mave.dds.lenovo.com

- Lenovo (United States) Inc. -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0d:9c:6d:c0:7d:7e:e4:5f:5a:19:78:fb:69:f1:bd:f5 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Lenovo (United States) Inc.

Organization: Lenovo (United States) Inc.
State / Province: North Carolina
Locality: Morrisville
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:9c:6d:c0:7d:7e:e4:5f:5a:19:78:fb:69:f1:bd:f5
Serial Number (int): 18092188288428369568059988928999046645
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ab:68:8c:99:e0:4d:80:bb:51:23:b0:d8:87:81:67:e0:8a:e8:79:66
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): c9:72:4b:af:5e:e4:08:86:1a:80:6f:49:ef:5d:36:08:e1:ea:55:38
Fingerprint (sha256): 06:31:b5:a8:c8:4a:40:e8:1b:c7:c4:37:7d:d1:f8:d6:81:18:b6:cc:e8:7d:f1:d1:d6:3d:ce:57:6c:bd:8c:7c

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate mave.dds.lenovo.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mave.dds.lenovo.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mave.dds.lenovo.com
tools.dds.lenovo.com
stage.dds.lenovo.com
tool.dds.lenovo.com

Other certificates including the domain name lenovo.com

(limited to 100 certificates)
777bpce76.saagie.com
marketplace-templates-vpoc.cp.lenovo.com
777bpce76.saagie.com
*.lenovo.com
displaycdn.lenovo.com
www.maestro.io
activate.connect.lenovo.com
outlet.de.lenovo.com
api-test.tsc.lenovo.com
osd.lenovo.com
cxs.lenovo.com
www.thinkbook.com
geo.uds-qa.lenovo.com
loyalty.lenovo.com
mail.lenovo.com
subaru3-dev.lenovo.com
webform.wd.lenovo.com
*.lenovo.com
io.gdi.lenovo.com
esourcingtest.lenovo.com
*.csw.lenovo.com
testforums.lenovo.com
secure01.lithium.com
lcfc01.blt.lenovo.com
rolandberger.relmeetingapp.lenovo.com
receiver.b2b.lenovo.com
esbclient-cn-t.lenovo.com
mqtt-mtls-load.naea1.uds-qa.lenovo.com
scoe.lenovo.com
secure01.lithium.com
smartalbumcloud.lenovo.com
aployalty.lenovo.com
brazil-mds.lenovo.com
*.csw-stage.lenovo.com
smartedu.lenovo.com
amer-es.tw22.lenovo.com
*.bycube.lenovo.com
sni.cloudflaressl.com
www.maestro.io
*.lenovo.com
cowork.us.owa.lenovo.com
www.maestro.io
*.lenovo.com
oauth.csw.lenovo.com
spokenenglish.smartedu.lenovo.com
aefepl01.lenovo.com
homeedgeserver.lenovo.com
www.maestro.io
*.lenovo.com
stscn.lenovo.com
www.thinkbook.com
qa-sit.hub.lenovo.com
apservicesales.lenovo.com
*.lenovo.com
secure01.lithium.com
*.lenovo.com
log-smart.lenovo.com
*.adminhosting.shea1.lenovo.com
nonprod-idp-xclarityone.lenovo.com
fpvpn.hk.lenovo.com
test.wx.lenovo.com
linux.lenovo.com
brandworld.lenovo.com
*.lenovo.com
lscs-qa.dev.cloud.lenovo.com
suwen.lenovo.com
www.thinkbook.com
dalestatus.mambu.com
www.maestro.io
wireless.lenovo.com
sts.us.lenovo.com
sni.cloudflaressl.com
pages.lenovo.com
status.apoteket.dk
mqtt-mtls.naea1.uds-sit.lenovo.com
sni.cloudflaressl.com
*.resources.lenovo.com
less.naea1.uds.lenovo.com
uds.lenovo.com
analytics.status.atlassian.com
cc20.status.jasper.com
mitest.lenovo.com
test.le-credit.lenovo.com
mcstaging.store.lenovo.com
techworld21.lenovo.com
stscn.lenovo.com
ldiplusstatus.uds.lenovo.com
emea-it.tw22.lenovo.com
*.dev.cloud.lenovo.com
b2b.lenovo.com
mave.dds.lenovo.com
geo.cnno1.uds-sit.lenovo.com
embed-answers.cority.com.pagescdn.com
webvpncnpek01.lenovo.com
tracking.lenovo.com
*.lenovo.com
*.brain.lenovo.com
mfa-test-login.icelab.lenovo.com
cap.lenovo.com
xclarityone.lenovo.com

