mallorn.dlib.indiana.edu

- Indiana University-Bloomington -

Issued by InCommon RSA Server CA

About this certificate

This digital certificate with serial number 3f:34:9d:27:5a:d4:c4:85:e5:df:27:7a:a7:d0:c1:2f was issued on by Internet2.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Indiana University-Bloomington

Organization: Indiana University-Bloomington
State / Province: Indiana
Locality: Bloomington
Country: US

Internet2

Organization: Internet2
Organization unit: InCommon
State / Province: MI
Locality: Ann Arbor
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3f:34:9d:27:5a:d4:c4:85:e5:df:27:7a:a7:d0:c1:2f
Serial Number (int): 84014550627410493609680119659794317615
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cf:7f:81:c4:da:9c:85:a0:a2:e9:82:7b:70:03:ba:57:a2:94:49:59
AuthorityKeyId: 1e:05:a3:77:8f:6c:96:e2:5b:87:4b:a6:b4:86:ac:71:00:0c:e7:38

Fingerprint (sha1): 44:3e:08:5a:5f:cf:ab:97:a3:c4:f0:a8:07:bc:6f:12:bd:7b:79:45
Fingerprint (sha256): 48:e4:7e:47:6e:0e:50:3b:e7:9f:25:98:1b:33:df:79:80:ab:40:92:1b:be:84:fd:16:4f:aa:52:e8:f0:aa:13

Issuing Certificate URL: http://crt.usertrust.com/InCommonRSAServerCA_2.crt

Revocation information

OCSP Server: http://ocsp.usertrust.com
CRL Distribution Point: http://crl.incommon-rsa.org/InCommonRSAServerCA.crl

Check the revocation status for certificate mallorn.dlib.indiana.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mallorn.dlib.indiana.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mallorn.dlib.indiana.edu

Other certificates including the domain name indiana.edu

(limited to 100 certificates)
floorplans.service.indiana.edu
bl-s4b-dirpool.ads.iu.edu
cid.indiana.edu
alumni.indiana.edu
patshih.sice.indiana.edu
opera.imu.indiana.edu
info.educ.indiana.edu
owa.exchange.iu.edu
iuware-test.uits.indiana.edu
sgis.indiana.edu
www.vpfaa.indiana.edu
test.fims.indiana.edu
physics.indiana.edu
mfodev.music.indiana.edu
iuhssis.indiana.edu
kemprd.iuf.indiana.edu
list.indiana.edu
iufedocs.iuf.indiana.edu
nwb.slis.indiana.edu
www.cs.indiana.edu
mysite.sp.indiana.edu
uconnectlabs.com
maps.indiana.edu
sustain.iu.edu
vdi.ait.indiana.edu
www.iumj.indiana.edu
apps.indiana.edu
uconnectlabs.com
iujur.iu.edu
unitedway.indiana.edu
munger.indiana.edu
www.informatics.indiana.edu
iubshutdown.indiana.edu
utilities-dev.registrar.indiana.edu
chemical.inventory.indiana.edu
apps3.indiana.edu
test.pe.registrar.indiana.edu
ccsrv1.psych.indiana.edu
earm.registrar.indiana.edu
fatalii.uits.indiana.edu
ucso.indiana.edu
alumni.indiana.edu
holtzlab.psych.indiana.edu
dev.citl.indiana.edu
iontrap.physics.indiana.edu
ella.ils.indiana.edu
iu-cv-xa7psf-02.uits.indiana.edu
external-relay.indiana.edu
housing.indiana.edu
college.indiana.edu
residency-test.indiana.edu
dev1.igs.indiana.edu
datainnovation.soic.indiana.edu
projectdox.vpad.indiana.edu
uconnectlabs.com
josotl.indiana.edu
carina.indiana.edu
kb.indiana.edu
test.histdegr.indiana.edu
fast.oem.indiana.edu
uconnectlabs.com
grades.indiana.edu
wsa001.uits.indiana.edu
provost.indiana.edu
echo.uits.indiana.edu
partnership.publichealth.indiana.edu
websurv.indiana.edu
rt-spam.uits.indiana.edu
uconnectlabs.com
www.dailyrental.motorpool.indiana.edu
api.insite.indiana.edu
www.repository.law.indiana.edu
alumni.indiana.edu
oemservices.indiana.edu
soco.sice.indiana.edu
calmweb.chem.indiana.edu
hydrogeochem.earth.indiana.edu
engagedlearning.indiana.edu
bksan2.bus.indiana.edu
monitor1.soic.indiana.edu
lmicdata.bio.indiana.edu
rosvall.lab.indiana.edu
fims.indiana.edu
wiki.dlib.indiana.edu
blog.provost.indiana.edu
dgrc-chris.bio.indiana.edu
bugs.dlib.indiana.edu
drugs.indiana.edu
app.law.indiana.edu
hpplc.indiana.edu
iu-cv-wid01.uits.indiana.edu
silo.cs.indiana.edu
collegiatelink6.campuslabs.com
uconnectlabs.com
livechat.ait.indiana.edu
rosters.indiana.edu
cid.indiana.edu
cgb-dev.cgb.indiana.edu
placements.nursing.indiana.edu
lillyaz.indiana.edu

