lyncdiscover.dentsuaegis.com

- Dentsu Aegis Network LTD -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 07:79:0f:e5:fc:a4:00:db:bd:00:fe:a2:5a:27:96:91 was issued on by DigiCert Inc.

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Dentsu Aegis Network LTD

Organization: Dentsu Aegis Network LTD
Organization unit: IT
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 07:79:0f:e5:fc:a4:00:db:bd:00:fe:a2:5a:27:96:91
Serial Number (int): 9933186347958886157820381500239484561
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 04:24:2a:31:e2:15:d0:1e:9e:a2:b7:ed:00:9f:1f:8c:45:67:4b:e4
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3b:f2:23:4f:d4:e2:19:71:96:8d:b7:31:88:ce:24:e1:f1:75:c1:86
Fingerprint (sha256): 51:b5:6e:48:c3:18:21:d2:3d:13:ed:06:9e:59:30:f9:1c:34:fd:f7:bd:7e:c4:97:b0:fa:22:7c:bc:ec:1c:a1

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate lyncdiscover.dentsuaegis.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncdiscover.dentsuaegis.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncdiscover.dentsuaegis.com
skypewebam1.dentsuaegis.com
webappsap1.aemedia.com
skypewebem2.dentsuaegis.com
webappsem2.aemedia.com
webappsem2c.aemedia.com
skypewebap1.dentsuaegis.com
webappsam1.aemedia.com
skype.dentsuaegis.com
skypewebem1.dentsuaegis.com
webappsem1.aemedia.com
www.skypewebem1.dentsuaegis.com
webappsem2b.aemedia.com

Other certificates including the domain name dentsuaegis.com

(limited to 100 certificates)
firebaseapp.com
firebaseapp.com
sipem2.aemedia.com
firebaseapp.com
firebaseapp.com
apac-remote-2.dentsuaegis.com
firebaseapp.com
firebaseapp.com
sovnsgn1gw01.dentsuaegis.com
firebaseapp.com
remote-hu.dentsuaegis.com
firebaseapp.com
firebaseapp.com
pexip-euw1-conf01.video.dentsuaegis.com
developer.dev.unloc.app
firebaseapp.com
remote-za.dentsuaegis.com
*.arxivarprod.dentsuaegis.com
www.14p9.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
www.taftechnology.com
firebaseapp.com
marathonse.dentsuaegis.com
myapps-sso.dentsuaegis.com
firebaseapp.com
*.dentsuaegis.com
firebaseapp.com
firebaseapp.com
remote-uk.dentsuaegis.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
sipam1.aemedia.com
firebaseapp.com
firebaseapp.com
outlook.aemedia.com
securelogin.wlan.dentsuaegis.com
*.dev.dentsuaegis.com
firebaseapp.com
sochgva1gw01.dentsuaegis.com
firebaseapp.com
mhvroyalmotors.com
trabajaendan.dentsuaegis.com
firebaseapp.com
vhdanstbci.hec.dentsuaegis.com
firebaseapp.com
firebaseapp.com
sip.aemedia.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
*.uat.dentsuaegis.com
*.release.dentsuaegis.com
firebaseapp.com
firebaseapp.com
SIPEM1.DENTSUAEGIS.COM
secure.anz.dentsuaegis.com
lyncweb.aemedia.com
firebaseapp.com
firebaseapp.com
pintest.dentsuaegis.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
firebaseapp.com
SIPEM1.DENTSUAEGIS.COM
firebaseapp.com
firebaseapp.com
sofrpar1gw01.dentsuaegis.com
firebaseapp.com
www.retkella.com
firebaseapp.com
anz-remote.dentsuaegis.com
sipem2.dentsuaegis.com
firebaseapp.com
jenkins-globaltools.dentsuaegis.com
trabajaendan.dentsuaegis.com
remote-us.dentsuaegis.com
marathonno.dentsuaegis.com
firebaseapp.com
remote-cl.dentsuaegis.com
firebaseapp.com

Certificate

The complete raw certificate details for lyncdiscover.dentsuaegis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7yiSvNW+n4nF4VEVd/rU
/+2n5x8VLUpQ26qxECZnWqgEZL1XfO0vDvQjVum65oTGbgqXYNz0fzXaFBGXnxCI
9JtFCuhr2GjJe/Y3iA7aCE5SbVQ2nNGJtjjksbxvjv4wh1zx51EwkVZgNgXfiIpC
tGVhzcID/+tAJZgwvngiDxaahbpQnESSS/rYp5fWy9zIMjQzaffFm7KVnyW+JVPi
OrLo1JvuAXPj1yMHG8jdrtwlLW+P7YTGhD7jbkTn6MpjKgbfA1C3ukZaqdWPEBxj
dLA5+K8gtbuSQI04FJ/pTFn9j6TepJiU1+aW1az4T+pHxqZWmH3Iy1ReJ0N8MYsw
UwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9933186347958886157820381500239484561
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dentsu Aegis Network LTD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncdiscover.dentsuaegis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30190962274481957843278971149880998782662526573554732928017025906620392719495094914949974542430790324040988447911540019990572175207222989926049431263830509710883563936340151075365624689599791629018741835783333809840826295295868056130492663129515180669539565749657610721903811410549894292668349474874513337844365781118030732985194265628439543144245433928158701145534845150501635189463294784775561655745102843380648451531484466899475008764308608480535753501408765973596008202623110644897732101812857381043334243462883908613881577287586496712095046505746323865229482255986250346489345918205105167574828071339892929146963
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							04242a31e215d01e9ea2b7ed009f1f8c45674be4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (352 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebam1.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsap1.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebem2.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsem2.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsem2c.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebap1.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsam1.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skype.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'skypewebem1.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsem1.aemedia.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.skypewebem1.dentsuaegis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webappsem2b.aemedia.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016a25d87a8d0000040300483046022100d87242ab1173572fe4a720d913afbf68b20a85e4d650ead428bd21c581bf1a39022100a98de967441ad41f5e486f1467c1931d06b95527f0fbeee39dca9a55094fbeba0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a25d87ba90000040300483046022100b058709b543ef7e088d64ce5fe83a5604c8344a562fd50e497651aff01a01a66022100e4be75d20334a0a682e240a5fef22812b11249c39b90cb5e4729d88945c675d8
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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