Certificate

The complete raw certificate details for mave.dds.lenovo.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10zLRr62c++jorOVS1i8
lj0T2HFLWIi7Eb6MLY8UoaZqoZwMp33b179rhyWBrLTkZlH/Ur22Ezp/wr1TijmZ
Gusxww//sluam1A6o0scRzJ3B9oFWlvc/ozUgYd0hJBobKcynTPFmqqBPUF5LyXi
aji5yn1WdXjx7VkrLG33tADCRRccZi2w7tfZF0P1AO0GS1RV369Gj0ABcJ+/pQhy
rasMEeLbRD/n5/Yoi5ueWWNbvOqlKZEoqf0r2ZJ3lcm75b1pMJFVbb27S3j+kVfp
u65VuLK3208RdlEP3lYuwdV4gnDE3xUqQiH9/UjqhaeA/biD61dwGDlYEK11Y4+r
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18092188288428369568059988928999046645
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Morrisville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lenovo (United States) Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mave.dds.lenovo.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27179104124266529016980040260241261572262903041854506996118398269512152125092564470787004940310105643141624111418725046580205356288104401573963465900722460134704376468167284121822520199001034529437577085674768731651499116566094893857086967865236005455509485016207839458643748653046701475435088477783192502107614523040061916761626693975499164428703724194956313970496462546410041468434365540678049718319806688824706147957440601847658766950158983378493438451652357669583386348551707283573277824108604717897259853550298911613238639618621982359917006550641199443308721713462567924730075872750406888371080028663896796539693
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ab688c99e04d80bb5123b0d8878167e08ae87966
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mave.dds.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tools.dds.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.dds.lenovo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tool.dds.lenovo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018a9951d5630000040300483046022100db92eaeed3fd99d70a208dfe947f91347dddcb4f6f2bb3f9609f26ce3ad2b7f6022100f5f101712c94d55ba9232b50dc3b54b20cd3b487bcd29c612a97de3ae4fc742800740048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018a9951d56400000403004530430220164ea78c02eb39830e355d1d7a5341cc7c212277778cd58bb3125d3c9d36ed30021f1e4ea5d2920a3ade3234927ca141f457a3a30037f54152fef5142aef6736ad007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018a9951d53e00000403004830460221009dc239f1366e39e8cb479bd225f40e67aec23a8a2a86c33bf487029ee9793d48022100fe19eaa7b4ada1a7ea0d8d0e0d6c1e1e66214cb0912f6c83025cd9754f765bf7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		003dfa08748e0f3bb9c93d24542c6b0f9ad3cab5a972057dd2fa4c0477296f3a72be0cbfeafb7e0ee19fdddb366c65364445f9d26a3e6fefb3ca093daa8e1c634d99fda2e2f999ac5040ea30fc1fadd2eeed73d62738d414d69d19288bec7f8b96585f607eb4d24f480f7e05b3e518e594f407f85b60c3dc2f9dc6e0183400b2cd588d28a9563e69361e7a03bce3b502e432fe84c881fb54171b5c3c26c135506a0c8c8f3b7fa3487cd97f9c8ffc1a9dc03e7b3fc17b0d868a7417f754ea035b24979faceed3b3fedb96c3ed6ab1e57e58e51b938454cd6de8ec47b4ddfb5d5f43be8544296e145002f41a479fa38936d46f5c3eb7660e2fa20757f53587102f5a