lyncwebextBR.hmhs.com

- Highmark -

Issued by thawte SHA256 SSL CA

About this certificate

This digital certificate with serial number 03:9a:07:ae:12:df:2d:0c:ae:f7:f3:b1:e1:46:4f:d4 was issued on by thawte, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Highmark

Organization: Highmark
Organization unit: Network Services
State / Province: Pennsylvania
Locality: Pittsburgh
Country: US

thawte, Inc.

Organization: thawte, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:9a:07:ae:12:df:2d:0c:ae:f7:f3:b1:e1:46:4f:d4
Serial Number (int): 4787453471977147492211571711663296468
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 2b:9a:35:ae:01:18:38:30:e1:70:7a:05:e0:11:76:a3:ce:bd:90:14

Fingerprint (sha1): 0c:12:f4:11:7d:48:40:55:29:63:2b:ef:74:38:06:3c:ac:3a:6c:0b
Fingerprint (sha256): 80:9c:55:77:83:1c:d4:97:24:71:a9:75:c4:07:c7:d2:c3:30:d6:cb:1f:34:cf:14:b8:19:49:86:22:52:28:4e

Issuing Certificate URL: http://tg.symcb.com/tg.crt

Revocation information

OCSP Server: http://tg.symcd.com
CRL Distribution Point: http://tg.symcb.com/tg.crl

Check the revocation status for certificate lyncwebextBR.hmhs.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncwebextBR.hmhs.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncdiscover.highmark.com
lyncdiscover.highmarkhealth.org
lyncdiscover.hmhealthsolutions.com
lyncdiscover.hminsurancegroup.com
lyncdiscover.ucci.com
lyncdiscover.hmhs.com
dialin.hmhs.com
meet.highmark.com
meet.highmarkhealth.org
meet.hmhealthsolutions.com
meet.hminsurancegroup.com
meet.ucci.com
meet.hmhs.com
lyncwebextPG.hmhs.com
lyncwebextBR.hmhs.com

Other certificates including the domain name hmhs.com

(limited to 100 certificates)
apiwebqa.hmhs.com
apiqa.hmhs.com
m-chemical.deepscholar.app
static.hmhs.com
apiportal.hmhs.com
statictest.hmhs.com
mbrcdn.hmhs.com
csportalutilities.hmhs.com
apianmqa-secured.hmhs.com
client.hmhs.com
partnerstest.hmhs.com
oauth.hmhs.com
api.hmhs.com
www.hmhealthsolutions.com
status.hmhs.com
cmsoauth.hmhs.com
jcs-tenv3.opservices.hmhs.com
mrfdata.hmhs.com
mftpwdreset.hmhs.com
www.hmhealthsolutions.com
myehsportal.hmhs.com
syncp-test.hmhs.com
ghptest.hmhs.com
apiweb.hmhs.com
myehsportaltenv2.hmhs.com
hmbrdsfp09.highmark.com
mft-test.hmhs.com
www.meinnovations.in
syncp-test.hmhs.com
apiportalqa.hmhs.com
ftp.highmark.com
apianmqa.hmhs.com
api.hmhs.com
myehsportalcontenttenv3.hmhs.com
hms-uat.hmhs.com
apiint.hmhs.com
test.status.hmhs.com
mft.hmhs.com
prod.opservices.hmhs.com
entrustapi.hmhs.com
csportalutilities.hmhs.com
hms-pve.hmhs.com
syncp-dev.hmhs.com
hhotest.hmhs.com
service.hmhs.com
mail.highmark.com
hho.hmhs.com
myehsportalcontent.hmhs.com
partners.hmhs.com
hhotest.hmhs.com
hho.hmhs.com
ghp.hmhs.com
syncp-dev.hmhs.com
service.hmhs.com
myehsportal.hmhs.com
mftpwdreset-test.hmhs.com
lyncwebextBR.hmhs.com
apimgrqa.hmhs.com
apiqa.hmhs.com
ftp.highmark.com
owa.hmhs.com
mrfdata.hmhs.com
dev.cdn.hmhs.com
wvfhtest.hmhs.com
myehsportaltenv3.hmhs.com
mail.hmhs.com
www.hmhealthsolutions.com
apimgr.hmhs.com
static.hmhs.com
apiintqa.hmhs.com
mrfdata.hmhs.com
ghptest.hmhs.com
owa.hmhs.com
myehsportal.hmhs.com
www.hmhealthsolutions.com
mail.hmhs.com
status.hmhs.com
owa.hmhs.com
syncp.hmhs.com
lyncaccess1.hmhs.com
apiportalqa-secured.hmhs.com
cmsoauthqa.hmhs.com
cmsapiportal.hmhs.com
oauthqa.hmhs.com
lyncwebextBR.hmhs.com
apiint.hmhs.com
client.hmhs.com
client.hmhs.com
sni.cloudflaressl.com
dev.cdn.hmhs.com
wvfh.hmhs.com
fedsvc4.hmhs.com
myehsportaltenvb.hmhs.com
wvfh.hmhs.com
static.hmhs.com
apiweb.hmhs.com
statictest.hmhs.com
static.hmhs.com
static.hmhs.com
ftp.highmark.com

Certificate

The complete raw certificate details for lyncwebextBR.hmhs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4787453471977147492211571711663296468
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'thawte SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pennsylvania'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Pittsburgh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Highmark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Network Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lyncwebextBR.hmhs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 848983021101232197212263358309616853799595747053166476576381040748528851320665319120566211164058079088988103138798254555815408750038491236124651583515607659765228223553456434011136916479197730079748500195022777207620664256843310714360619590267228631302492159156903016305831879265391846363479645682849644097790478331378194488574197322295890307830837192670616076083658684254750524848179648385610835086764212434801315662380841585631359565505500585702392156777509191615789005966330852505194727904802547487292302139846275988290638395409995146568889542659384404582940824266033166630071737229279367785383125759559531057166132154022151507248083518024505505924793706331372846894743415166456413454533599391021686015142525926141555570345386797525884940195142058023901490031066618908569822139722221925390922998131084104382210772085243097437883621526269912869293137616407173609975119159658505969094654146247294720302863883515423686399054759136470021513330226915589762137274618385343520701102557575826834426368560934028364333572982357634374819031369488447803810370908080450581042784946387817410200713433970004481949932948861652865809243370876561091104086201882379193756416153365539845418456891284435411126285642019560156688860696577502184470708277
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (373 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.highmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.highmarkhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hmhealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hminsurancegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.ucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.highmark.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.highmarkhealth.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hmhealthsolutions.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hminsurancegroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.ucci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebextPG.hmhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwebextBR.hmhs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.thawte.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.thawte.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2b9a35ae01183830e1707a05e01176a3cebd9014
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://tg.symcb.com/tg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00235d3efdf3d1d2b5fade3b18976bb56ba841dd8832584e0c76bb9fd705561d337ee057a6ecb41e25650ac9273037a87bdfdab806cf045158f9d5a7dbbf711182d67a3acff0ae2decbb21e0c315acfa94683ef944404bd403f48ab9b32ed9f70d4c859ceaa5b88b15b9adc806fd1c80506fd2f307edc96f32f9b8a286f1d3ae136057690daa8e48f166d7eb51686ecbb51411f983500a0b27b5791b22fa1da30d9c4f4725285daa30f5cb1330856530d56ce50a068fb883bcfc22614cab7d4850812d069ca4a80ffd13c4df2c01248c3b7e8bbfd3c06be92c35d9074b4fc1169cd8d8d77bc87910c6a3f972acd57b41133a27186fb0a13757a501d58414b7290b