acms.infra.teams.microsoftonline.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 06:c2:b5:b8:a1:fb:13:69:fc:fe:a2:d9:b2:90:83:f1 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:c2:b5:b8:a1:fb:13:69:fc:fe:a2:d9:b2:90:83:f1
Serial Number (int): 8986359309516034016403927961953141745
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 37:79:40:ad:8d:dd:d4:d7:67:02:c5:f2:6f:3b:c3:68:94:54:9c:d5
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): 37:3d:6d:63:a6:41:6e:a3:1c:d4:21:61:eb:01:5c:26:f6:de:90:30
Fingerprint (sha256): 00:ea:91:26:23:62:ac:ec:0e:7d:d9:9d:53:49:8a:0b:45:67:46:a3:a6:a5:1a:1b:ce:db:84:ae:f1:fe:31:cd

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate acms.infra.teams.microsoftonline.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acms.infra.teams.microsoftonline.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acms.infra.teams.microsoftonline.cn
*.acms.infra.teams.microsoftonline.cn

Other certificates including the domain name microsoftonline.cn

(limited to 100 certificates)
IntuneDeviceUnlockAADSP.manage-ppe.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn

Certificate

The complete raw certificate details for acms.infra.teams.microsoftonline.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwim/37oeW3B19ExDLhFV
iQ4Mh7zGNI1i2vBfI++ku6MSBhKQ4rIpx2jRGunPdbCHiwCkq8muCS9kQbu/Lgbe
LRM0Kq284zYjc+xhe6HGYXw2371Rnh4cKFgZISfSp89hnAOw105DOItkPaShds0a
ImP2Kvb+l3HkB+EGLvqm+AtzQz9sx+VgGDxP6LeGyEDq4UgOhT9K+J6CiTvm4uhL
Is0Cx6JTkM5CAVCsfgrItvlhiG73gldVOHdLWA1zWRV4f2bHPsMdoPey8TbRbZWN
ZyK04T0KInY8Fvj8aFdetr46s2sJR2BAo28HzMoAXbN9W7+YIx9P4/BWKYdHsSZZ
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8986359309516034016403927961953141745
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acms.infra.teams.microsoftonline.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24510818612894750106219869896056942402108672231879143010887101770230603821030879623825571732857465079433340304407747258138410619832489738105217461942506420915763850095945930412969278396231150568330485706368858769200614679829561393790213761239389004329521160097567176328345941387175287849087279881885370051670677108019680518513755211427597122374584441064454070565176232996955145249197634824136836690124268713083509004286975114919583358165286845495366042138975508700501250539344313469653183348246892628754376171830909480835422581244925313398617405557400915762164174597598223142381519965016295471032601574202489979689457
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							377940ad8dddd4d76702c5f26f3bc36894549cd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acms.infra.teams.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.acms.infra.teams.microsoftonline.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							0166007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018c58e473f6000004030046304402207844c16441c6e6b14403259526aadb9700f1d48746fc27a747a1f46a28a29a8c0220787f6d8d959f247891ba262f044dd76fb6ab046883765a1cb991b3ea2a19c36800750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c58e473c5000004030046304402206d6d21d4a4c7e6df5536076e7e3d4683574636b37b08ff8d2f5359401ffe663c0220384f2f3101391fd5309e32449a823aace686d16ab63165c1ff7c393dc1ff84b2007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018c58e473bb00000403004730450220485ccf325bc0457b1d0789a32cc6bc206fca1179ec10f3fef744eb3e83dd3314022100cc1812df061ff616d8617ae57a7cbe5031a30b0f1a57a2dbc9ad110c172d455b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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