pfa.levexis.com

- TagMan Ltd -

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 02:63:b7:68:5c:61:60:e7:97:0f:6c:d9:c8:f3:0a:1d was issued on by DigiCert Inc.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

TagMan Ltd

Organization: TagMan Ltd
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:63:b7:68:5c:61:60:e7:97:0f:6c:d9:c8:f3:0a:1d
Serial Number (int): 3176213329841493747542465705195801117
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: d7:2b:63:59:a4:15:b3:78:c1:79:6b:cd:7d:b1:fb:c5:a8:f4:33:0d
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 35:5c:5f:48:65:c8:66:7a:2f:b7:6c:02:59:37:a1:d3:b0:38:bc:4d
Fingerprint (sha256): 39:4f:90:a7:c0:c8:97:f6:6a:5c:a8:1f:6b:55:4c:97:e0:ef:17:71:49:a7:88:87:56:e9:eb:bf:30:7c:6f:cb

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate pfa.levexis.com

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for pfa.levexis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

pfa.levexis.com
attribution.batesfootwear.com
attribution.chacos.com
attribution.grasshoppers.com
attribution.hushpuppies.com
attribution.keds.com
attribution.merrell.com
attribution.saucony.com
attribution.sperry.com
attribution.striderite.com
attribution.wolverine.com
ensighten.airnewzealand.co.uk
madata.newlook.com
tagman.heathrow.com
tagman.heathrowexpress.com
tagman.stylebop.com

Other certificates including the domain name levexis.com

(limited to 100 certificates)
res.levexis.com
*.levexis.com
*.levexis.com
*.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
pfa.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
pfna.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
*.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
s8.wac.edgecastcdn.net
res.levexis.com
s8.wac.edgecastcdn.net
res.levexis.com
pfa.levexis.com
sec.levexis.com
res.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
pfa.levexis.com
*.levexis.com
*.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
s8.wac.edgecastcdn.net
pfa.levexis.com
res.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
s8.wac.edgecastcdn.net
sec.levexis.com
sec.levexis.com
*.levexis.com

Certificate

The complete raw certificate details for pfa.levexis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2liVKFpHyU7UaPA6DCm
yBZCvCyTxckYugFeaygjDzIRUtGiEnAOjkQQYlCgyccdXsOqc0c1s05M7WXMRBzS
swdR8ydUUgpBd1VCeq/kPoeU4pRqqDgJRfe+J0BPsytV3wQzSD6IAMInjr6/yYNk
zVoXPs01a+X7oFwOgYk3KGH0YW8GztPI/dZdVDckoKB0DTNCuMsSbeianI2+MA8z
zfbmLxWOB3aPFFidIN+3b1jrWMi01rfKCeiZDqEhUXWJT+GdYYGHGdfcwYeDH4xH
kvWCV7WOeCpEifgqihCFGM5+PWWoccravvarUmLkUJJEAtmZtMz38fXAu+eCVVsc
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3176213329841493747542465705195801117
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TagMan Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'pfa.levexis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18104044448589900336838135861663732569940892972013595216397747790039235791896712996450257206286047438034322612658519510207381249362926770482258159394398379423672100526932993503399362631342398139657598396226259233811249438057438233475391387156924849109510379876456594930424886336062270153989162008927483407476148954556408379906866656247294964921813455008397793019526980780471512635231232335056019665055459240807315417741253022532595402903662812853906121001188050136523097016527286099945983356639567440919343161384576337205948570575563925694649057377482305793528786619340653144244899168074245204588510286497557379751131
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d72b6359a415b378c1796bcd7db1fbc5a8f4330d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (407 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pfa.levexis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.batesfootwear.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.chacos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.grasshoppers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.hushpuppies.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.keds.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.merrell.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.saucony.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.sperry.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.striderite.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'attribution.wolverine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ensighten.airnewzealand.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'madata.newlook.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.heathrowexpress.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tagman.stylebop.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001619b59ac580000040300463044022022b6976119fdeee117e1b09db71a78aff8139c9b20e0e882f9f9cc623daa908f022042c770d7eba2e609031d195e305576d00db5a1d6aad5b6e557e441bc0316b2420076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001619b59ac2700000403004730450220056ea7818fb44bc15753df661e136ed52d62a3f5b67474c1fe230fcabe3ba82c022100fc4991589a27187ff4cc19613ca785e5162e6e9ff81271c8fdeb5fffb1aa6961
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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