konstanz.ibml.com

- Imaging Business Machines, LLC. -

Issued by COMODO RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number f7:97:9c:8f:ce:23:22:ba:8f:d5:25:2b:75:f5:68:62 was issued on by COMODO CA Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Imaging Business Machines, LLC.

Organization: Imaging Business Machines, LLC.
Organization unit: Enterprise SSL Pro
Address: 2750 Crestwood Boulevard
Postal code: 35210
State / Province: Alabama
Locality: Birmingham
Country: US

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): f7:97:9c:8f:ce:23:22:ba:8f:d5:25:2b:75:f5:68:62
Serial Number (int): 329106527233834777208337502925332244578
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dc:32:d9:45:1e:dc:49:d8:31:d2:5e:e8:49:5b:18:65:70:bc:a7:ea
AuthorityKeyId: 9a:f3:2b:da:cf:ad:4f:b6:2f:bb:2a:48:48:2a:12:b7:1b:42:c1:24

Fingerprint (sha1): bd:5a:8f:76:90:d9:73:e7:7e:c5:78:8c:ac:4b:d8:98:5c:1e:ab:3b
Fingerprint (sha256): 79:48:ae:0b:61:06:a8:cf:a5:c0:08:29:e8:c4:c2:d5:88:30:2b:fd:26:a9:3c:a3:c7:e6:f7:5c:1b:e6:24:7d

Issuing Certificate URL: http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.comodoca.com
CRL Distribution Point: http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate konstanz.ibml.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for konstanz.ibml.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

konstanz.ibml.com
www.konstanz.ibml.com

Other certificates including the domain name ibml.com

(limited to 100 certificates)
ibml.com
go.ibml.com
konstanz.ibml.com
go.ibml.com
connections.ibml.com

konstanz.ibml.com
irondale.ibml.com
owncloud.ibml.com
ibml.com
konstanz.ibml.com
irondale.ibml.com
go.ibml.com
disaster.ibml.com
irondale2.ibml.com
ibml.com
irondale.ibml.com
irondale.ibml.com
www.ibml.com
ticketing.ibml.com
traveler.ibml.com
gndn.ibml.com
partners.ibml.com
ibml-web2.ibml.com
ibml-web2.ibml.com
konstanz.ibml.com
disaster.ibml.com
connections.ibml.com
duoag.ibml.com
ibml.com
traveler.ibml.com
travelereu.ibml.com
irondale2.ibml.com
owncloud.ibml.com
fezzik.ibml.com
connections.ibml.com
partners.ibml.com
irondale2.ibml.com
go.ibml.com
customer-portal.ibml.com
connections.ibml.com
productsupport.zurigroup.com
konstanz.ibml.com
irondale.ibml.com
notesarchive.ibml.com
gndn.ibml.com
irondale.ibml.com
ibml.com
timeclock.ibml.com
stproxy.ibml.com
www.ibml.com
go.ibml.com

duoag.ibml.com
travelereu.ibml.com
go.ibml.com
go.ibml.com
go.ibml.com
owncloud.ibml.com
go.ibml.com
meeting.ibml.com
ibml-web2.ibml.com
ibml.com
gndn.ibml.com
connections.ibml.com
traveler.ibml.com
go.ibml.com
owncloud.ibml.com
ibml-web2.ibml.com
go.ibml.com
go.ibml.com
ibml-web2.ibml.com
www.ibml.com
customer-portal.ibml.com
www.ibml.com
travelereu.ibml.com
irondale.ibml.com
timeclock.ibml.com
ibml.com
irondale.ibml.com
traveler.ibml.com
www.ibml.com
irondale2.ibml.com
notesarchive.ibml.com
go.ibml.com
connections.ibml.com
ibml.com
customer-portal.ibml.com
timeclock.ibml.com
www.ibml.com
ibml-web2.ibml.com
productsupport.zurigroup.com
go.ibml.com
talk.ibml.com
connections.ibml.com
disaster.ibml.com
irondale.ibml.com
ibml-web2.ibml.com
ibml.com
ibml.com

Certificate

The complete raw certificate details for konstanz.ibml.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329106527233834777208337502925332244578
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '35210'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alabama'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Birmingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '2750 Crestwood Boulevard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Imaging Business Machines, LLC.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Enterprise SSL Pro'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'konstanz.ibml.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 1014794711169750911890170332084493244598016351474484715184084772283216225930141073314183301874021375221021180781939543322062502387309854178673326798333046705588301959006723990976574341694750659386762288261483614374853783239611940788042437591131326875248083541689482782019750497704739211900379822963879773656981914669815974085955571093939221553572303395406959659852470618000886570117313375606430467844047442990197268586308634674354602640384327282930700619691583567567166138420756046683823014149712468066021189594608695686761075982671537119458397408694567223470562096711325731889861593947581824647550417258009203738822193059476539961690462761792081272762018066865841170026010829128938386866166888663810804857429806608670161880998230491646893692686265505765120303226355150512760471406987958721166971815186891011470831271972073036114683029956810948874184304238841064752875495749224779943612772086031855149508773399018060730133172246935966559040842838002357949075805293405617082875069392483193947119889404947664155407149818538533521029364665373898658213771451644550816811945783123956525523162019131184531948793572622931069563010342843591199609743941997321125817932134794060470811525888731745743984516640993310000394966139747748927002303777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9af32bdacfad4fb62fbb2a48482a12b71b42c124
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc32d9451edc49d831d25ee8495b186570bca7ea
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (73 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.comodo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca.com/COMODORSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konstanz.ibml.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.konstanz.ibml.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001658b8c107b00000403004730450221008e0d88e3972645081c3e68b6cdc50f1676fd3a3427cf1f984141c889fce81e4f02207cc2b1ab1bf682bf5ea7a40a52b251fb1de27bfac266fec2c2bfe1aed04eace8007600747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001658b8c127e0000040300473045022100fdcde3a97c2f17e8f92d8a361e3e5fee94bc22644834f25970f51ec2b7c53f0502200ebc28da1a22a3d24bde62058bed179006c1d886532601deb408ade726ac1f4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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