lab.iaf.centurylink.com

- Lumen Technologies, Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0e:bf:a2:a3:08:c4:b2:28:e7:36:33:f8:8e:f8:31:29 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Lumen Technologies, Inc.

Organization: Lumen Technologies, Inc.
State / Province: Louisiana
Locality: Monroe
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0e:bf:a2:a3:08:c4:b2:28:e7:36:33:f8:8e:f8:31:29
Serial Number (int): 19604219308228926568377833472596128041
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 29:ce:8d:3f:86:5d:c8:8d:f3:55:6d:db:f4:8d:3c:2f:05:8a:bb:e1
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 8a:06:7b:11:98:4d:be:82:c6:e1:50:bf:82:8d:2e:b3:0b:6a:11:fd
Fingerprint (sha256): 00:72:0c:bc:59:38:d4:b9:b5:c9:ce:63:d5:3c:a1:ee:57:a1:29:a4:6f:d5:91:b1:01:b9:ec:1c:de:03:58:bf

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate lab.iaf.centurylink.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lab.iaf.centurylink.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lab.iaf.centurylink.com
zzeus.lab.af.qwest.net
corp-zzeus.lab.af.qwest.net

Other certificates including the domain name centurylink.com

(limited to 100 certificates)
ctlchangead.centurylink.com
ctlchangead.centurylink.com
*.cloud.centurylink.com
rvmweb.centurylink.com
ipsops-test1.centurylink.com
www.centurylink.com
lab.iaf.centurylink.com
mcoe.centurylink.com
www.centurylink.com
businessvoip.centurylink.com
qxgisp-itv1-basicauth.centurylink.com
gadHCDHHS.ccc.centurylink.com
rmc-itv1.centurylink.com
vbs.level3.com
tcat-test1.centurylink.com
alumni.centurylink.com
pypi.mss.centurylink.com
promotions.centurylink.com
webops.centurylink.com
ctlmft1.centurylink.com
salesforceWFtest.centurylink.com
ixg-notices-test.centurylink.com
mrit.centurylink.com
cole.centurylink.com
ucexe1dmz.centurylink.com
iot7-test1.centurylink.com
ctg-itv1.centurylink.com
communicator6.centurylink.com
nagios.mss.centurylink.com
clustere-p2.alpha.expressway.hcs.centurylink.com
sipp-odc.centurylink.com
pilot.mss.centurylink.com
imaxml-notices-test.centurylink.com
LIVE.AF.CENTURYLINK.COM
cora.centurylink.com
smetrics.centurylink.com
hcde-ppo-itv1.centurylink.com
sapmobile-test1.centurylink.com
kai04.centurylink.com
gadSCOUPD.ccc.centurylink.com
splunk-test-ext.centurylink.com
sv.citedisplay.com
akamaisecure2.qualtrics.com
ebcontent.centurylink.com
sngaccesspool1.centurylink.com
news.centurylink.com
ctg-itv1.centurylink.com
gadCHUBB1.ccc.centurylink.com
ctlchangead.centurylink.com
qxgbc3-dmz.centurylink.com
dn1mtbaccess.centurylink.com
wfm.govccc.centurylink.com
controlnetworx.centurylink.com
ue1psbc02.govccc.centurylink.com
bgksbc.centurylink.com
ERM.Centurylink.com
clustere-p2.mhp.expressway.hcs.centurylink.com
ctlverify-test.centurylink.com
LIVE.IAF.CENTURYLINK.COM
LIVE.AF.CENTURYLINK.COM
de.controlcenter.centurylink.com
www.cert2.centurylink.com
tcat7-test1.centurylink.com
secure4s.scene7.com
qhome-test1.centurylink.com
psba.centurylink.com
gadSOFSUN.ccc.centurylink.com
ecd.lumen.com
bidmaster.centurylink.com
dn1mtbaccess.centurylink.com
tcat-preprod.centurylink.com
cag-ddc.ctlaccess.centurylink.com
eam.centurylink.com
wfmILSLLC.ccc.centurylink.com
promotions.centurylink.com
sipp-odc.centurylink.com
gadIOWAHT.ccc.centurylink.com
sipp-ddc.centurylink.com
jaadu-itv1.centurylink.com
get.centurylink.com
careeropportunities.centurylink.com
controlfederal-itv1.centurylink.com
ocsrp2.centurylink.com
ebus-test.centurylink.com
logs.mss.centurylink.com
ddcaccesspool.centurylink.com
ready.centurylink.com
vdi.centurylink.com
qgsisupplierportal.centurylink.com
selfservice.centurylink.com
controlcenter-e2e.centurylink.com
voiceconfig.centurylink.com
kai01.centurylink.com
hcmadminapi.govccc.centurylink.com
cid-adn.ccc.centurylink.com
qxgbc3-itv1-dmz.centurylink.com
sip.ctltest.centurylink.com
sapmobile-test1.centurylink.com
partnerlinkemea.centurylink.com
w3lweb-itv1-dmz.centurylink.com

Certificate

The complete raw certificate details for lab.iaf.centurylink.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19604219308228926568377833472596128041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-02-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Monroe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lumen Technologies, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lab.iaf.centurylink.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 739728854857998704170703775398747399525948488867716009557615016407753508566079049767194815384827768599818618587999968151163784955928167433132152418705842909800302466792593776228443759218693524366963874051214201383725214815774453306598687399109128583716133945232237065441451166199014522121444792241662732461930983082425363123503610255465581704250573275978974858193531364919166110367532353886510940787119637462743825541807140927010389905877596660654102696188810164215653932340801244797362694772656617050730457185294313549211495579847582326189003609743609848702421040528022336436208700367221875884220323641119233523754084206402666793264777351801199116700125777220576329221168402039804950350642022297441652318762122978957443792468719822975507471421107280250529199827058105348540896700129902909632965932989422617378192349394251850296321512189942473280809722313374499878918002497374921333768782550338834033915902016985600882456913926894083404852127638584767319486685912540268627104539198652478756470693320235611487768867107898403255393005332811377274313766951407905573957838509523507401593420009033817442237058146386835326620146836328683945993991537468541214074031432952086262865439143178541282427765575264381387450016528731191427897433149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							29ce8d3f865dc88df3556ddbf48d3c2f058abbe1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lab.iaf.centurylink.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'zzeus.lab.af.qwest.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'corp-zzeus.lab.af.qwest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018d56bf9dae0000040300483046022100d334c6155c96bdc6aa2b831038462fd72c1c8bd44ef0fdef97292327c078ae5b022100b304fa374e0d36aaef294cc31e39151efe4200ff715c3a58a6d8d91768f2dfe70075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018d56bf9db30000040300463044022052f19de28946bcfa601336af1380cc5225a0b1ab9d7b120184912191e2e1547d02204addd98dba1ddc6aa31552df3b3585fc108f2eb187b47f9b1b082934670f57b8007500e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018d56bf9dd9000004030046304402203165c56cd88b04426b0e926cdf0e3c0d4ff45701bc5f2e6fc03097475720ada1022072043d402faeca6567e8df49f4bade4a000d24d5aa70ae048acdd1bd3f4fd5b0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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