ehids.eh.ncdhhs.gov

- Executive Office of the State of North Carolina -

Issued by DigiCert Global CA G2

About this certificate

This digital certificate with serial number 0a:dc:c9:40:bc:51:84:f6:5b:c6:e0:1c:94:12:8a:8b was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Executive Office of the State of North Carolina

Organization: Executive Office of the State of North Carolina
Organization unit: Health and Human Services
State / Province: North Carolina
Locality: Raleigh
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:dc:c9:40:bc:51:84:f6:5b:c6:e0:1c:94:12:8a:8b
Serial Number (int): 14438667159941288440677257504869223051
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: ac:58:4e:b3:07:12:d2:df:c2:bf:b9:a3:13:c1:69:98:df:5b:7f:12
AuthorityKeyId: 24:6e:2b:2d:d0:6a:92:51:51:25:69:01:aa:9a:47:a6:89:e7:40:20

Fingerprint (sha1): 8c:a6:74:bb:69:0f:aa:de:c3:76:b0:02:0e:07:57:09:0f:b3:11:a4
Fingerprint (sha256): 24:12:cd:0b:7d:22:dc:83:ec:1d:3c:2c:44:2d:91:72:5a:2e:9f:52:57:90:33:b8:bc:57:2e:56:9e:ab:e8:de

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalCAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalCAG2.crl

Check the revocation status for certificate ehids.eh.ncdhhs.gov

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ehids.eh.ncdhhs.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

login.eh.ncdhhs.gov
ehids.eh.ncdhhs.gov
reports.eh.ncdhhs.gov

Other certificates including the domain name ncdhhs.gov

(limited to 100 certificates)
files.nc.gov
www.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
vendor-wic.ncdhhs.gov
testsecurity.ncdhhs.gov
files.nc.gov
www.credentials.ncdhhs.gov
*.ncdhhs.gov
mit.api.sip.mes.ncdhhs.gov
tobaccopreventionandcontrol.ncdhhs.gov
files.nc.gov
files.nc.gov
ncdhhs.gov
policies-dev.ncdhhs.gov
www.eureka.ncdhhs.gov
injuryfreenc.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
files.nc.gov
test.mft-console.sip.mes.ncdhhs.gov
ncdhhs.gov
files.nc.gov
myncwic-uat.ncdhhs.gov
icam.mes.ncdhhs.gov
www.credentials.ncdhhs.gov
ncdhhs.gov
injuryfreenc.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
wrtk.ncdhhs.gov
uat.sip.mes.ncdhhs.gov
www.bcccp.ncdhhs.gov
www2.ncdhhs.gov
ncdhhs.gov
*.dph.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
*.ncdhhs.gov
www.ccr.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
files.nc.gov
*.ncdhhs.gov
news.ncdhhs.gov
*.ncdhhs.gov
bcccp.ncdhhs.gov
ncdhhs.gov
view.sms.email.ncdhhs.gov
www.dma.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
ncdhhs.gov
socializesafer-uat.ncdhhs.gov
*.ncdhhs.gov
go.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov
files.nc.gov
mes.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
phpmyadmin-uat.ncdhhs.gov
ehids.eh.ncdhhs.gov
vendor-wic.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
outreach.ncdhhs.gov
www.credentials.ncdhhs.gov
*.dph.ncdhhs.gov
loginpp.eh.ncdhhs.gov
testhcbs.ncdhhs.gov
*.ncdhhs.gov
ehids.eh.ncdhhs.gov
files.nc.gov
ehidstest.eh.ncdhhs.gov
ncir-dev8.ncdhhs.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
files.nc.gov
*.ncdhhs.gov
jtcommunicationbulletins.ncdhhs.gov
*.ncdhhs.gov
*.ncdhhs.gov
sni.cloudflaressl.com
ncfastappinvp.ncdhhs.gov
news.ncdhhs.gov
bcccp.ncdhhs.gov
*.ncdhhs.gov
*.dph.ncdhhs.gov
files.nc.gov

Certificate

The complete raw certificate details for ehids.eh.ncdhhs.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhv6nj1a+s2uhKZ5w0zw
veI+5ivUIC196+7U6fv3J7f6ae/62FWl2aCUXk4IySAv1UtA3qB/8WeSfYRrz858
QoeBz3NjDdySRkd4ZlI7u7m0Id87RP72FZCJkewoHEqD3Jqmnf3FfPa/SMJVboq4
N0dvYytN6Bs8Qw5RCSsVy800WsuMGuqqGUBCIt1xCqo8wVbvAq7usKJqKIDxf5qf
xImGIkpiQHFT0lr5DDKQIT2n2f5d3kR+FC2NPZaTKnx0DR2+QDBUphExG6m0buk3
tI1Q/GGx1x6zLeDgemCqVypDV6Pt4nqoqO7WFRs4MSGVsVBpVGWfqHZ3Jgtzhs8D
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14438667159941288440677257504869223051
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-23 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Raleigh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Executive Office of the State of North Carolina'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Health and Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ehids.eh.ncdhhs.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23494121671487443727197303382028328022854196934900955009247239421369165533512394440561451395600843872727157627342044674972753333844719366050709935987719792268641520555682801406200211329770488733552154518975456398944978661335838886882258599866585480385724966528546536786852974690607719451902257549652549017984399510465962375069022974015790135421243149172464753277835595367295186281736028977280483389505056705701251786278589575219325734521555064393315065788259291918318273015873552989996723666755355361830152630258837289805026998032831554019945634481451641697418115867407904035536961077667595627733639212183199761236937
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 246e2b2dd06a925151256901aa9a47a689e74020
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac584eb30712d2dfc2bfb9a313c16998df5b7f12
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.eh.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ehids.eh.ncdhhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reports.eh.ncdhhs.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016220e3219c000004030047304502202ba2e5a7d66f71cc21c6f9522db0f864df678023b3cf6e465aa00d7128d72337022100c2d90e0006926a5d488cbba7f7e7746c4dbe5f0720d47b4e8cfa9c73698437c10076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016220e323020000040300473045022100a0424d99cf13d631dcf64fcdbc1beccbf0ea8982d685807c431dafb132f41ef0022009fcc46ff37f2d64dc4df939a79198a01a243a0eeb06c400d68d4b26c36c2df2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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