100c1ddabe8474bea80742087ab960b4e05e3523865c9cdb1c804327c366d5491b102205be38508c90e6aa00f81d5f93090dea5767b9071a67d034f292adbea3fa7b4fa
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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