sharepoint.crystalgroup.fr

- CRYSTAL GROUP -

Issued by thawte Extended Validation SHA256 SSL CA

About this certificate

This digital certificate with serial number 18:9d:0e:02:44:92:18:4c:0b:01:bd:c2:cc:cc:0c:00 was issued on by thawte, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

CRYSTAL GROUP

Company registration number: 493 471 098
Organization: CRYSTAL GROUP
Organization unit: DSI
State / Province: VAL D OISE
Locality: ROISSY EN FRANCE
Country: FR

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 18:9d:0e:02:44:92:18:4c:0b:01:bd:c2:cc:cc:0c:00
Serial Number (int): 32716946639040323616341730478976142336
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 3b:24:c8:31:a0:b7:5a:d0:6a:b8:d2:ca:07:74:cc:1e:24:d4:c4:dc

Fingerprint (sha1): 64:8c:b9:cc:e9:21:c7:d3:2f:a3:cb:5c:63:0e:2d:a1:fc:31:d2:26
Fingerprint (sha256): 0d:83:ff:e3:99:ca:fa:cd:3a:f2:e9:85:85:9e:83:ba:7b:30:71:7b:29:9e:8c:e3:e8:47:cb:a8:a8:5d:4a:f1

Issuing Certificate URL: http://tf.symcb.com/tf.crt

Revocation information

OCSP Server: http://tf.symcd.com
CRL Distribution Point: http://tf.symcb.com/tf.crl

Check the revocation status for certificate sharepoint.crystalgroup.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sharepoint.crystalgroup.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sharepoint.crystalgroup.fr

Other certificates including the domain name crystalgroup.fr

(limited to 100 certificates)
chat.sudolio.com
crystalgroup.fr
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
sharepoint.crystalgroup.fr
*.crystalgroup.fr
cliq.profitroom.com
cliq.profitroom.com
helpdesk.provisionpoint.com
support.roodrisicobeheersing.nl
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
ticket.seattlelab.co.uk
chat.wetranslate.ro
communication.premiumbusiness.services
support.mister-bk.de
lync.forfait-informatique.com
cliq.profitroom.com
cliq.profitroom.com
sharepoint.crystalgroup.fr
support.lewenet.com
letscohere.coherenze.com
crystalgroup.fr
cliq.profitroom.com
help.tholl-gmbh.de
chat.sudolio.com
cliq.profitroom.com
workspace.crystalgroup.fr
cliq.profitroom.com
testhelp.pdr.cloud
cliq.profitroom.com
cliq.profitroom.com
chat.ethos.ltd
cliq.profitroom.com
support.unikie.com
cliq.profitroom.com
help.tholl-gmbh.de
novo.crystalgroup.fr
cliq.profitroom.com
chat.bamero.de
sharepoint.crystalgroup.fr
cliq.profitroom.com
chartwellfunding.legalzoom.co.uk
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
crystalgroup.fr
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
communication.premiumbusiness.services
cliq.profitroom.com
crystalgroup.fr
support.arnetsolution.it
crystalgroup.fr
cliq.profitroom.com
cliq.profitroom.com
*.crystalgroup.fr
cliq.profitroom.com
cliq.profitroom.com
crystalgroup.fr
chat.podmanagement.co.uk
cliq.profitroom.com
chat.zukunft-digitale-bildung.de
cliq.profitroom.com
cliq.profitroom.com
help.tholl-gmbh.de
cliq.profitroom.com
customsplatform.crystalgroup.fr
support.enteractive.com
cliq.profitroom.com
cliq.profitroom.com
cliq.gemnova.at
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.ethos.ltd
cliq.profitroom.com
cliq.profitroom.com
help.tholl-gmbh.de
chat.wetranslate.ro
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com
chat.podmanagement.co.uk
hilfe.firmenversicherung.de
cliq.profitroom.com
cliq.profitroom.com
cliq.profitroom.com

Certificate

The complete raw certificate details for sharepoint.crystalgroup.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn8k/GSd1z+MyUUnClk8Q
MmySAEbyKdk3LDetpXkkI4hgcEzYx5MDJu5mDT41x/bF1XxR/SyNVOIROROmTzjn
y5tozkZgRWtESharSgQSLVwivEGq5t7NTjxYI0hgXfJ04xnq/WyOCX9aYVpJwW3s
eFAwpRBOJXZXeNGCrJ1xjqHa4IOKUFu13Avt8LdsmThECn7f/dkHZnQxRU1Riaht
jGaI7ooRfNynRkHtDdfquo16+mm0cRhX9DzIXGOk3GmZg0OwN19VBuyL4n5BZ74J
bJ5eFHIrD2Mj3NwcZ0nAnCfQSdduY1AguD8R6mqrW/jHf9Rw995wkX21GBysG7hn
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32716946639040323616341730478976142336
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte Extended Validation SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '493 471 098'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'VAL D OISE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ROISSY EN FRANCE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CRYSTAL GROUP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DSI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sharepoint.crystalgroup.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20171128826357407401995762916552510406521864199266060952291153357296103110630735986234839423275869193202722841694486427395276475503648895799176720148853818069093820022668155647232499975073311070292176296580266211790359694061005445026505228009394262217404380504151096397826004003345453450966781155789149661620376930055125017572513187596109477909313039317285114086610168335565756313835389039261203853719998595789724314977632822386940068263359883118211703166796576363689642894245932846954971117754595111175351414445016292247834387128089370807562820875091348425539856632703069903269005276640696683289836438711538372077351
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sharepoint.crystalgroup.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.48.1 (Thawte EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3b24c831a0b75ad06ab8d2ca0774cc1e24d4c4dc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tf.symcb.com/tf.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157a40a01e20000040300473045022100ffc6123c9083bc72e900d3f30ec23ba2544dbf28341c6f1ea46717616c1948bc02203a714e3faf3a0ddf543388a980cb5d30de6c0f0a16c2cbbf278d9c2a536aa47a00760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157a40a020b00000403004730450220071aba08f6079f40ffeb7ba6e806a0f3bea89e99664067e295fb996a8f548175022100daacea053ebe0934a626da9128b9c08fc96ffa5bf5759d90000667710e4d4e81
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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