*.uleth.ca

- University of Lethbridge -

Issued by DigiCert SHA2 High Assurance Server CA

About this certificate

This digital certificate with serial number 01:da:db:98:20:6a:22:8a:96:cd:93:94:4b:99:4f:1e was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Lethbridge

Organization: University of Lethbridge
Organization unit: IT Services
State / Province: Alberta
Locality: Lethbridge
Country: CA

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:da:db:98:20:6a:22:8a:96:cd:93:94:4b:99:4f:1e
Serial Number (int): 2465602611361239748065410299377307422
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: ec:ac:b7:35:54:37:1a:1c:59:9b:75:c8:d0:fe:ec:9b:e5:72:1b:12
AuthorityKeyId: 51:68:ff:90:af:02:07:75:3c:cc:d9:65:64:62:a2:12:b8:59:72:3b

Fingerprint (sha1): 3e:66:fa:51:8f:f2:55:5d:d4:53:0c:0b:1f:67:56:7e:01:68:1d:14
Fingerprint (sha256): 17:30:4a:2d:f0:71:96:50:00:a0:c2:3d:8c:63:f5:1c:cd:75:fd:28:da:26:24:a0:c3:f6:ff:db:42:fe:1a:e5

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ha-server-g6.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ha-server-g6.crl

Check the revocation status for certificate *.uleth.ca

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.uleth.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.uleth.ca
uleth.ca
prod-inbssb.uleth.ca
banner.uleth.ca
bridge.uleth.ca
bridgelink.uleth.ca

Other certificates including the domain name uleth.ca

(limited to 100 certificates)
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
oasis.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
digitallibrary.uleth.ca
vpn.uleth.ca
vpn2.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
vpn.uleth.ca
campaigns.uleth.ca
*.uleth.ca
uslims.uleth.ca
vpn.uleth.ca
arrti.uleth.ca
webmail.uleth.ca
*.uleth.ca
login.uleth.ca
login-test.uleth.ca
bookstore.uleth.ca
*.uleth.ca
vpn.uleth.ca
*.uleth.ca
oasis.uleth.ca
*.uleth.ca
acs1.net.uleth.ca
webexchange.uleth.ca
ise.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
idp-test.uleth.ca
oasis.uleth.ca
campaigns.uleth.ca
idp.uleth.ca
*.uleth.ca
*.uleth.ca
expenseclaim.uleth.ca
login-test.uleth.ca
*.uleth.ca
*.uleth.ca
svnhost.cs.uleth.ca
*.uleth.ca
go.uleth.ca
bookstore.uleth.ca
*.uleth.ca
*.uleth.ca
campaigns.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
its-isemnt1-p.uleth.ca
*.uleth.ca
*.uleth.ca
batman-ms.net.uleth.ca
*.uleth.ca
learning.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
cwms-admin.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
*.uleth.ca
arrti.uleth.ca
*.uleth.ca
*.uleth.ca
bookstore.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
*.uleth.ca
millennium.uleth.ca
arrti.uleth.ca
libguides.uleth.ca
*.uleth.ca
its-iseadm2-p.uleth.ca
*.uleth.ca
webexchange.uleth.ca
*.uleth.ca
*.uleth.ca
libguides.uleth.ca
*.uleth.ca
acs2.net.uleth.ca
*.uleth.ca
libguides.uleth.ca
campaigns.uleth.ca
millennium.uleth.ca
digitallibrary.uleth.ca
*.uleth.ca

Certificate

The complete raw certificate details for *.uleth.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2465602611361239748065410299377307422
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 High Assurance Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alberta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Lethbridge'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.uleth.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 956716432501456575905499834114180105333401764074448065587707081683403543669942822676257882841411649908065153052291976520070607634663626201326221033745740451311030890010267670407679487264229176177091457707418771471645913217154102786223567303478737813246676584598622867789050985398875410160878158633798154635416380205114359262932303829560535787572338508876778690914875836338116708860912457127317258901650831018380140276951646961896544559336560818405637251793304889304293998350319949158569009632766695868125180532933663138466050036318828899533525633386689627048750663524730091391549479245678807124129150138761438521700966939904112150338390925678294409856830125384992850972612377525911756458618018497475461372931373661992734989096136236279356764995148162435012898530410799063866892989067830837026070120461981848045188229788022951625083243299699657676255115357495971294701571607763262961200555406411310163761844282731448250406866003141829494838751502854408850949781171806731634024369400504168637504640316031643717576144892387130385189459581344501183913562923251958628445351662636582064855014534812469347044135902585126707654693134058980291760172876603375642356067084123546967443554720662756316541736260182369436967026092563837434991228961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5168ff90af0207753cccd9656462a212b859723b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecacb73554371a1c599b75c8d0feec9be5721b12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prod-inbssb.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'banner.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridge.uleth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bridgelink.uleth.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ha-server-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2HighAssuranceServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000161ba74ecab0000040300473045022100c0bf6c4c8c5a7ac1cc77704ae6043523a1babc13d34a1d726cf3ad195b609c210220449f101e51f65196667166524eb88b7c60d02b300802b7c73adedd6b094ab9470075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000161ba74ed83000004030046304402204daad1d1199bd54bafcfa9fcad233ba2aa6c91d3a18918c14a4ff197ce2bffc30220727bc7265b603523604106d39c1952990397507c8974fad0daa4d6d555d33ad4007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000161ba74ed7f0000040300483046022100c87ff4dcd5b2782698e81444ff17b3cfde30320cba6182fb2967b7719d9fedf80221008e514b1d240632ce3f10d9a27c37fc0a861467e8b8c0490f91d07b3307c7c5ab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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