prd-wildcard.unisa.edu.au

- University of South Australia -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 0b:84:7b:84:6b:fd:96:6f:83:04:e5:c7:8f:66:8a:f4 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

University of South Australia

Organization: University of South Australia
State / Province: South Australia
Locality: Adelaide
Country: AU

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0b:84:7b:84:6b:fd:96:6f:83:04:e5:c7:8f:66:8a:f4
Serial Number (int): 15309396366880837582510980565687503604
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c2:e1:1b:12:1a:26:0f:e8:2f:22:f1:6e:82:24:ae:25:2f:9a:0d:22
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): e9:55:d4:d4:d9:87:6b:c7:19:ee:42:5d:89:39:1f:db:dd:b6:f3:92
Fingerprint (sha256): 0c:c4:e2:4d:1a:52:39:19:ee:1a:17:e1:90:12:79:21:5a:f2:8f:f1:e0:70:28:62:ae:f7:c1:3b:15:08:c0:2a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate prd-wildcard.unisa.edu.au

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for prd-wildcard.unisa.edu.au

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

prd-wildcard.unisa.edu.au
*.unisa.edu.au

Other certificates including the domain name unisa.edu.au

(limited to 100 certificates)
iee-studentweb.ml.unisa.edu.au
allow.sterda.com
sso.unisa.edu.au
imaps.testmail.unisa.edu.au
ereserve.unisa.edu.au
vpn.cisres.unisa.edu.au
devmail.unisa.edu.au
na.smart-integration.status.ricoh.com
funnelback.unisa.edu.au
itupw-ocs1.uninet.unisa.edu.au
na.smart-integration.status.ricoh.com
*.copyright.unisa.edu.au
aws-itupw-ct1b.vapps-prod.unisa.edu.au
*.library.unisa.edu.au
service-status.unisa.edu.au
*.librarydev.unisa.edu.au
na.smart-integration.status.ricoh.com
constructionwaste.unisa.edu.au
ask.library.unisa.edu.au
na.smart-integration.status.ricoh.com
edgex.unisa.edu.au
tango.unisa.edu.au
www.unisa.edu.au
www.unisa.edu.au
auth4.unisa.edu.au
communication.unisa.edu.au
sip.unisa.edu.au
cis-web.ml.unisa.edu.au
itupa-scan1.ml.unisa.edu.au
vcs.unisa.edu.au
itupa-cssm1.cw.unisa.edu.au
search.alumni.unisa.edu.au
login-idp.unisa.edu.au
itupw-cxrds2.uninet.unisa.edu.au
service-status.unisa.edu.au
*.access.library.unisa.edu.au
na.smart-integration.status.ricoh.com
itupw-live1.cw.unisa.edu.au
ccb.unisa.edu.au
www.unisa.edu.au
www.financesystem.unisa.edu.au
mediastream-test.unisa.edu.au
ieepl-mail1.ml.unisa.edu.au
chocolatey.unisa.edu.au
sp14.uninet.unisa.edu.au
na.smart-integration.status.ricoh.com
*.unisa.edu.au
hscpw-rado1.uninet.unisa.edu.au
prd-wildcard.unisa.edu.au
na.smart-integration.status.ricoh.com
ext.unisa.edu.au
ituta-mfapoc7.cw.unisa.edu.au
bi.unisa.edu.au
dev.lo.unisa.edu.au
nanozoomer.unisa.edu.au
na.smart-integration.status.ricoh.com
ask.library.unisa.edu.au
ipam-tst.unisa.edu.au
na.smart-integration.status.ricoh.com
waterlink.unisa.edu.au
search.library.unisa.edu.au
redir19.unisa.edu.au
bpi.unisa.edu.au
aws-itupw-cxd1c.vapps-prod.unisa.edu.au
edgex-test.unisa.edu.au
na.smart-integration.status.ricoh.com
alms.unisa.edu.au
admin1.ise.unisa.edu.au
inmpw-dbtech.ml.unisa.edu.au
login-idp-dev.unisa.edu.au
aws-itupw-ct2c.vapps-prod.unisa.edu.au
ojs.unisa.edu.au
webapplications.unisa.edu.au
vapps.unisa.edu.au
ereserve.unisa.edu.au
engage.unisa.edu.au
sponsor.unisa.edu.au
myapps-callback.unisa.edu.au
aws-itupw-csf1b.vapps-prod.unisa.edu.au
rds.unisa.edu.au
lo.unisa.edu.au
functions.unisa.edu.au
na.smart-integration.status.ricoh.com
cpi.unisa.edu.au
unisanet.unisa.edu.au
testmail.unisa.edu.au
api.unisa.edu.au
na.smart-integration.status.ricoh.com
mycareerplan.unisa.edu.au
onarrivalreception.unisa.edu.au
inmpw-dc1.cybernet.unisa.edu.au
go.mcvserverlab.com
assetbank.unisa.edu.au
allow.sterda.com
allow.sterda.com
caisapplications.unisa.edu.au
search.library.unisa.edu.au
wiki.unisa.edu.au
ep.unisa.edu.au
podcast-temp.unisa.edu.au

