rest-api.mdlive.com

- Cigna -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1b:f9:0d:e0:81:27:24:db:17:be:86:69:b6:90:d0:75 was issued on by Entrust, Inc..

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cigna

Organization: Cigna
State / Province: Connecticut
Locality: Bloomfield
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1b:f9:0d:e0:81:27:24:db:17:be:86:69:b6:90:d0:75
Serial Number (int): 37182319262372039735493789031626494069
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 22:88:ce:9e:dc:59:7a:3c:75:88:52:ec:f8:61:e4:1f:39:00:83:64
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): a7:4f:ca:5d:d5:cc:9e:a8:7e:06:0c:73:23:e9:b1:e3:9a:a2:f1:61
Fingerprint (sha256): 21:a0:33:31:4f:08:ba:4a:b8:72:a1:af:3d:01:b7:4c:03:40:e8:35:f6:a4:03:4b:13:8d:b8:21:56:45:6d:b8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate rest-api.mdlive.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rest-api.mdlive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rest-api.mdlive.com
stage-rest-api.mdlive.com
sandbox-rest-api.mdlive.com

Other certificates including the domain name mdlive.com

(limited to 100 certificates)
uptime.porteighty.hosting
status.melodydns.com
mi.portal.sagrado.edu
irpstatus.streamlineit.ca
status.labs.caes.ucdavis.edu
mylanstatus.globalvisioninc.com
alpha-status.iole2e.iolportal.com
mi.portal.sagrado.edu
status.virtuas.com
*.pinterestceros.com
trust.ricardo.ch
irpstatus.streamlineit.ca
irpstatus.streamlineit.ca
status.amanah.com
members.mdlive.com
status.amanah.com
irpstatus.streamlineit.ca
mylanstatus.globalvisioninc.com
members.mdlive.com
monitor.synercomm.com
customer-sp.site24x7.com
irpstatus.streamlineit.ca
www.fleximonitor.com
livetracker.one-box.co
sts.azure.mdlive.com
status.channelengine.com
pages.mdlive.com
monitor.ars-info.com
status.uk.deptagency.com
ceros3.map.fastly.net
*.mdlive.com
developers.mdlive.com
*.pinterestceros.com
irpstatus.streamlineit.ca
sa11gl.wpc.edgecastcdn.net
mobile-product.mdlive.com
customer-sp.site24x7.com
mi.portal.sagrado.edu
customer-sp.site24x7.com
mylanstatus.globalvisioninc.com
status.zenithpayments.com.au
status.investisdigital.cloud
customer-sp.site24x7.com
livetracker.one-box.co
enterpriseenrollment.mdlive.com
status.wavity.info
status.savantx.io
mi.portal.sagrado.edu
irpstatus.streamlineit.ca
status.fluentpro.com
mylanstatus.globalvisioninc.com
mi.portal.sagrado.edu
irpstatus.streamlineit.ca
mdlqa7.mdlive.com
status.medpt.com
mi.portal.sagrado.edu
livetracker.one-box.co
sa11gl.wpc.edgecastcdn.net
customer-sp.site24x7.com
customer-sp.site24x7.com
patient.mdlive.com
sts.azure.mdlive.com
integrations.mdlive.com
livetracker.one-box.co
developers.mdlive.com
mon.evdns.org
sa11gl.wpc.edgecastcdn.net
sa11gl.wpc.edgecastcdn.net
customer-sp.site24x7.com
customer-sp.site24x7.com
mylanstatus.globalvisioninc.com
mylanstatus.globalvisioninc.com
smetrics.mdlive.com
customer-sp.site24x7.com
status.taggun.io
mi.portal.sagrado.edu
sts.azure.mdlive.com
mi.portal.sagrado.edu
mylanstatus.globalvisioninc.com
rest-api.mdlive.com
status.amanah.com
status.aunsight.com
snif9c2gl.wpc.edgecastcdn.net
www3.mdlive.com
irpstatus.streamlineit.ca
mi.portal.sagrado.edu
snifab3gl.wpc.edgecastcdn.net
irpstatus.streamlineit.ca
customer-sp.site24x7.com
mi.portal.sagrado.edu
monitoring.dtechservices.net
mi.portal.sagrado.edu
mdlnext.mdlive.com
mylanstatus.globalvisioninc.com
sa11gl.wpc.edgecastcdn.net
ceros3.map.fastly.net
livetracker.one-box.co
mylanstatus.globalvisioninc.com
stage-sso.mdlive.com
mylanstatus.globalvisioninc.com

Certificate

The complete raw certificate details for rest-api.mdlive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2LGfAFqrma8qDX5TGUL2
fTHIfmQPGafPCSLhoFB66+TwFP1uhvkTZZeKqKNQ6bpvb6jfsbRjVWnOwTLOJroi
I9sDwXdIRxd3//17V59i6w5a+Me59h3+n/joEsVy9mV3zeE94RQeTLz33+iJniRq
w0HIOixfkfQK10RAyDZFYOvkGOrxENwEeSw9ciks0qpWVGwuSFNicLBUTdaRVAZ+
rLqg9l0Yb+iOhNYEpP8mVmq5O8A3Kz4Of5bxb1q1GUhoK1yOGSwegFztyinjwUbz
IO3DhDbU8+GkxcWS4R7xiIu2yDj+A/CLjUCzZu9QXsTnoFI2jWpgOTgmdbGNwYBK
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37182319262372039735493789031626494069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-17 16:21:19 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-17 16:21:18 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cigna'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'rest-api.mdlive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27355062101119662918625895310780687813831382713642139478255990359616083276850354803625189256288399759481622918096031864072830727307286974871964178024106553096449913750716602877274397203528765257424701217994423162440799792311607939498112357288589236864252942502830643528561605161927363368013059052100125171472308266130401229850136123801692912568917715041486525550448458332130826862437406181397894168672046236801769975563870780436823239586035468081510167703815894548326051952486652460663767809022053347376107773471397288858683141047804510773640916426831168740964880172859661578839923124497877886341209474461739991976669
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2288ce9edc597a3c758852ecf861e41f39008364
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rest-api.mdlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage-rest-api.mdlive.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sandbox-rest-api.mdlive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000185c088f608000004030046304402201595a917eee020e9953e1e34bae00db059e623dd266dad0cccccfceb726c102b0220095b2618a9be150e9902dbbf52f11cd4b6f007b32e6f776186c3fa5616e4f04e0077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000185c088f60c0000040300483046022100a0bc2e19463cda1418935187d725f4213ab9356641b3ac41922a68153cdb7f45022100b5ddaa8a4a9bd88526b3578120664e3e8147c4ad5b4d82e73475199f63b8ade100750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000185c088f6ee000004030046304402204486c00d6b302fa6227b748fe0934cb3395209543970875f2f80c7f005f9026d02205d7933a55021dc481072d0092bba7acef3231b33704e8eea81dc9f296bb780b1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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