learning.daemen.edu

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 07:89:bb:3b:d1:f9:78:6e:07:62:aa:c8:8c:f5:73:fa was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=learning.daemen.edu

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:89:bb:3b:d1:f9:78:6e:07:62:aa:c8:8c:f5:73:fa
Serial Number (int): 10019738190155111994797653551924737018
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:3f:ba:7a:b9:92:d9:bd:43:0f:61:6b:9d:b5:52:00:de:52:41:bf
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): d5:1e:b4:74:75:68:54:b9:01:ec:6a:44:58:51:99:fc:05:fe:82:02
Fingerprint (sha256): 5a:d5:77:6a:b5:ad:82:70:c7:ec:3c:ac:26:f7:e7:b2:c1:16:38:4b:78:5a:f8:0f:5c:11:b1:0a:24:84:e2:cb

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate learning.daemen.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learning.daemen.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learning.daemen.edu
*.blackboard.com

Other certificates including the domain name daemen.edu

(limited to 100 certificates)
secure.mdl.io
wildcats.daemen.edu
*.explore.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
secure.mdl.io
secure.mdl.io
learning.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
us-east-1-san4.blackboard.com
ezproxy.daemen.edu
*.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
*.daemen.edu
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
my.daemen.edu
secure.mdl.io
lp.daemen.edu
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
secure.mdl.io
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
digitalcommons.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
sso.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
wildcats.daemen.edu
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
digitalcommons.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
apply.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
digitalcommons.daemen.edu
libguides.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
secure.mdl.io
conference.daemen.edu
*.daemen.edu
secure.mdl.io
wildcats.daemen.edu
wildcats.daemen.edu
learning.daemen.edu
clearpass.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
ezproxy.daemen.edu
secure.mdl.io
secure.mdl.io
secure.mdl.io
wildcats.daemen.edu
us-east-1-san4.blackboard.com
secure.mdl.io
wildcats.daemen.edu
libguides.daemen.edu
ezproxy.daemen.edu
wildcats.daemen.edu
apply.daemen.edu
libguides.daemen.edu
digitalcommons.daemen.edu
digitalcommons.daemen.edu
pg.daemen.edu

