www.thehackettgroup.com

- The Hackett Group, Inc. -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 01:b8:cc:51:88:1c:72:a9:2c:e0:4e:b1:7a:25:2e:f1 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Hackett Group, Inc.

Organization: The Hackett Group, Inc.
Organization unit: IT
State / Province: Florida
Locality: Miami
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:b8:cc:51:88:1c:72:a9:2c:e0:4e:b1:7a:25:2e:f1
Serial Number (int): 2288754688919985481895854317727198961
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 39:2e:05:8b:fa:18:82:13:85:0e:04:bc:07:58:00:37:74:ac:0b:cd
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 23:ac:64:7b:23:ac:1e:d0:32:70:52:45:10:0b:b1:0e:a6:e6:12:7d
Fingerprint (sha256): 5e:d0:f5:f8:d6:04:d1:ec:d4:75:84:70:b6:11:c5:b7:d8:df:d1:4d:a1:e8:ea:87:69:56:07:22:4d:84:1e:06

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate www.thehackettgroup.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.thehackettgroup.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.thehackettgroup.com

Other certificates including the domain name thehackettgroup.com

(limited to 100 certificates)
helpdesk.ejplastics.com
ssc-sd.oshco.com
servicedesk.primeenergy.ph
ithelp.newhopechurch.tv
hybrid.thehackettgroup.com
servicedesk.towermsa.com
www.thehackettgroup.com
hd.gsp.bl.it
helpdesk.americanassets.com
sso.thehackettgroup.com
helpdesk.maruservices.com
thehackettgroup.com
hd.gsp.bl.it
dms.thehackettgroup.com
desk.kavasa.in
hd.gsp.bl.it
hd.gsp.bl.it
hd.gsp.bl.it
helpdesk.riversidecc.org
vpn-iad.ams.thehackettgroup.com
www.thehackettgroup.com
events.thehackettgroup.com
helpdesk.charlesignatius.co.in
member.thehackettgroup.com
member.thehackettgroup.com
hd.gsp.bl.it
www.thehackettgroup.com
ssc-sd.oshco.com
ssc-sd.oshco.com
servicedesk.gourmetegypt.com
thehackettgroup.com
hd.gsp.bl.it
hd.thehackettgroup.com
hybrid.thehackettgroup.com
servicedesk.towermsa.com
hd.gsp.bl.it
servicedesk.ibsagroup.com
vpn-ord.dms.thehackettgroup.com
email.thehackettgroup.com
helpdesk.maruservices.com
hd.gsp.bl.it
smtpr03.thehackettgroup.com
betahpn.thehackettgroup.com
mindshare.thehackettgroup.com
*.thehackettgroup.com
*.thehackettgroup.com
*.ams.thehackettgroup.com
helpdesk.charlesignatius.co.in
mindshare.thehackettgroup.com
hd.gsp.bl.it
mindshare.thehackettgroup.com
vpn.thehackettgroup.com
gbs.thehackettgroup.com
sso.thehackettgroup.com
sso.thehackettgroup.com
helpdesk.americanassets.com
wiki.thehackettgroup.com
helpdesk.riversidecc.org
mesadeayuda.pffsa.com
ssc-sd.oshco.com
support.cortacgroup.com
hd.gsp.bl.it
thehackettgroup.com
atendimento.escrimig.com.br
oem.dms.thehackettgroup.com
atendimento.escrimig.com.br
atendimento.escrimig.com.br
esupport.infimedia.co.id
helpdesk.ejplastics.com
sos.olanet.mx
sos.olanet.mx
atendimento.escrimig.com.br
dms.thehackettgroup.com
desk.kavasa.in
servicedesk.zip.co
member.thehackettgroup.com
hd.gsp.bl.it
hd.gsp.bl.it
atendimento.escrimig.com.br
esupport.infimedia.co.id
hd.thehackettgroup.com
servicedesk.ibsagroup.com
helpdesk.ejplastics.com
transfer.thehackettgroup.com
hd.gsp.bl.it
helpdesk.americanassets.com
gbs.thehackettgroup.com
www.thehackettgroup.com
www.thehackettgroup.com
hd.gsp.bl.it
member.thehackettgroup.com
mesadeayuda.pffsa.com
ssc-sd.oshco.com
vpn.thehackettgroup.com
servicedesk.zip.co
vpn.thehackettgroup.com
servicedesk.etlsystems.com
hd.gsp.bl.it
sso.thehackettgroup.com
www.thehackettgroup.com

Certificate

The complete raw certificate details for www.thehackettgroup.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwtol0UtBFRAXAZqH016u
wKnAu7N/sXI06EReAy/EBeoxHJeVYvm8hNuEqCjAdZhTPHoSNgdQ3XvNaPmaLh0O
QMe5y/wzTuGKTHdiKiL8ArItH+aWWy7aAIDXGAla93ll8S6Hi4VHxTux4hJnWvHA
ajvamXRCn6ctQm8oEswGm06Hqc9ysZDygJbo+M19qQ7sSptrCnfNFH6d+3a7s6pK
NjAW4wCuxxZLdKT0go3O+CCk7xlxumjSWeVjqOlWsMAmjWj7hyxuhD6G3vMPWEda
A5CW4CWuJciP7mjVYZTkyfw3W27C2UVwowHMMRPJO7/guS63CdEM+YiOjCCouehW
FwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2288754688919985481895854317727198961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-21 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Miami'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hackett Group, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.thehackettgroup.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24597803815812966208792308780686262209688718871891404785290995208162394901106802702867226129533717455515503929936800856731086640525595262077492126091089347648520860381341018887721821891197973289722765668160906067300519144599545891256764214591032884278343674958981344154169683711103044858500416234375285626399510796478751114831670167700285013289484728336029893070286699295279321332659622326331123246942740185787965624245259500718907282130374175440509593938631804295466774998795432346385204454179532250118454837935992268674238910234658559402059479951556529555826187341106417931808397269261678831233033037115763976590871
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							392e058bfa188213850e04bc0758003774ac0bcd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.thehackettgroup.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016f6d1ac2e00000040300473045022100a73b56b217c300499c933f10f3c4f5e7ca87c9df49987f29937c5a93356202d20220299ef49f3bd5f6ba68df6bbac59ab4670d4a5422fdb9d75b846fd1ec964b14530075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016f6d1ac3a7000004030046304402202adefd25a7a13330fe7020405c31714e58d7a4f361fbf656b6004c168db3672a022044f5badaf44490ec7263b28a5228bba27900ed482c712bde705cd77fbe8a741e0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016f6d1ac3af00000403004830460221009a158bf868558975ee4369661e3b1c1bddf81e13bd24711a53bafc8d982bd2a0022100f8a06963e8232f8c6d03674e5a813c140dc2f7290ec30a0a7a50d9a0ff73900d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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