*.sfu.ca

- Simon Fraser University -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 0b:d6:c8:ff:17:f9:8f:74:84:6b:5b:25:5c:d6:8e:89 was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Simon Fraser University

Organization: Simon Fraser University
State / Province: British Columbia
Locality: Burnaby
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:d6:c8:ff:17:f9:8f:74:84:6b:5b:25:5c:d6:8e:89
Serial Number (int): 15736736173882554388684442287790788233
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: cc:83:33:b0:4d:c2:eb:92:d6:eb:e6:d0:b3:b6:44:22:f0:70:09:55
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 0b:d6:c8:a0:71:48:a8:f8:f1:f2:50:2d:48:42:87:82:03:d1:27:a9
Fingerprint (sha256): 07:9a:ae:13:a7:61:65:3d:2e:e8:d4:0e:2e:71:54:92:c9:80:c5:16:89:d7:d8:41:c0:59:6c:4e:a7:36:16:61

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g4.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g4.crl

Check the revocation status for certificate *.sfu.ca

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.sfu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.sfu.ca
sfu.ca
dalton.chem.sfu.ca
nernst.chem.sfu.ca
lewis.chem.sfu.ca
newton.science.sfu.ca
barton.chem.sfu.ca

Other certificates including the domain name sfu.ca

(limited to 100 certificates)
*.sfu.ca
*.bus.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
lib-theses.lib.sfu.ca
aldine.lib.sfu.ca
lib-theses.lib.sfu.ca
journals.sfu.ca
idp.sfu.ca
research.wiki.iat.sfu.ca
*.sfu.ca
bfraser-srv01.cmpt.sfu.ca
cmpt165.csil.sfu.ca
*.sfu.ca
athletics.sfu.ca
digital.lib.sfu.ca
git.fits.sfu.ca
globeproject.com
gruvi.cs.sfu.ca
databases.lib.sfu.ca
badas.irmacs.sfu.ca
ibcwg.org
*.its.sfu.ca
docs.pkp.sfu.ca
piwik.lib.sfu.ca
journal.archpress.lib.sfu.ca
*.sfu.ca
community.sfu.ca
journals.lib.sfu.ca
*.its.sfu.ca
*.sfu.ca
ceramicca.ensc.sfu.ca
adler.psyc.sfu.ca
appointment.lib.sfu.ca
athletics.sfu.ca
cas.sfu.ca
*.sfu.ca
www.npatlas.org
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
*.its.sfu.ca
mikkeo-git-test.bus.sfu.ca
www.lib.sfu.ca
banyanlab.cs.sfu.ca
autonomy.cs.sfu.ca
newmediabusinessblog.org
*.fhs.sfu.ca
lib-search-dev.lib.sfu.ca
olc-dev.its.sfu.ca
calculator.lib.sfu.ca
atom.archives.sfu.ca
static.lib.sfu.ca
*.its.sfu.ca
isea2015.org
ocs.lib.sfu.ca
*.fhs.sfu.ca
vpstest18.lib.sfu.ca
cs-dm-signage.dc.sfu.ca
*.its.sfu.ca
lib-staff.lib.sfu.ca
pathogenomics.sfu.ca
registry.cloud.rcg.sfu.ca
appointment.lib.sfu.ca
bookings.science.sfu.ca
*.its.sfu.ca
npatlas-curate.chem.sfu.ca
api.lib.sfu.ca
*.sfu.ca
mwhs.avalanche.rem.sfu.ca
*.polylab.sfu.ca
cmpt373-lockdown.cs.surrey.sfu.ca
canvas2.tlc.sfu.ca
*.fhs.sfu.ca
digital.lib.sfu.ca
facts.arts.sfu.ca
nsl.cs.sfu.ca
journals.lib.sfu.ca
*.proxy.lib.sfu.ca
*.its.sfu.ca
vpstest23.lib.sfu.ca
advance.science.sfu.ca
conference.pkp.sfu.ca
www.cieedac.sfu.ca
alerts.library.nyu.edu
arago.cprost.sfu.ca
give.sfu.ca
*.lib.sfu.ca
*.ezproxy2.lib.sfu.ca
*.its.sfu.ca
*.fhs.sfu.ca
www.psyc.sfu.ca
rcg-ggt-dash.dcr.sfu.ca
hadar.tlc.sfu.ca
*.sfu.ca
www.psyc.sfu.ca
*.polylab.sfu.ca
my.sfu.ca
banyanlab.cs.sfu.ca
remsurvey.rem.sfu.ca

Certificate

The complete raw certificate details for *.sfu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcNOIyxEGyg+B56Ex6Eo
PCDRhqO68ayCNntTxYtPmOmvIHlD5z1sOC7zLy8bMI7ZkKJnaPTpzzAfF4eBu8iI
2DWP+3MrscS8Nw0WtTR/dlq0I8NLoxlBgtfSz+2UAWUh4myvDXn3aVYacudvTMnm
aSiXLQwaXnfejDFtqFVDNiNQcSp/nDhiRMZX4NmXPVvhpYKopN3QGqG3cwjNWhQr
nkipXeUgJRtvXjK8vdVY6y/UvQonguoFXwaCnPdgXMdtrWiBBnu9QbihVaPOAkQi
0y63bASmNtifBFjxUFtXJ93Be1P/0rsdCGQRXpzI9gBOSCbK9fYgXolTeDlZaYeX
7wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15736736173882554388684442287790788233
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-07 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'British Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Burnaby'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Simon Fraser University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sfu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20925628914921270484783512418177334742322055798602524997306436611311155228290822080754183929145003529905670484378458856499165093169268583351718147563119925241353518358387469936402865698046308613026856085390467888531530562561931212859525739063077194536784717588292146275745571285888872947635592088413869270724815499996032472216935504366593597214191605377883727353210008781672796543091302488013639011230207544403871067646903120877020125598937700701378344697583915191190145576791123534064117502594038410700321159663377256763898579046094688622588346432338673850904196363640740110917933658839190586290470024184838113171439
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cc8333b04dc2eb92d6ebe6d0b3b64422f0700955
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dalton.chem.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nernst.chem.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lewis.chem.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newton.science.sfu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barton.chem.sfu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014ec1bbb89c0000040300483046022100c27db7219e3904f65315383bdd6817841a5831bbeddfc020ad42f87f1e7b9fe3022100b6884aa79b5fe2a13612f08b11f57cd18b74a4c309e4e2867d82456856ae738a00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014ec1bbb88500000403004730450220278cd533f0f4095a4f8db59cc100163c4826921675952cb5c6cfb1eb0c58ee12022100a36652936e2523ab2ebd6573958854ae80898eddb7036fff64aadcbd218041ea0075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014ec1bbba43000004030046304402201cceb0a032f74ca82edf8f909cfecad155ba302249b164b413e4a033d655a7ff022073538cd75b1682a8473a3ecf913af9b081de54a82793bd360dcf3bdb7aef60f3
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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