Certificate

The complete raw certificate details for mallorn.dlib.indiana.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+g3jRX6pAqYcj7Sy9NQ
48JuBT0hPt4igL/vgrWMqj+IN2rWQfGgx5F9V64FmpHrUyqtSS0csGts3UaiO2O/
PY6AI62tHqSzIyrr3iCtsaDloLm9mtt8BBOTXFgSC+W7bgEXRAN2Ch8Hd1hMYoRD
4e3BaV7rLVSgLV7YJfd5iCIs+LXZElH+cgnd6w96OBkFBbkzVk9Wi6mfH29Q3N2A
kPUbHg7dzyQpREPVj/Qkj0XkhLtgu04DFbTlrANcoWxj30ykKj1Cbt2lnTJHGCfu
2tyjPMa21TxA+rtfYVGsPx4N9jgXMzJdawB4pmz5t/xjuOdNkni2L7swusuZj4c6
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 84014550627410493609680119659794317615
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ann Arbor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Internet2'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'InCommon RSA Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana University-Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mallorn.dlib.indiana.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23721073497515049306840752377724049195850476028850004156927938916180282967095737911894566571671593604001238052136395575727009699821904693175114545819550930638382855527539497523130308260998565026303571426019342613720254307093565051402237444774772656233710859286346706711996177382527071596165076914725081885835563872705856678788921225176526344069224040593515442945467103556917352837121073544079919863658973360939275361529326180715018024743893120926004925505524287478885852855852046325018580452623735621569221188128733491730225509270000513084019050955703887770690243710910596897474461182277686984308889144619510194977499
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1e05a3778f6c96e25b874ba6b486ac71000ce738
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cf7f81c4da9c85a0a2e9827b7003ba57a2944959
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.5923.1.4.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.incommon.org/cert/repository/cps_ssl.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (61 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.incommon-rsa.org/InCommonRSAServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.usertrust.com/InCommonRSAServerCA_2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.usertrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mallorn.dlib.indiana.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007700adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000017db98e5a6e0000040300483046022100e809560cee39ab192793d83e851fa9675d2d00ebbcf263e7d8d9959b0a76406c02210096902508bb63d1d7a261de68516bf3fd6725fb3c812a5524f904f6e16fcf73fc0077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000017db98e5a600000040300483046022100db2200dc67a43f64386b378542c479b9b039619ddb08beb326921592f5fe72140221009ac1b84944de2dbd2f0411673b9624c8e773754f400cc7a1903f7a1d268b7c06007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000017db98e5a3a0000040300473045022100bd322da5292cd6164a1adb0970a519e178872aeabfb1e9f41b9b4e397730797e0220073a6ca0818364f1d754510864bc42d52d03913ef0cc963d0e3af205d11be0db
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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