www.epmsi.atih.sante.fr

Issued by GlobalSign Domain Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:69:fd:40:3e:93:83:ac:a7:2a:fa:c1:7f:7a:6e:7c:e8 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Certificate Subject

CN=www.epmsi.atih.sante.fr,OU=Domain Control Validated,C=FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:69:fd:40:3e:93:83:ac:a7:2a:fa:c1:7f:7a:6e:7c:e8
Serial Number (int): 1492279062842009801955590713164488074231016
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 34:e8:38:fb:84:ab:5e:15:2b:f5:25:e6:5e:e7:27:05:e4:4e:73:2e
AuthorityKeyId: 96:ad:fa:b0:5b:b9:83:64:2a:76:c2:1c:8a:69:da:42:dc:fe:fd:28

Fingerprint (sha1): 7f:13:2c:96:5a:cf:b7:a3:f7:44:21:76:3a:fd:4b:6e:35:7d:52:4a
Fingerprint (sha256): 16:5b:09:f3:21:9e:a2:df:b4:b5:55:5e:78:ae:5c:e6:72:63:ae:9e:e4:1e:49:e7:32:1d:af:70:cc:0f:c6:28

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalg2.crt

Revocation information

CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalg2.crl

Check the revocation status for certificate www.epmsi.atih.sante.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.epmsi.atih.sante.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.epmsi.atih.sante.fr
epmsi.atih.sante.fr

Other certificates including the domain name sante.fr

(limited to 100 certificates)
www.ocean-indien.paps.sante.fr
*.briques.sante.fr
*.briques.sante.fr
mon-rdv-dondesang.efs.sante.fr
auth.efs.sante.fr
actualites.wiztopic.com
atih.sante.fr
sni.cloudflaressl.com
coopps.ars.sante.fr
actualites.wiztopic.com
re7.efs.sante.fr
actualites.wiztopic.com
pdlo-mentor.efs.sante.fr
re7.donneurs.efs.sante.fr
cms.efs.sante.fr
ra.efs.sante.fr
ecars-ppc.ars.sante.fr
ecarsproxy-ppc.ars.sante.fr
applis.atih.sante.fr
qualhas.atih.sante.fr
www.hauts-de-france.paps.sante.fr
secours.sipg.sante.fr
*.asc.paca.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.guichet-unique.paca.sante.fr
mail.atih.sante.fr
www.sipg.sante.fr
www.ocean-indien.ars.sante.fr
www.projet-regional-de-sante-pays-de-la-loire.ars.sante.fr
lesagoras.paca.ars.sante.fr
donneurs.efs.sante.fr
www.cls-bretagne.ars.sante.fr
sirec.ars.sante.fr
atih.sante.fr
www.democratie-sanitaire-pays-de-la-loire.ars.sante.fr
www.cng.sante.fr
mon-rdv-dondesang.efs.sante.fr
*.annuaire.sante.fr
re7.oudonner.api.efs.sante.fr
www.mini-site1.ars.sante.fr
cms.efs.sante.fr
www.mini-site1.ars.sante.fr
ecarsextranet.ars.sante.fr
ecarsproxy.ars.sante.fr
coopps.ars.sante.fr
mtsfp-vm-sante-ars-recette.accelance.net
ars.sante.fr
paps.sante.fr
inscriptions.cestanous.efs.sante.fr
sslcertificate2.queue-it.net
www.epmsi.atih.sante.fr
actualites.wiztopic.com
sslcertificate2.queue-it.net
mtsfp-sante-papsars-recette.accelance.net
webconf.intranet.atih.sante.fr
mtsfp-vm-sante-ars-preprod.accelance.net
www.epmsi.atih.sante.fr
cawi.esteban.invs.sante.fr
es-mayotte.ars.sante.fr
mtsfp-sante-papsars-recette.accelance.net
www.paps.pp.ars.sante.fr
sivss.sante.fr
www.guyane.paps.sante.fr
www.mini-site1.ars.sante.fr
*.inpes.sante.fr
sslcertificate2.queue-it.net
ecarsextranet.ars.sante.fr
applis.atih.sante.fr
actualites.wiztopic.com
actualites.wiztopic.com
arhgos.ars.sante.fr
mail.atih.sante.fr
donneurs.efs.sante.fr
ecars-frm.ars.sante.fr
tdb-esms.atih.sante.fr
www.cng.sante.fr
imotep.ars.sante.fr
paca-sport-sante.fr
www.corse.ars.sante.fr
www.efs.sante.fr
*.ansm.sante.fr
paca-sport-sante.fr
mti.efs.sante.fr
ecarsextranet-frm.ars.sante.fr
sslcertificate2.queue-it.net
www.ansm.sante.fr
imotep.ars.sante.fr
*.efs.sante.fr
actualites.wiztopic.com
dondesang.efs.sante.fr
arceidf.ars.sante.fr
ra.efs.sante.fr
partage.ars.sante.fr
www.epmsi.atih.sante.fr
www.efs.sante.fr
partenaires.annuaire.sante.fr
sni.cloudflaressl.com
form.api.efs.sante.fr
ecarsproxy-frm.ars.sante.fr
*.efs.sante.fr

