eas.gc.ge.ch

- Republique et Canton de Geneve -

Issued by SwissSign Server Gold CA 2014 - G22

About this certificate

This digital certificate with serial number 51:7f:21:2a:3e:61:eb:52:5a:fc:72:19:11:19:7f:ca:04:b2:b6:7c was issued on by SwissSign AG.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Republique et Canton de Geneve

Organization: Republique et Canton de Geneve
Organization unit: OCSIN
State / Province: Geneve
Locality: Geneve
Country: CH

SwissSign AG

Organization: SwissSign AG
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 51:7f:21:2a:3e:61:eb:52:5a:fc:72:19:11:19:7f:ca:04:b2:b6:7c
Serial Number (int): 465263336157160110794482180087552416165607421564
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 91:bc:5f:9b:84:79:c7:1f:65:72:36:35:b0:a3:29:f4:6f:86:6b:d0
AuthorityKeyId: e7:f1:e7:fd:2e:53:ad:11:e5:81:1a:57:a4:73:8f:12:7d:98:c8:ae

Fingerprint (sha1): 7e:92:05:8c:fe:18:ea:1e:7c:90:e7:65:7d:78:96:ba:d6:7f:09:b4
Fingerprint (sha256): 15:1a:b3:6d:50:83:9c:bb:4d:00:d0:2c:cf:1d:94:5c:fc:40:eb:29:e0:80:21:81:c5:6b:c2:58:82:47:02:8b

Issuing Certificate URL: http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE

Revocation information

OCSP Server: http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE
CRL Distribution Point: ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint

Check the revocation status for certificate eas.gc.ge.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eas.gc.ge.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eas.gc.ge.ch

Other certificates including the domain name ge.ch

(limited to 100 certificates)
impuserlabo000-ms.ceti.etat-ge.ch
gc.ge.ch
contacts.ge.ch
testeaspolb2b.ge.ch
ge.ch
vcscgv2-1.ceti.etat-ge.ch
pol.b2b.ge.ch
cucmuser000-ms.ceti.etat-ge.ch
vcscnhp-1.ceti.etat-ge.ch
justice.ge.ch
test.b2b.ge.ch
testmobilepol.ge.ch
portailadmin.ge.ch
portail.ge.ch
survey.cdc.ge.ch
*.ge.ch
testservices.b2b.ge.ch
vpntest.ge.ch
www.etat.ge.ch
REPUBLIQUE ET CANTON DE GENEVE
epi.ge.ch
testservices.b2b.ge.ch
test.b2b.ge.ch
mobilepol.ge.ch
securebox.epi.ge.ch
imap.gc.ge.ch
appconpol02.ge.ch
ge.ch
pexip.ge.ch
recensement.app.ge.ch
vcsclabo-2.ceti.etat-ge.ch
jabberguest.ge.ch
vcselabo-1.ge.ch
epi.ge.ch
impuser000-ms.ceti.etat-ge.ch
padbleu.ge.ch
idp.ge.ch
dgsiemmensrec.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
padpolice.ge.ch
ssl829352.cloudflaressl.com
testeasadmb2b.ge.ch
ge.ch
pexipedge.ge.ch
vcsenhp-1.ge.ch
pol.b2b.ge.ch
jabberguest.ge.ch
ge.ch
test.b2b.ge.ch
justice-doc-ext.ge.ch
eas.gc.ge.ch
pjdeploy01.ceti.etat-ge.ch
vcselabo-2.ge.ch
webmail.gc.ge.ch
test.b2b.ge.ch
jabbergexpe002.ge.ch
testeasadmb2b.ge.ch
vcscnhp-1.ceti.etat-ge.ch
polmi.b2b.ge.ch
epi.ge.ch
appconsae01.ge.ch
epi.ge.ch
vcselabo-2.ge.ch
www.etat.ge.ch
easpolb2b.ge.ch
padjustice.ge.ch
sni.cloudflaressl.com
www.ge.ch
ssl829350.cloudflaressl.com
securebox.epi.ge.ch
annuaire.ge.ch
epi.ge.ch
*.ge.ch
epi.ge.ch
cucmuserlabo000-ms.ceti.etat-ge.ch
cucmuser000-ms.ceti.etat-ge.ch
survey.cdc.ge.ch
*.ge.ch
portailwifiedu.ge.ch
pocdme.etat.ge.ch
amendes.ge.ch
vcsclabo-2.ceti.etat-ge.ch
videogw.ge.ch
amendes.ge.ch
vpn.ge.ch
test.b2b.ge.ch
portail.ge.ch
vcselabo-1.ge.ch
*.app4.ge.ch
etoile.ge.ch
outlook.ge.ch
amendes-rec.ge.ch
testpolmi.b2b.ge.ch
mdmacore01.ge.ch
ge.ch
ldapedu.ge.ch
testmobilepol.ge.ch
*.epi.ge.ch
participer-rec.ge.ch
*.ge.ch

