www2.schneider-electric.com

- Schneider Electric Industries SAS -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 05:ad:39:a0:32:b3:71:89:2d:66:dd:50:14:d8:f3:39 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Schneider Electric Industries SAS

Organization: Schneider Electric Industries SAS
Organization unit: Global Operations
State / Province: Hauts de Seine
Locality: Rueil Malmaison
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:ad:39:a0:32:b3:71:89:2d:66:dd:50:14:d8:f3:39
Serial Number (int): 7545576124995699342429311068689462073
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ed:44:02:3f:f3:0c:0c:c2:c0:db:c7:f2:f0:8d:d1:36:8d:1a:2e:aa
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 53:b6:c8:61:a1:a2:5f:11:b9:6c:3c:89:65:b1:0c:42:b8:07:d7:ad
Fingerprint (sha256): 62:5d:83:98:02:88:d3:06:4a:79:22:a9:1a:41:75:60:cb:0b:4c:69:88:4b:3f:08:3a:46:32:32:bf:10:2c:f9

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www2.schneider-electric.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www2.schneider-electric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www2.schneider-electric.com
services.modicon.com

Other certificates including the domain name schneider-electric.com

(limited to 100 certificates)
bigoudi.fr.schneider-electric.com
2020.pasupport.schneider-electric.com
qa-downloads.schneider-electric.com
plcupload.schneider-electric.com
subscriptions.schneider-electric.com
identity-pprd.schneider-electric.com
rexel.mie3c.schneider-electric.com
ecoxpert.schneider-electric.com
mel.vpn.ems.schneider-electric.com
www.quantil.com
support5.cdnetworks.net
ib2diag.schneider-electric.com
secure08.lithium.com
support5.cdnetworks.net
spiceportal.schneider-electric.com
tango.us.schneider-electric.com
*.struxureware.schneider-electric.com
secure08.lithium.com
nsi.us.schneider-electric.com
www.bem.schneider-electric.com
www.appgate.schneider-electric.com
lamtraveler01.schneider-electric.com
dalton.tr.schneider-electric.com
devportalint-test.schneider-electric.com
consulting.schneider-electric.com
conextpowercloud.schneider-electric.com
*.dev.schneider-electric.com
support5.cdnetworks.net
supportmsi.schneider-electric.com
vfast-portal.schneider-electric.com
hca.pme-central.schneider-electric.com
www.wesop.schneider-electric.com
identity-pprd.schneider-electric.com
nsi.jp.schneider-electric.com
support5.cdnetworks.net
ping-access.schneider-electric.com
www.schneider-electric.com
sip-res.schneider-electric.com
secure08.lithium.com
mam.schneider-electric.com
appserver.leetechnologies.com
www.wesop.schneider-electric.com
support5.cdnetworks.net
aliases2.schneider-electric.com
facilityexpert-us.schneider-electric.com
p7vci.eud.schneider-electric.com
xsl.schneider-electric.com
vendor-uk.schneider-electric.com
dcimassets.schneider-electric.com
akamaisecure2.qualtrics.com
lamtraveler01.schneider-electric.com
support5.cdnetworks.net
gtp-pp.schneider-electric.com
aliases6.schneider-electric.com
motion.schneider-electric.com
onlinekatalog.schneider-electric.com
webexperience.schneider-electric.com
onewo.eud.schneider-electric.com
psr.fr.schneider-electric.com
*.buildings.schneider-electric.com
app.ppr.schneider-electric.com
*.fi.schneider-electric.com
ezlist.schneider-electric.com
facilityinsights-us.schneider-electric.com
*.raproxy.dsp.schneider-electric.com
isel-sqe.dev.schneider-electric.com
intranet-maison.schneider-electric.com
facility-insights.assessment.schneider-electric.com
www.quantil.com
mysecn-pp.dev.schneider-electric.com
www.bem.schneider-electric.com
www.schneider-electric.com
stage-systemplatform.marketplace.software.schneider-electric.com
trm.fr.schneider-electric.com
ping-access.schneider-electric.com
www.schneider-electric.com
conextpowercloud.schneider-electric.com
es-training-courses.schneider-electric.com
seifoundation.schneider-electric.com
bigoudi.fr.schneider-electric.com
echange-uat.cn.schneider-electric.com
mft.schneider-electric.com
smsurvey-ksa.schneider-electric.com
stage.teamforge.schneider-electric.com
www.appgate.schneider-electric.com
e-mail-internal-northamerica.schneider-electric.com
support5.cdnetworks.net
schneider-electric.com
www.schneider-electric.com
hca.pme-mountain.schneider-electric.com
mft.schneider-electric.com
facilityinsights-preprod.schneider-electric.com
jira.au.schneider-electric.com
vfast-pp.schneider-electric.com
secure0079.hubspot.com
services.modicon.com
www.schneider-electric.com
vmanage-emea.schneider-electric.com
support5.cdnetworks.net
popeye.ae.schneider-electric.com

Certificate

The complete raw certificate details for www2.schneider-electric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizcJJRg5MCHDBZq3mPOI
MurkticYbQ9hyUaJMuFAqEE0rlqw1Op4aN/xgNQ+uM6X3gZHkPrxjEFIjSiHihWC
uKBh8ig8isKlYZDc5iu+P2ss8Pt36Df2ydYTqewcSWQeRm3tZqqs+BFxm3XEyXho
hDaeMDPlCfL2WVPkxu2OsXCu17P9O3YbkV+YDSZEE9mqphcRazuiqMN8fy1Pd9zm
UXhOjziemM5CcUrhU2qviQyqoM3kT6GvuiMXrtEtEMlruDwFw4HbKpEv9sMcDdTd
uCOWplvD3Bpj4Lvhmmj6RU1G32geuiwtC/palZ7bHzl3pg0de25uG5XsYV66rKQY
TwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7545576124995699342429311068689462073
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hauts de Seine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rueil Malmaison'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Schneider Electric Industries SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Global Operations'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www2.schneider-electric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17574263516422086353214468937486328287313933547653591016954769537676967853543780237347421450025078580851307562973324809780561467565629519767493101445567991925984265977116488123186510622450248399739525648365091884173674569460889022791343615859100970784163067616266587882725398426161396999425922637679243011244834327598337553874748676196494888949946865557016800404803330192290850810275620392004017573867197202148812869598245824545545713583538249084107050367123216970982394529278398393109682727714286117886953806305540646415364596903206929959995906789446962671354230527008574422356175854163594609687652797096567433861199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ed44023ff30c0cc2c0dbc7f2f08dd1368d1a2eaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.schneider-electric.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'services.modicon.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000163db05c8fd000004030046304402202f963fff52cef2728ee44118b8d156dbcb1cb2804f11e9f1f392cef83b227e17022039ba3662be0a806405640d96e77dff9986c4a8796291210e58f6cb4604eda12b0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000163db05c9de000004030047304502204e6dadaa34ee64da5344240198e62f1cae61932a1d2ae07cb426a2e7dbeba924022100badf1b62013346be51821d8eaa39e625e049ff8a3030c5ab4300cccf2502d094
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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