lyncpool1.exch025.serverdata.net

- SystemServer -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:60:64:14:e3:0d:4f:24:26:e2:85:00:f1:c2:c2:b4 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

SystemServer

Organization: SystemServer
Organization unit: Internet Services
State / Province: New York
Locality: New York
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:60:64:14:e3:0d:4f:24:26:e2:85:00:f1:c2:c2:b4
Serial Number (int): 9805086364706557013931925958167806644
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: e7:77:81:17:b4:53:84:b0:5b:59:1c:fc:a4:22:e8:ae:6b:0e:b5:31
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d7:5d:4d:ff:e4:77:19:40:64:77:1f:d6:9d:f1:7a:6f:74:42:94:99
Fingerprint (sha256): 0d:f3:90:1f:00:f0:3f:21:a0:5b:08:f9:7d:d5:4e:a0:10:d6:35:e9:93:99:c9:69:d4:b9:08:39:ea:94:58:89

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate lyncpool1.exch025.serverdata.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncpool1.exch025.serverdata.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncpool1.exch025.serverdata.net
dialin025.serverdata.net
meet025.serverdata.net
pool1.exch025.serverdata.net

Other certificates including the domain name serverdata.net

(limited to 100 certificates)
exch031.serverdata.net
exch025.serverdata.net
mail026-1.exch026.serverdata.net
sharesync.serverdata.net
apps.exch126.serverdata.net
lyncpool1.exch153.serverdata.net
exch021.serverdata.net
ingram.serverdata.net
mail690-1.exch690.serverdata.net
exch099.serverdata.net
mail500-1.exch500.serverdata.net
lyncgcpool1.exch580.serverdata.net
upload580.serverdata.net
ldap.exch090.serverdata.net
pool1.exch129.serverdata.net
uploadsc9.serverdata.net
ingram.serverdata.net
mail020-1.exch020.serverdata.net
exch099.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch153.serverdata.net
pool1.exch126.serverdata.net
mail032-2.exch032.serverdata.net
mail580-1.exch580.serverdata.net
lyncpool1.exch180.serverdata.net
lyncpool1.exch082.serverdata.net
lyncpool1.exch082.serverdata.net
owa020.serverdata.net
exch083.serverdata.net
exch029.serverdata.net
ldap.exch123.serverdata.net
lyncsip.exch600.serverdata.net
ldap.exch156.serverdata.net
ldap.exch600.serverdata.net
usa2.akaz.io
exch081.serverdata.net
exch580.serverdata.net
lyncpool1.exch032.serverdata.net
lyncsip.exch500.serverdata.net
exch126.serverdata.net
mail080-1.exch080.serverdata.net
mail157-co-1.exch157.serverdata.net
exch024.serverdata.net
owa.serverdata.net
lyncsip.exch022.serverdata.net
ldap.pexch119.serverdata.net
ldap.pexch121.serverdata.net
lyncpool1.exch027.serverdata.net
lyncsip.exch027.serverdata.net
mail026-2.exch026.serverdata.net
lyncpool1.exch580.serverdata.net
mail690-1.exch690.serverdata.net
lyncpool1.exch026.serverdata.net
exch480.serverdata.net
mail580-2.exch580.serverdata.net
exch084.serverdata.net
lyncpool1.exch032.serverdata.net
lyncedgepool.exch029.serverdata.net
exch027.serverdata.net
nexus.serverdata.net
sy.smtp.mx.serverdata.net
outbound.smtp.o365.serverdata.net
smtp.exch027.serverdata.net
*.serverdata.net
mail029-2.exch029.serverdata.net
mail030-2.exch030.serverdata.net
va.smtp.mx.serverdata.net
lyncsip.exch032.serverdata.net
www.serverdata.net
mail023-1.exch023.serverdata.net
skypepool1.pexch118.serverdata.net
mail080-1.exch080.serverdata.net
exch122.serverdata.net
ldap.pexch118.serverdata.net
exch029.serverdata.net
exch080.serverdata.net
exch029.serverdata.net
au.serverdata.net
*.quarantine.serverdata.net
backup.serverdata.net
ldap.exch027.serverdata.net
ldap.exch580.serverdata.net
lyncpool1.exch025.serverdata.net
lyncpool1.exch082.serverdata.net
exch021.serverdata.net
lyncpool1.exch025.serverdata.net
mail080-1.exch080.serverdata.net
apps.exch090.serverdata.net
pexch120.serverdata.net
exch024.serverdata.net
mail151-1.exch151.serverdata.net
mail154-1.exch154.serverdata.net
mail022-1.exch022.serverdata.net
mail070-1.exch070.serverdata.net
ldap.exch130.serverdata.net
lyncpool1.exch021.serverdata.net
www.serverdata.net
hpbx017.serverdata.net
smtp.exch151.serverdata.net
lyncsip.exch024.serverdata.net

Certificate

The complete raw certificate details for lyncpool1.exch025.serverdata.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDl3px6polCU2XvsCi0z
16Binb+cVPpxdGyYruehn4D96/xic7/vhZ6qW+2OkQ/1mven/4E/8nQNl54nKFFn
80B1aX1sLu2RqjxLPkV78g0MmK+22k3Ibe5JgZOYABX3C14Orn9rWFrZIbHBA44c
MsV52DEspxjxpkKynon0gUtRz8K0ZVVo9XCTqArDAQjiyI3IMWxPiWCF3qAkFEke
DRaPa29Y67Q4GN3q4ot6oto8Hw1sF6O8htzk3l+y3hLL81QYS8CqN4J4IZDgGaI4
gd2J1zcQ5n7Pzh1YKNHhq/aJytTNygG3OAnIgh3q88UUhpCCMzjSO8yJpSZ4VYZU
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9805086364706557013931925958167806644
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SystemServer'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncpool1.exch025.serverdata.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24266092781543995315964399470820724480447380061246188146612831320163662785119161420779244895319748712519573551991766294162882940336892180051423196726215596401875634488652295956938904770740900053432119131385255219570963658419036566393089969464917652910311206011795547891681656512389503900170178168184684851913462069503625496543491755584423100213341272211150461894054066934210559367107959986897996262018323870576476695109465610642782273545888721056798448921735348094488491504514144883534831491887980642126502666199407160560054234051995208538833864989301200287511295895969524499819232490702695749770781968528051609687213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e7778117b45384b05b591cfca422e8ae6b0eb531
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncpool1.exch025.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin025.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet025.serverdata.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pool1.exch025.serverdata.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001687ed464f80000040300473045022100c0059f1081f5fa2d69d98ee5ece112ce2c60a0b26f94672efb234c269138b99a02206685acc6a60255c9c2ef394363c25b6579b1ceb779e7fef84586fb68c992a37c0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001687ed465d6000004030046304402200540dd93a9978bfb9dfe446c21442317ad164dffd5ce8202152e712f526ead4302202789c0589c308c9691f490036384cebbfbd9a2249267a1761fe1e190a16a54b20077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001687ed466590000040300483046022100c7c5ceaaedcac38318cf7f5d0085ec3e76ffbaa31e6e2d667648333837c73e9602210083a56d13763c43e3bcf19f387dd3551a5ddab78e70fe83327de35ec9b584e26d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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