Certificate

The complete raw certificate details for eas.gc.ge.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 465263336157160110794482180087552416165607421564
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SwissSign Server Gold CA 2014 - G22'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-04 14:03:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-04 14:03:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Republique et Canton de Geneve'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OCSIN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eas.gc.ge.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 783555125861941940536711434497314327484621178669896894077235310647921018813713664055731423674077433327204962047858569564265294677597646217042227655981071039193586250434134233403257849134613435804500391198236940019342314945821320507907023611084436788556848842481168592628129427075349275680392137783927383589184684640518623944030975567973637249239261301019278837954856735301293893009144476804132652387073749268379864112466942790216540042567627938596053510348955716903461702176529457711466405840320564884905793036878993945014002264334091360819012318587828325786540925596758537334887819686060999867040550142960543479182785104378994532549214023184917321964340206939752295192805827476183259039651429242209124152237785061237866510344329499317345842770135247374953144400753043288618738257934159644435803262366253685203209868046801849703110746650474152627876990169524423083980450803923962967314575484579079592713180127492647850220266106454680852171169501387342476904273602766008029741277296513341856038102642268994349092925470389796405088384657778820872220031639917279847535468399526565956004297470608348607727428693339473288830199702021674315320262524274598604330504773599940693091344566648779759609090671881136731360192132372291691336027831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eas.gc.ge.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							91bc5f9b8479c71f65723635b0a329f46f866bd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7f1e7fd2e53ad11e5811a57a4738f127d98c8ae
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://directory.swisssign.net/CN=E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE%2CO=SwissSign%2CC=CH?certificateRevocationList?base?objectClass=cRLDistributionPoint'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.89.1.2.1.13
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://repository.swisssign.com/SwissSign-Gold-CP-CPS.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://swisssign.net/cgi-bin/authority/download/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gold-server-g2.ocsp.swisssign.net/E7F1E7FD2E53AD11E5811A57A4738F127D98C8AE'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f600000170a5dbe192000004030046304402206b09b4860e9da739c8217757bcb75c9231f2f7428d7708965e4c3a3d392a263002204155ff72c4624133e99e45f87366ff0508f531781a40d07efb66f40c0e6f977f0075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d91300000170a5dbe18100000403004630440220248dc55446d89d6edf97c78314c9569d551b1b3b61e021956d05f8173f575a530220600326ac20433e3f23ec4b8d2a7e203c815a83c3135f505fb77846227db18566007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000170a5dbe17b000004030047304502207e8b436b18e1cf8955ed7dddd4e67bbf9f04e34d2560de97f3987d86e3b0f44202210083023e9dc84c9414630edff5d79b91bc77655aad5ac38f506cb183df16ac2772007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000170a5dbe13b0000040300483046022100ba4866ba867aee854d8b851bd8bf331368bf511f4eaaa364cb829cc4c1494652022100b2f2b3c41842d1c134d2c5df9bfb1ea643de77028f01038eaa335636d3053425
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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