adfs.edeazclabs.va.gov

- U.S. Department of Veterans Affairs -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 04:6d:de:18:db:63:a4:23:d0:80:46:57:71:44:b0:b4 was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

U.S. Department of Veterans Affairs

Organization: U.S. Department of Veterans Affairs
Organization unit: AITC
State / Province: Texas
Locality: Austin
Country: US

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6d:de:18:db:63:a4:23:d0:80:46:57:71:44:b0:b4
Serial Number (int): 5887377005025546652083008114803388596
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 2d:12:a1:55:df:be:69:c0:70:0c:9a:15:94:9e:70:51:16:09:49:8e
Fingerprint (sha256): 02:66:94:0b:08:65:e8:c6:7d:ea:be:91:c1:81:f2:da:84:cb:27:52:4b:21:00:f7:f5:ae:4b:17:4c:f6:7e:a6

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate adfs.edeazclabs.va.gov

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.edeazclabs.va.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.edeazclabs.va.gov
remote.edeazclabs.va.gov
enterpriseregistration.edeazclabs.va.gov
rdweb.edeazclabs.va.gov
idm.edeazclabs.va.gov
register.edeazclabs.va.gov
www.edeazclabs.va.gov

Other certificates including the domain name va.gov

(limited to 100 certificates)
www.tee.va.gov
www.explore.va.gov
gfe.vpn.va.gov
www.cc.1vision.va.gov
m.pint.ebenefits.va.gov
www.visn2.va.gov
SERVICES.TEST.MDM.VA.GOV
vaww.media.eo.va.gov
*.shopvcs.va.gov
care.va.gov
prod.saas.box.va.gov
pint.vdc.va.gov
ccracommunity.va.gov
www.va.gov
www.cep.fsc.va.gov
www.patientadvocate.va.gov
rqm01.aide.oit.va.gov
nonprod.paas.mulesoft.va.gov
gibill.va.gov
m.va.gov
portal.nprod.vetbiz.va.gov
register.eauth.va.gov
www.ideas.research.va.gov
VABENEFITS.VBA.VA.GOV
ra.vpn.va.gov
yourit.va.gov
homeloans.va.gov
hybrid.va.gov
adfs.edeazclabs.va.gov
pint.sep.va.gov
HRIS.VA.GOV
www.vis.fsc.va.gov
preprod.fed.eauth.va.gov
rrc01.test.aide.oit.va.gov
*.vetride.va.gov
www.netresponse.medtronic.va.gov
m.va.gov
yourit-dev.va.gov
das.va.gov
mass.columbus.va.gov
www.energy.va.gov
www.itwd.oit.va.gov
prod.dip.va.gov
www.index.va.gov
www.pre.csp.va.gov
care.va.gov
vacagtest.vpn.va.gov
vagfe.vpn.va.gov
vdc.va.gov
www.listserv.va.gov
www.communityviewer.va.gov
care.va.gov
vaww.media.eo.va.gov
vaishwcs008.mdm.va.gov
tools.health.dev-developer.va.gov
casemgmt.int2.mbms.va.gov
www.rehab.research.va.gov
citrixaccesstest.va.gov
WWW.VOA.VA.GOV
www.va.gov
www.ihscepp.fsc.va.gov
staff.eva.va.gov
dev-developer.va.gov
www.escm-hcdev.va.gov
www.hcawsdev.va.gov
veteran.mobilehealth.va.gov
prod.saas.qualtrics.va.gov
citrixaccesseast.va.gov
adfs.edeazclabs.va.gov
www.netresponse.airwatch.medtronic.va.gov
casemgmt.perf.mbms.va.gov
mgmt.dev.care2.va.gov
filenet.pdt.vbms.aide.oit.va.gov
jira.devops.va.gov
benefits.vba.va.gov
www.ebenefits.va.gov
www.healthshareprod8.va.gov
RAPORTAL.VPN.VA.GOV
vip.vba.va.gov
cdceportal.va.gov
mrtfwfl01.vas.med.va.gov
www.valu.va.gov
prisma.vpn.va.gov
care.va.gov
care.va.gov
portal.lom.med.va.gov
www.mdssvh.aac.va.gov
services.test.mdm.va.gov
VP.evn.va.gov
www.tms.va.gov
veteranshealthlibrary.va.gov
idm.edeazclabs.va.gov
www.vendorportal.ecms.va.gov
www.vip-preprod.vetbiz.va.gov
services.eauth.va.gov
filenet.uat.vbms.aide.oit.va.gov
dev-api2.va.gov
vhacrrappdevhs5.vaco.va.gov
dev-api.va.gov
vetbiz.va.gov

Certificate

The complete raw certificate details for adfs.edeazclabs.va.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3Xp+JLe3LaWDxotJF1N
E5IuxCInObk8YUnxG1jDFZolY6FOlJOKaHf3ChB40T/tyBlPdhngLCpDes4QT2Y7
z7sTiGmGO2+dPQMPTCrAG6jfPitKjx45CzFKJLp6LtPlLPrOaA3MqYdNtqBMK2h/
HdWvwl+sXIFcj1TtCu5AEIrcX9E7JGhdnP7RIP/bODeD3NyaQPJvDx6IFPu/Ti26
5NIIm7n6L8tRjxnI9ZF+M12wns2gudXr77nip/FM4WWH23XMvrofJlKll8LsqOKW
gks3QGBBaOx3OIqzuW6yuRC872K3INlhPJxWfOro8BtZgwqJn1vJq9uz6MKZfZEv
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5887377005025546652083008114803388596
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-09 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Austin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'U.S. Department of Veterans Affairs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AITC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'adfs.edeazclabs.va.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21644895684652367371190151278556764479255906302777034624741588056509670346946298269255101215655959884264891429265714611081914175625531765240491515492695644068763368979137444762083323418734246776158776866986149047782878791412875325189424633308292549027802706868646327224031813150938481788220071098918133762448654692511406838643428388578938040069395359826915975456504166975176800729647610041471572266420511275199458678657906570190210463688270020158900387385454216074370259727272922933085451047454981810781349321395363536828683227925096607622294660809442586135441829152620373667974729486209807218184699792053759911210763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'remote.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enterpriseregistration.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rdweb.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idm.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'register.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edeazclabs.va.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015f9d916df20000040300473045022100eaf9faed63f9bcf9068b016eb330b4497ed685f46b3802a1106c561bac93732502205e7a84cfd57bbfcce18aff05d160e1297f692fce8381a6b8181ebc4ab097e85d007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015f9d916e280000040300463044022001099850bea680791efed7c36d25fe5ca661f3fe404d739365653bffff0e75c702207a46f6ec57bfa1425a41df46734ccd6794b06dd0a49ae7eb3ed61ff6aea7b296
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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