sfp-pp-temp-assurance.cardif.fr

- BNP PARIBAS SA -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 4c:22:d7:df:3d:e6:a8:1b:5f:f0:03:ed:cd:f0:4b:73 was issued on by Symantec Corporation.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Organization unit: BNP PARIBAS SA
State / Province: Paris
Locality: Paris
Country: FR

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:d7:df:3d:e6:a8:1b:5f:f0:03:ed:cd:f0:4b:73
Serial Number (int): 101202244177946248670305461216685869939
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): 13:c6:81:de:00:64:63:08:6f:57:03:4d:0a:cd:39:47:4f:4c:df:0b
Fingerprint (sha256): 04:29:f5:44:46:4f:af:e1:ea:2d:9b:f8:6b:3b:73:43:4c:e0:56:a2:a4:19:96:52:d9:50:3e:0e:df:f0:17:ae

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate sfp-pp-temp-assurance.cardif.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sfp-pp-temp-assurance.cardif.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sfp-pp-temp-assurance.cardif.fr

Other certificates including the domain name cardif.fr

(limited to 100 certificates)
simulationrentes-prod-assurance.cardif.fr
opportunitedecontact-pp-assurance.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
prevoyance-patrimoniale.cardif.fr
suivigiant-pp-assurance.cardif.fr
dsir-assurance.cardif.fr
assurance-credit.cardif.fr
pops-souscription-pp2-assurance.cardif.fr
plsir-pp-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp07b.bnpparibas.com
temp.cardif.fr
bnp09b.bnpparibas.com
beneficiaire-run.staging.cardif.fr
bnp09s.bnpparibas.com
iespub-assurance.cardif.fr
sfp-pp-temp-assurance.cardif.fr
bnp09b.bnpparibas.com
bnp04b.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp19b.bnpparibas.com
bnp19b.bnpparibas.com
bnp23b.bnpparibas.com
bnp07b.bnpparibas.com
simulationrentes-pp-assurance.cardif.fr
www.cardif.fr
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
nowcl-temp-assurance.cardif.fr
bnp07b.bnpparibas.com
assurance-sante.cardif.fr
portail-relation-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp09s.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09b.bnpparibas.com
bnp15b.bnpparibas.com
alfin-prod-assurance.cardif.fr
finagora-pp.cardif.fr
bnp07b.bnpparibas.com
bnp09s.bnpparibas.com
cardif.fr
bnp09s.bnpparibas.com
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
opportunitedecontact-pp-assurance.cardif.fr
bnp09b.bnpparibas.com
espace-indemnisation-c02-rec.cardif.fr
suivigiant-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
propositionarbitrage.cardif.fr
bnp12b.bnpparibas.com
tmp.cardif.fr
dsir-assurance.cardif.fr
bnp06b.bnpparibas.com
bnp09s.bnpparibas.com
alui-images-assurance.cardif.fr
document-information-cle-pp.cardif.fr
espace-client-c01-rec.cardif.fr
portail-relation-client.cardif.fr
bnp18b.bnpparibas.com
bnp07b.bnpparibas.com
demo-portail-c01.staging.cardif.fr
simulationcapitalisationrppfrance-prod-assurance.cardif.fr
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
bnp12b.bnpparibas.com
giant-prod-assurance.cardif.fr
sfp-pp-assurance.cardif.fr
bnp07b.bnpparibas.com
bnp12b.bnpparibas.com
bnp09b.bnpparibas.com
bnp09b.bnpparibas.com
alfin-pp-assurance.cardif.fr
finagora.cardif.fr
bnp12b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
iespub-assurance.cardif.fr
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp09s.bnpparibas.com
bnp19b.bnpparibas.com
bnp09s.bnpparibas.com
bnp04b.bnpparibas.com
shaker-pp-tmp-assurance.cardif.fr
bnp04b.bnpparibas.com
bnp04b.bnpparibas.com
portail-relation-client.cardif.fr
bnp07b.bnpparibas.com
canaldigital-assurance.cardif.fr
bnp07b.bnpparibas.com
f17aaabc20bfe045075927934fed52d21.bnpparibas.com
bnp12b.bnpparibas.com
comptes-run.staging.cardif.fr
bo-run-n2-client-portail.staging.cardif.fr
shaker.cardif.fr

Certificate

The complete raw certificate details for sfp-pp-temp-assurance.cardif.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDeUJUmTU1WjwYxO2yVq
ylTS+q7qUQEIhD50IweTNJcTrfaeI3oPvCl6P88TIj8s3+9UK3SB6NKMYX8xMP8Q
WLyFKUXGLckk9BWWVFhRfFHtXuB0X+6f09YgXitO8ev8X7mqfB3yBZgoOL+f1Y5T
aD5hL0Q66nGEEg4lSH+4EjXBe+Ueyhliamei57f4By8N88WSFAcQhggAnU4kDu26
YU0fyud27RqTr/fY6tkQf+TMTC8ruHYCIM/XEGCj48BobQNA+VQKCGjN4xwowvCR
epjusLQM91Qeg941J3VfkVIAF2zwb6bBwGf817D6tLQNW95rgobaraFGcnnHjVyY
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101202244177946248670305461216685869939
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sfp-pp-temp-assurance.cardif.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22245348549486544249768780671312655355911122200864157356124201784213206296119205936674829044026554600231365598689303289262668827125022748457130626044932915072021570095171343411250266053823454126566221696220739227921804593539199905284867541004438178609657585637478161966098024058889376156991832646013421662063911747338900558104903580966301437213499275226683551456871336583610425408053477730444285181747206356791007418986086457710311805922722849383150415106685244750365847535168337594764794216040610821555002404698240262265898288961602530493371203987770089444861145139586712515409852486962933678202006487190430581299297
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfp-pp-temp-assurance.cardif.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [104 116 116 112 115 58 47 47 100 46 115 121 109 99 98 46 99 111 109 47 114 112 97]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000152d513bb520000040300473045022100ed84854107cfd788b708a078df7e65a5e8b749adc912f6f0f10a2e314c1ec050022066874a8e88fbca4581f602b243e828457d082b2c623382ad2f33e16edcafea74007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000152d513bb7700000403004830460221008cb0c01b50d4496897f277b86c6164793a90fed0ef1c9e65260e18e6c1e7e42e022100d02b5735b979e87d6dd6f1cab25b91558898dea7e943c5be8c1846a076c6468100760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000152d513bb7e0000040300473045022100e3f0db2678d44238c7b693bac8422524e02804cb0e652df1b8fcc92d0a2ca7d70220291ddac1059fb9b304d4d7860c07bd924700fd29ed5e9ac11be3d93a4c2492db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002252b86e58c3755f3ea7b13818cb13746c633ce6f97a44e95e81e7d0996faf20be338faf4ebfbe82fc05d35dbadc7af21a764ca7981e4259d2154c19b850db7bb9e8c94e709e691ab6f95ded9142fdf077af88ba8d8cdcb1c1b505265160bec978ed927af568e8f2e6467d267a12ef169de733d9055fbda7e111414bbb503ef587adca5dd5914b25a6b450e9eab1b2b59d6cb309205b05d4658adb90fc61e541dca2971272a48cf618b890b8969c19a4ec876e4ec7d7032f9230b1a4a4d2df4243f00f37b8ac4f6f3c5ee31cfa98146e5e7e4a304f49b1acdfb626843aa192f8b93e348f7e1e871c05a32fac6b07f6d67afa4ab5811a41da9a4bd8464444ca45