vpn.beds.ac.uk

- University of Bedfordshire -

Issued by QuoVadis EV SSL ICA G1

About this certificate

This digital certificate with serial number 20:89:2d:fc:b3:aa:5d:06:ab:4e:96:6d:88:e2:8e:cc:34:99:8c:e9 was issued on by QuoVadis Limited.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

University of Bedfordshire

Company registration number: Government Entity
Organization: University of Bedfordshire
Organization unit: ICT
State / Province: Bedfordshire
Locality: LUTON
Country: GB

QuoVadis Limited

Organization: QuoVadis Limited
Country: BM

This certificate has expire since

Certificate Details

Serial Number (hex): 20:89:2d:fc:b3:aa:5d:06:ab:4e:96:6d:88:e2:8e:cc:34:99:8c:e9
Serial Number (int): 185746912801401341937372808245245076030768123113
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: fd:2d:fc:10:4c:57:fa:fb:c5:1c:63:69:32:cd:d8:a5:2c:2f:87:f5
AuthorityKeyId: 55:58:86:ce:ba:7c:76:4e:99:13:a9:0f:d3:6c:9f:c2:f5:d3:3c:e3

Fingerprint (sha1): 72:23:4a:cb:39:0d:e7:1e:4f:ba:95:70:61:b7:7f:5c:c0:08:00:79
Fingerprint (sha256): 46:44:1c:7c:ec:30:d4:6d:cf:79:87:23:4a:40:15:e3:46:7a:6b:4d:e5:9b:ee:57:65:b9:72:b4:af:9e:00:6a

Issuing Certificate URL: http://trust.quovadisglobal.com/qvevssl1.crt

Revocation information

OCSP Server: http://ev.ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/qvevssl1.crl

Check the revocation status for certificate vpn.beds.ac.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpn.beds.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpn.beds.ac.uk

Other certificates including the domain name beds.ac.uk

(limited to 100 certificates)
1.wl.tockify.com
incapsula.com
breo.beds.ac.uk
*.beds.ac.uk
breo.beds.ac.uk
incapsula.com
survey.beds.ac.uk
www.testbeds.beds.ac.uk
bapps.beds.ac.uk
1.wl.tockify.com
vdesk.beds.ac.uk
vdesk.beds.ac.uk
myprint.beds.ac.uk
store.beds.ac.uk
incapsula.com
breo.beds.ac.uk
1.wl.tockify.com
1.wl.tockify.com
incapsula.com
quantarctest.beds.ac.uk
www.testbeds.beds.ac.uk
1.wl.tockify.com
adfs.beds.ac.uk
awp.beds.ac.uk
breo.beds.ac.uk
www.testbeds.beds.ac.uk
adfs.beds.ac.uk
adfs.beds.ac.uk
adfs.beds.ac.uk
eduroam.beds.ac.uk
www.testbeds.beds.ac.uk
sync.beds.ac.uk
store.beds.ac.uk
1.wl.tockify.com
1.wl.tockify.com
brum.beds.ac.uk
testbeds.beds.ac.uk
store.beds.ac.uk
extspeakerdev.beds.ac.uk
bapps.beds.ac.uk
eduroam.beds.ac.uk
timetable.beds.ac.uk
quantarc.beds.ac.uk
store.beds.ac.uk
1.wl.tockify.com
bapps.beds.ac.uk
vpn.beds.ac.uk
incapsula.com
1.wl.tockify.com
www.testbeds.beds.ac.uk
mailhost.beds.ac.uk
1.wl.tockify.com
www.testbeds.beds.ac.uk
incapsula.com
1.wl.tockify.com
events.beds.ac.uk
adfs.beds.ac.uk
adfs.beds.ac.uk
vdesk.view.beds.ac.uk
vpn.beds.ac.uk
allocator.beds.ac.uk
conferencecentre.beds.ac.uk
www.testbeds.beds.ac.uk
remoteassistance.beds.ac.uk
incapsula.com
in.beds.ac.uk
1.wl.tockify.com
cybhapp.beds.ac.uk
breo.beds.ac.uk
webedit.beds.ac.uk
belong.beds.ac.uk
incapsula.com
bapps.beds.ac.uk
incapsula.com
*.brum.beds.ac.uk
webedit.beds.ac.uk
1.wl.tockify.com
vdesk.beds.ac.uk
vpn.beds.ac.uk
mybedslife.beds.ac.uk
*.beds.ac.uk
*.cst.beds.ac.uk
incapsula.com
www.testbeds.beds.ac.uk
mysite.beds.ac.uk
1.wl.tockify.com
survey.beds.ac.uk
www.testbeds.beds.ac.uk
events.beds.ac.uk
uc03.beds.ac.uk
diskstationlrc.beds.ac.uk
campus.beds.ac.uk
careersonline.beds.ac.uk
incapsula.com
incapsula.com
agresso.beds.ac.uk
incapsula.com
vdesk.beds.ac.uk
extspeaker.beds.ac.uk
cardev.beds.ac.uk

Certificate

The complete raw certificate details for vpn.beds.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3n1A0zNY6leEyJKse9yj
F9OOu1q3J0TMDh/0K/6nT0wKvn9oy2KNY+LYPqk0p9oiDbF9SQBK+vWMaraqKwjm
B6gTAWJkCJH4snJAuT+yj0AL2++j8x1PBzjBypuHxPHHJMYoC8c2aX8HQhn0x6G5
HXlEDiKJt9GM7hXG7eJ7ehL4zIN/djLhE0/mcNUtI1zOSDzVkujxfIpvrd+ppPtk
Csw3gsvHCd4Y50QHLz4+w5MqW2fjnI8CESxxxFG/SpO+tSwJ7VCWcRcNP0sGorgs
wNRXEKQ6M0Bmnop+SG4f3mRVuCAbk9btTo+XEVe9Q6z+nwmGkZfBAdI8OlX0oIQ6
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 185746912801401341937372808245245076030768123113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'QuoVadis EV SSL ICA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-19 09:16:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-19 09:26:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bedfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'LUTON'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'University of Bedfordshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'vpn.beds.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28086668368561771437294846987111499885853960103130368003020143210099849220332229797253508248664840070987562184401557700939730313722731757982352077399134949968665075188013233799979272202906867755004563400448463001594432796581527197869328323794604861207108815505977321651274428156963062458250581344407136310069887299330600268088006560267918298426787997072641914812586448507104469289253668352087007745719243586763937126770272928153435799376616697221903031537728968101030099912836198633607380614858463308968726396269057226113404158842157521592812356715183034339801090746967123218955134721162884209790055238626074811448027
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/qvevssl1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ev.ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fd2dfc104c57fafbc51c636932cdd8a52c2f87f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 555886ceba7c764e9913a90fd36c9fc2f5d33ce3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.2.100.1.2 (QuoVadis EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.quovadisglobal.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/qvevssl1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn.beds.ac.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015b8588eb180000040300483046022100e979e8c0ca4638d82edd1af1a7b6232aa60b4d0879231fca7c3dbcc61362df50022100b6de867fcf87589e0dde7c1642b85a2b78a3a585521b800b795c07958b40732e007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000015b8588eb5600000403004730450220666e8c0a522fea213d8a447ccd9366210272fef367f40293ef0689fb83f5660b022100953eeda4d3597573bf6fad174dc7f4ac3230ccca4957b2c854fae3b105b68ffe007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015b8588eb4c0000040300473045022066a719e75673b631adba43d4adaf81ed00991657b14317116b912ec4dd6bb1f8022100844058f503d2fdaab02bece000f10af0785baeded59902c13270bb0a5deaaacc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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