gateway.va.hayden-homes.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 0c:be:52:b6:38:b1:2c:94:a6:be:eb:7f:5a:49:08:40 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=gateway.va.hayden-homes.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:be:52:b6:38:b1:2c:94:a6:be:eb:7f:5a:49:08:40
Serial Number (int): 16938949947199035703676466899513313344
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: fd:d3:86:50:e7:cd:79:bc:5e:c5:7a:33:0d:f3:dc:e9:a8:10:e1:9b
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): 29:4e:e0:8d:13:4f:d1:0b:73:87:40:e3:01:b4:18:c7:62:3a:60:c0
Fingerprint (sha256): 6f:57:ec:3a:14:b5:42:c2:ee:f8:78:44:eb:4c:e5:3b:ea:ed:f3:cf:8e:bd:c5:b4:8c:48:11:4a:b3:14:89:17

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate gateway.va.hayden-homes.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gateway.va.hayden-homes.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gateway.va.hayden-homes.com

Other certificates including the domain name hayden-homes.com

(limited to 100 certificates)
hayden-homes.com
kova.hayden-homes.com
kova.hayden-homes.com
gateway.hayden-homes.com
gateway.rdm.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
eedesk.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
onbase.hayden-homes.com
hayden-homes.com
servicedesk.intranerve.com
eedesk.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
gateway.va.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
eedesk.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
hayden-homes.com
hayden-homes.com
gateway.rdm.hayden-homes.com
*.hayden-homes.com
gateway.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
gateway.hayden-homes.com
*.aws.hayden-homes.com
gateway.rdm.hayden-homes.com
hayden-homes.com
hayden-homes.com
kova.hayden-homes.com
imoit.ciraconnect.com
gateway.va.hayden-homes.com
hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
*.hayden-homes.com
helpdesk.aeainvestors.com
*.hayden-homes.com
hayden-homes.com
*.hayden-homes.com
hayden-homes.com
gateway.va.hayden-homes.com
kova.hayden-homes.com
hayden-homes.com