Certificate

The complete raw certificate details for www.epmsi.atih.sante.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE0DCCA7igAwIBAgISESFp/UA+k4Ospyr6wX96bnzoMA0GCSqGSIb3DQEBBQUA
MFcxCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMS0wKwYD
VQQDEyRHbG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gRzIwHhcNMTEw
OTAyMTcxNjM0WhcNMTIwOTAyMTcxNjM0WjBSMQswCQYDVQQGEwJGUjEhMB8GA1UE
CxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMSAwHgYDVQQDExd3d3cuZXBtc2ku
YXRpaC5zYW50ZS5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKr7
q/Zvem7She66H9gjAGffOBT0/6/pzdTMDaHsjEG9Qd4mYg1LXb4+xOglpf6NUd4T
gBWGViOvzUQ94NFMBKt6Brh/CuJmyXy22tvsjSkwhsqc0H/fc8DvdrPJxxTipZ2E
2stHgxg1Id3RF3YgX4SR4K8QNZIJB0A3qMSP1QxyQDKiK0x8/Ehvaq14gLfo/K7U
awVeFFd5snaVDCSEgzWQ4wDV6gvc+K1gXGe/XqfCTkxblgUdQMqN9ExT8WWHpKwS
qgOwcGyH+ztI7R1sfCZgTA2wTsxnjqtX2HrcCVSMgHBzERZMkaasifwQIzBG6kAB
R4roIIZiowqoyvkDUS8CAwEAAaOCAZkwggGVMA4GA1UdDwEB/wQEAwIFoDBMBgNV
HSAERTBDMEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5n
bG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzA3BgNVHREEMDAughd3d3cuZXBtc2ku
YXRpaC5zYW50ZS5mcoITZXBtc2kuYXRpaC5zYW50ZS5mcjAJBgNVHRMEAjAAMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5o
dHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzL2dzZG9tYWludmFsZzIuY3JsMFEG
CCsGAQUFBwEBBEUwQzBBBggrBgEFBQcwAoY1aHR0cDovL3NlY3VyZS5nbG9iYWxz
aWduLmNvbS9jYWNlcnQvZ3Nkb21haW52YWxnMi5jcnQwHQYDVR0OBBYEFDToOPuE
q14VK/Ul5l7nJwXkTnMuMB8GA1UdIwQYMBaAFJat+rBbuYNkKnbCHIpp2kLc/v0o
MA0GCSqGSIb3DQEBBQUAA4IBAQCpv3HlQYvD/wkrK9+TdcZ0Rkooki2bnzcybpen
c9qnVHsxsATyMrdwuHca2VjQZ+tJTSnRWk04xapFJbM03F4+kJK7wLdljvqR+OHj
PZ2EeKdtPx0hMFEtshiXYdrWVO4E6HFG/VT2RTvJb6xkwwqOmb58PC4U+oy/dEZE
eo+9PKNUgENJSwSRVFGM7wLZD9qPZAm8jr/Go4iKPfxXa/yrzmgVxGsoHHWnjAOk
GL9sOIHKfKX71chAjfp3mexy9ByGbhMcIRhVC6n0pMfkxGKKzu6W10nVCGdhLIUp
x7GavWHgsiSrhF1NvFR4vNDTJq46QBH8vUAXBR2QT56VCfdT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqvur9m96btKF7rof2CMA
Z984FPT/r+nN1MwNoeyMQb1B3iZiDUtdvj7E6CWl/o1R3hOAFYZWI6/NRD3g0UwE
q3oGuH8K4mbJfLba2+yNKTCGypzQf99zwO92s8nHFOKlnYTay0eDGDUh3dEXdiBf
hJHgrxA1kgkHQDeoxI/VDHJAMqIrTHz8SG9qrXiAt+j8rtRrBV4UV3mydpUMJISD
NZDjANXqC9z4rWBcZ79ep8JOTFuWBR1Ayo30TFPxZYekrBKqA7BwbIf7O0jtHWx8
JmBMDbBOzGeOq1fYetwJVIyAcHMRFkyRpqyJ/BAjMEbqQAFHiugghmKjCqjK+QNR
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492279062842009801955590713164488074231016
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-09-02 17:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-09-02 17:16:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.epmsi.atih.sante.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21584615799245586467846607647607895621375466803570582437336195592225780706724077925076946281577413314464910282485668473505653826788863426780119838815887866303862272862641579328646352148290403170499159136772322698041441417863665312025424265851436577040614029478544276305101396714598130756769225851640072374527977465110831282560419036648690095614457272360643733945584670078559070699654079829755251779681711572534813986967678763804264505348220159055040255227135850180950896421004600367547614067003508785360413473395668214220271425429477826501115764920700186929321200248753532930831252845814326080953307271955217039708463
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.epmsi.atih.sante.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'epmsi.atih.sante.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalg2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							34e838fb84ab5e152bf525e65ee72705e44e732e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96adfab05bb983642a76c21c8a69da42dcfefd28
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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