Certificate

The complete raw certificate details for prd-wildcard.unisa.edu.au in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqMKZZ59zoYw8KpH9xbKt
MRpoqaCMpQXYh90MaMnx2WDsGzSDKHYjgewis3Rvw40My6muTkqmaObLet4AHNgn
X3BRVpczWfTRqNl9j6W2LpbaPj/PUuSRFtNIgmmViHR0Uh72BDj7JHyF140dgK0l
EA4PBZ8w9mz38UBjKBSIeG0fSmxnDwNjk5ojgT2l5ZWSBSilWz7J+JlU/GTkgy6y
3mZEOPQlC+y5/Pj63bNkBvmCWRjUv3AwtEgjSo9jvX4F9xD2JEQjZX5YIMLMmXLI
gteEv0/snbZFBqFB+evSu+VM3RUT8umCAPUjbq0atAv5iaWdimWu2qmbd9PwAQ+p
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15309396366880837582510980565687503604
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-28 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AU'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'South Australia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Adelaide'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of South Australia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'prd-wildcard.unisa.edu.au'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21303995694759731355856435269004891300794285812863454507244836906118462073551569854626279445990491098553781542662140277644279860499734366632043651804223260382679679286327755363437805626532564396410637425726414087441685175843833025817013969377235410855497855813618605313762163439088998502192294420543894323025550510487423028230954534433488176198965601322393473570517834106792279661136906447845215958811377064285516610416237903446316898083848102432237701364756917803247319013784990434889603827703224632300784616792076535411837182055844034565030506108323534699835582632311917271863794359414928295936807956360223194589479
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c2e11b121a260fe82f22f16e8224ae252f9a0d22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prd-wildcard.unisa.edu.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.unisa.edu.au'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018f4c71a83f0000040300483046022100e514738f312e95dc158f428af6eeb078c8f296db67254c9e5667db677819935c022100a396b93b64dc5968f87822aaaf00e5e3dda4869a3c10132dad05f425d3524b7a0076007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018f4c71a7c6000004030047304502207012d32ea7ada2c2577e16c0a036a8e4213682daafb5eed62bd31d1d4a1f22b8022100e5264d68938919553c3601e93e74bf24a607917db3039b5393c9ed530b8f1255007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018f4c71a7db0000040300473045022041738257ee8baec3adad966ff3dece9fc77592b43e538448e0b85be159b3e33402210084b5cc03b11011a52b8a8aea722590ced16297d9806dc5f344a9639ac4cea622
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002c08bbb3e0602f215fa0f92a7debd929df15970f097c483b3609d38d64fbd0af349d94cbefa0d17e826abb9e7c7a16922baa30a0c4d8c558e27228eecaa80fda7a613af01f96c1ca8775e99ffd448e76522ba256db4d38c99432dbfc143210746aa45202c4a0c649a7ea9b5142f7a41b2d54709feaff4803ba3cd75cdb58d7d56185b6e323c24dd8394ff192c5db19cdd54e5ddc7417cd105321fe8653a122311fd7655c9da21b03230392c09fbb4169283c871c75b5d208fc2008039764627048677a1d87560fdbf757de6da4407b895dc671f0c8e0430e333486981c6d4c0b885fdd3f43c6ca1bc0238f3f1869a1e7d450921e275977075db8687adf574b2d