Certificate

The complete raw certificate details for gateway.va.hayden-homes.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGuTCCBaGgAwIBAgIQDL5StjixLJSmvut/WkkIQDANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MTkwMTExMDAwMDAwWhcNMjAwMTExMTIwMDAwWjAmMSQwIgYDVQQDExtnYXRld2F5
LnZhLmhheWRlbi1ob21lcy5jb20wggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIK
AoICAQDOeDWWctml35iElAG3kVj9bhebhO5vN7MWKyWZIQ9w49iKDpQLOhY/aQ3k
Z+THOCVWPFcDBaMPjOSBCDAhWA8/GSOJiq+SRRRL3DnDBWI+FuaiLpzVCvWsv90m
b49Xre4zEkupn4VrT5IibREGLssrZl5G70cqk6a5msUXG8S0/hl43Kh7mi/awec8
w0CDyR1+HejeLcZpOZcELrpXRP0rTuRTpqP+vJWufrFSw79OJZTe2qQ26ZpXZSox
kksZjH6e07HPY47gc8nkLKSFV6QwUn9CiT/AXXxyal6elBxRqhCSiGXV2PXNDxCO
5V/58PUp2W00xcJLu78MfLEIeu4rygzBZRR8QM6HNf8CokWG5baQGfNwe75CCrxs
MGGdXNaSP7/z0q7PUaitRA1aO9Hz4LXVkgYa4wary0wacHj7g43bcs1TK3ofYNZv
Dknp2QlMA19nlegord37DdA70TAQRkZuGBbLyaQxcCx9x6mcAfbupbC1B/z1kysX
VoSpipCQdzjkTefOFjjKXleFVGd0q0Ex8D12nssuB3lDfNRi5KJ/bN/0bX51Zvcx
Fin4LO6fQDhL2IgrUUeJ4GmX3ZtcLRngLWtVTTaDwL+8J/fMWiecxDPOme1wsyb0
50bDwXyM87wBL6B4SJoJSCvC0IYAK/cEgMvMvL6PAKsJNWlzLQIDAQABo4ICqzCC
AqcwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoHCmpZzLn+3lowHQYDVR0OBBYEFP3T
hlDnzXm8XsV6Mw3z3OmoEOGbMCYGA1UdEQQfMB2CG2dhdGV3YXkudmEuaGF5ZGVu
LWhvbWVzLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jZHAudGhhd3RlLmNv
bS9UaGF3dGVSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCow
KAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EM
AQIBMG8GCCsGAQUFBwEBBGMwYTAkBggrBgEFBQcwAYYYaHR0cDovL3N0YXR1cy50
aGF3dGUuY29tMDkGCCsGAQUFBzAChi1odHRwOi8vY2FjZXJ0cy50aGF3dGUuY29t
L1RoYXd0ZVJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAQYGCisGAQQB1nkCBAIE
gfcEgfQA8gB3ALIeBcyLos2KIE6HZvkruYolIGdr2vpw57JJUy3vi5BeAAABaD5T
yyAAAAQDAEgwRgIhAOj35bdhFJTn6iSA5cU1Fhi64R0Pkp3sZAKA7/8YnPr1AiEA
oXIp8zXp1A2Nrq9oJZJzXAEa0f3G3c4HWk9aIeYujJgAdwCHdb/nWXz4jEOZX73z
bv9WjUdWNv9KtWDBtOr/XqCDDwAAAWg+U8vkAAAEAwBIMEYCIQCqibih2rLLkFVB
Mtq5jB1FkdTaQ+ts+z3dN1w/qyLcdQIhAIotZvf+113EOhoiUlILPiO0ofLal57r
me2fejdW1lO0MA0GCSqGSIb3DQEBCwUAA4IBAQAvQLfWNj1EWltTzlFbKz3X0tZF
+p8bUZ6DgGBNRGBVaM47P7nCdtllEkyTPvcuoO6jMDhkhmeAAXRxIHVi+mG8prPX
8ZJNx6y1kToJswNPiEp+rIgC/gB9URbyWyPsF3CfEOrPXYa6nDu8evXj9FLMQ8KP
mtEd/oyTp2bOxp7VBhi7/1RhO71NYJN3om0RXsvxkv4Tr/ycJVjgvtsvZ2o+8H9h
GqxegJ2uDSlbjua15CLq1RC6y9dl5JniJ1QENBa4ExvfGYk7JdzyqGDzuTxQ42zr
e5LOTsJzOlyEvmkF6hpRCcAja1QfXq+vRjIG9GVhEbory+ASlkEUvxCeHEI6
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16938949947199035703676466899513313344
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gateway.va.hayden-homes.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 842322347025682272529552575387359087339334084051682319079960584504062575313737450321968601824391006731809691654858663459003387682836849866038656967140363920481765084647240958307535824195783858058768127167832819496782239093142024041427391905963277461237246743765970240989600509680630977964912484419527458928443528377021214234979963928459522486023900796271792254937748311025672805597737823238874750761013368947531540994829290876918984878368969547088692420065677920366769073818158594514599770197516313433154609245652893066786606327496704468050606084295941372011659417943945775042628074695561838105188989642738660799210740019118929102871574162632963428061442175617094298438188178283088288414803511298194789534939111103906940986323158289210130443327400398788408420153266794632721282700174257463204580842467115701759582677357920614514992423003172775769588464659522343748957343784695734259010459705722237008531678366330874546670627813686483853421653862401857686704660516330424199075223352555515155475427988589550391252364621267468155925561585554237249909905258531338092306807199175319697376254762217900592454830180029443820588721059317833076577922441748838499897759295518215440411027719454152642999790148938690591011349926146181562181972781
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fdd38650e7cd79bc5ec57a330df3dce9a810e19b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gateway.va.hayden-homes.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001683e53cb200000040300483046022100e8f7e5b7611494e7ea2480e5c5351618bae11d0f929dec640280efff189cfaf5022100a17229f335e9d40d8daeaf682592735c011ad1fdc6ddce075a4f5a21e62e8c980077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001683e53cbe40000040300483046022100aa89b8a1dab2cb90554132dab98c1d4591d4da43eb6cfb3ddd375c3fab22dc750221008a2d66f7fed75dc43a1a2252520b3e23b4a1f2da979eeb99ed9f7a3756d653b4
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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