*.ciachef.edu

- The Culinary Institute of America -

Issued by Sectigo RSA Organization Validation Secure Server CA

About this certificate

This digital certificate with serial number 8e:cf:d0:b9:fb:ac:f7:93:0c:76:98:c6:1b:e3:85:99 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Culinary Institute of America

Organization: The Culinary Institute of America
Organization unit: PlatinumSSL SGC Wildcard
Address: 1946 Campus Drive
Postal code: 12538
State / Province: New York
Locality: Hyde Park
Country: US

Sectigo Limited

Organization: Sectigo Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 8e:cf:d0:b9:fb:ac:f7:93:0c:76:98:c6:1b:e3:85:99
Serial Number (int): 189829414327472229801019100391843005849
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 0b:21:58:05:e4:63:89:0a:fd:7d:1c:9e:6b:0d:36:70:1d:70:ee:7f
AuthorityKeyId: 17:d9:d6:25:27:67:f9:31:c2:49:43:d9:30:36:44:8c:6c:a9:4f:eb

Fingerprint (sha1): e8:4c:fb:90:33:e4:9f:6e:75:a6:28:4b:78:f9:a9:7c:44:79:18:68
Fingerprint (sha256): 89:8e:e0:0b:9f:11:39:64:f0:1d:94:6b:79:7b:9b:fa:43:37:57:5b:af:c3:2b:63:81:53:2a:3d:c5:03:73:36

Issuing Certificate URL: http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl

Check the revocation status for certificate *.ciachef.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.ciachef.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.ciachef.edu
ciachef.edu

Other certificates including the domain name ciachef.edu

(limited to 100 certificates)
blog.ciachef.edu
info.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
apply.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
SECURE.CIACHEF.EDU
blog.ciachef.edu
info.ciachef.edu
catalog.ciachef.edu
learn.ciachef.edu
apply.ciachef.edu
SECURE.CIACHEF.EDU
*.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
learn.ciachef.edu
info.ciachef.edu
www.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
catalog.ciachef.edu
www.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
apply.ciachef.edu
blog.ciachef.edu
catalog.ciachef.edu
info.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
apply.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
www.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
info.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
blog.ciachef.edu
*.ciachef.edu
blog.ciachef.edu
info.ciachef.edu
catalog.ciachef.edu
blog.ciachef.edu
apply.ciachef.edu
learn.ciachef.edu
blog.ciachef.edu

Certificate

The complete raw certificate details for *.ciachef.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DUX754DUaF0P02NBlNZ
dXgwf/x9p6zivXozYsMLR5plDxByyZgA6NCDZG1SlbVllnb5k7leKDBWvbEpm8zd
MFAu3P3L1jVXL4qLJt86o5wjBjPNV/b7ogNtfIia9iQIXuP0RqynAmEGUpAjXfep
ZW+qNpjbvS7OxF5dSQFmgyw4fvkCJWBiPzjC4AejSwBm97xYnJsPHBEq9iBdqCYA
Be1f/BCA6M3/QCyw+6pNFr7a11okoqjTo/kjTX9OPZ4y30DzV7sCTjzKQjFsqt+N
zBLabAzul9cNo7x8F72jpRCoZlyDd3AeUUq9koMb3YYpFzFfzF1RYnxzb7Yta+7S
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 189829414327472229801019100391843005849
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo RSA Organization Validation Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-30 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.17 (postalCode)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12538'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hyde Park'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '1946 Campus Drive'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Culinary Institute of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PlatinumSSL SGC Wildcard'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.ciachef.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27798608473185632822967517473077364078995778187146361178007644401115415474452346624650919531010225534344159104685638495982987540443335857535546732116928094373304100564663266963958147811468057190785525946915919701279612330174436519153241118899332728794038262692516930002063242024521169916900485253424242554574445962903403174508422916415626029641420219651683573815313758890897044666670358828435830370318738536836301574651394125742823284606405024608973291877640498861595121242513441359465168227735300329084338473097179599549825139368972480471192396725517382562693416866996064521320696607157882198753112242339025423094301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 17d9d6252767f931c24943d93036448c6ca94feb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b215805e463890afd7d1c9e6b0d36701d70ee7f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.3.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (83 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoRSAOrganizationValidationSecureServerCA.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ciachef.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ciachef.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001692b8775ca000004030046304402201ed5a4679c881a47775e89e0c708c51ecaf35978c98b2dfaa09d0617b042f07902207fc89ff6e1b7464691db564463d3e8af98580e73c8e7f801328e39c4229f57340076004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a8000001692b87761f0000040300473045022100a838aaf6f1757811a0269be8df2f282045fbc4e919e2e71d946633563211266302205c61eb0f5504ea292bc3cec20068c50a5d33a13cd2a4cb87240f8567fc4286800077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001692b87760a000004030048304602210097f2fc39b6d67392c6adb8c8d7977f9872413b56ad4e6bb63508c29c0d6757c2022100d7372ab5c593af999db0177a36abc96232f461ae7c7bdb09e248d009b10abcd7007600f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001692b87760a000004030047304502201500ced776ccde71a5414f9eb1fbc7ffac20cce4393de21dc1c59b1edafcfce4022100941b57c0ae91e79730d754b1c539ada55d70e1714e82ab6f9d43fb645f92fa99
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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