Certificate

The complete raw certificate details for learning.daemen.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF4zCCBMugAwIBAgIQB4m7O9H5eG4HYqrIjPVz+jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMTEwNDAwMDAwMFoXDTI0MTIwMTIzNTk1OVowHjEc
MBoGA1UEAxMTbGVhcm5pbmcuZGFlbWVuLmVkdTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAMTJynKNpHSNmTM4HEcBqIeu5ynRpsPrNfndQUajSc+Iei2E
WQmbvKhBLiBbAEJQFyqylM67FHnnsT6Oc4wXASWLASU1Ps0lf+F6lbPUYGiIjQgM
WnWXVMhkuryOytUYnu02TPZq9/sE3IU8+8Lhans/dZBrgyp9IEimT/mHIBnR9rv/
h1j2PzeWiPDppAKrtE66aaul+LoC32+8yeS57q7xDD5NW+LdmbGVG4lsIkjMCBMB
uqgWhSJEzInkAhST9dMbMPoV+7uZ5BJIITdZDbEPSFacAPa8UcY8pEFLVf99lEA2
YRqY/naUL8ON/NKS9h1v9UzeeFFsUTgtdhcgvnECAwEAAaOCAv0wggL5MB8GA1Ud
IwQYMBaAFFXZGF/SHMwB4Vi0vqvZVUIB1y4CMB0GA1UdDgQWBBQQP7p6uZLZvUMP
YWudtVIA3lJBvzAwBgNVHREEKTAnghNsZWFybmluZy5kYWVtZW4uZWR1ghAqLmJs
YWNrYm9hcmQuY29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6g
LIYqaHR0cDovL2NybC5yMm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDMuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAzLmFtYXpv
bnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkC
BAIEggFtBIIBaQFnAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQA
AAGLmc4vIQAABAMARjBEAiBwQlZiZWo36fpYSoCIJDsalTf0iONDA17/6I1az5eO
/gIgKZhlv80NYSaeVDjKofWDE7oVmFOU0Ufnevvf+6+j7SYAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYuZzi7yAAAEAwBHMEUCIDuqa0fnfzfD
cjtzHj8HTkrRpaJh8QbVqeN5tUpirluLAiEAkKvWHfQT7QvElIb0dhe+t5Lo4Xrr
CtPIDEtN11qG9d8AdgDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAA
AYuZzi76AAAEAwBHMEUCICJWHu/8M3y+zYdzOHFkh8msSH+CpOHg8FWwWY/Hda8M
AiEAoQI8gEDvQMwseoYOWuikxcjn93LM3ACmLa5Ib9V5LMIwDQYJKoZIhvcNAQEL
BQADggEBAHzQxozxRRXghE2MssSPRVnqzGo3Yu6NyDutGksYHaLvSoF3trwZD9ua
Rv2IXO6QrdJGHgB5t3MtEptcgX1WIKkk7CbEv23e+qZd6kVZCkIOJellM73Cd6VE
7prerR0ZUkbENEoGEkL7k2G29tNOUDatkS922O5fkyNVXZymo6KJUdNcoa3m2Y/i
gChNMzWPNV29V46RIkMxpEVqRY5BlyRKjFi5ME0YPC35+skoEnNyOfGQ9nFmbk9r
saAdcQhEvftk+ua6xppkZrvSRNXDFVdYCPDzcOYIlIbDMMsUSzJYlA3rzzeFKj+1
4jnuFpUONzm7i4rN3gym7zYqA0T/ujM=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxMnKco2kdI2ZMzgcRwGo
h67nKdGmw+s1+d1BRqNJz4h6LYRZCZu8qEEuIFsAQlAXKrKUzrsUeeexPo5zjBcB
JYsBJTU+zSV/4XqVs9RgaIiNCAxadZdUyGS6vI7K1Rie7TZM9mr3+wTchTz7wuFq
ez91kGuDKn0gSKZP+YcgGdH2u/+HWPY/N5aI8OmkAqu0Trppq6X4ugLfb7zJ5Lnu
rvEMPk1b4t2ZsZUbiWwiSMwIEwG6qBaFIkTMieQCFJP10xsw+hX7u5nkEkghN1kN
sQ9IVpwA9rxRxjykQUtV/32UQDZhGpj+dpQvw4380pL2HW/1TN54UWxROC12FyC+
cQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10019738190155111994797653551924737018
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learning.daemen.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24842214530645305198398061435430257095503680430680657053265652306498074676248122573477877876902258486469445059491567165586722831200723686065414441195034849306086125708108705858157740917707060246686515110071250006750342915081303003612916194461081642735589870840333822593265504195173896791932992092303479991407178890590104355660793650789414462312275430602215813251721212308758445036387013537846498028148912138321699049774302977300494205677661969158928702691461034220269091425574267391966569224905557009313635216973597847076276904836894780373092827533627679413125602675665313857454420020664233944937684669667350098787953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							103fba7ab992d9bd430f616b9db55200de5241bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (41 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.daemen.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							016700750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b99ce2f210000040300463044022070425662656a37e9fa584a8088243b1a9537f488e343035effe88d5acf978efe0220299865bfcd0d61269e5438caa1f58313ba15985394d147e77afbdffbafa3ed2600760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018b99ce2ef2000004030047304502203baa6b47e77f37c3723b731e3f074e4ad1a5a261f106d5a9e379b54a62ae5b8b02210090abd61df413ed0bc49486f47617beb792e8e17aeb0ad3c80c4b4dd75a86f5df007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b99ce2efa0000040300473045022022561eeffc337cbecd877338716487c9ac487f82a4e1e0f055b0598fc775af0c022100a1023c8040ef40cc2c7a860e5ae8a4c5c8e7f772ccdc00a62dae486fd5792cc2
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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