extranet.jec.co.uk

- Jersey Electricity plc -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 59:5d:d3:65:ca:a1:f4:c8:70:33:6f:4b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jersey Electricity plc

Company registration number: 67
Organization: Jersey Electricity plc
Organization unit: Corporate
Address: Queen's Road
State / Province: Jersey
Locality: St. Helier
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 59:5d:d3:65:ca:a1:f4:c8:70:33:6f:4b
Serial Number (int): 27657594272374129178182905675
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 71:e4:21:0b:85:7c:dc:b5:8b:ed:17:d5:bc:44:d5:5d:3f:45:6d:2c
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): a7:f8:bc:ea:39:41:62:3f:8a:44:27:32:92:92:e1:dc:10:31:f3:76
Fingerprint (sha256): 8f:b1:85:0b:88:2e:65:a2:3c:46:07:4b:fc:f4:ce:c6:08:1a:92:15:1f:0f:11:52:0a:dd:49:06:04:5c:38:95

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate extranet.jec.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for extranet.jec.co.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

extranet.jec.co.uk
www.extranet.jec.co.uk

Other certificates including the domain name jec.co.uk

(limited to 100 certificates)
jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
*.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
mailmarshal.jec.co.uk
www.jerseyelectricity.je
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
www.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
GIS.jec.co.uk
careers.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
receiver.jec.co.uk
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jec.co.uk
*.jec.co.uk
www.jec.co.uk
www.jec.co.uk
*.jec.co.uk
careers.jec.co.uk
www.jemail.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jemail.jec.co.uk
jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
webvpn.jec.co.uk
www.jec.co.uk
jec.co.uk
www.jerseyelectricity.je
www.jerseyelectricity.je
receiver.jec.co.uk
jec.co.uk
www.jec.co.uk
ph-expressway-e.jec.co.uk
www.jec.co.uk
careers.jec.co.uk
jec.co.uk
www.jec.co.uk
www.jec.co.uk
www.jec.co.uk
extranet.jec.co.uk

Certificate

The complete raw certificate details for extranet.jec.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 27657594272374129178182905675
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-28 10:36:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-29 10:36:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '67'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Helier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Queen's Road'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Corporate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jersey Electricity plc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'extranet.jec.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 692892081993233326969113185590681231533729763842960552582136602288842940880391288628587434195377767577177052358451896181881520365221169718355753838448268865779280882009498109056379498984315714721437847906556919803669686158500567504954658633755926276385829277906521385642474684333095080693958495021843862977471200627403785816587367859546006821758874604129692123504618428628856299736051712527068214166684823086920057300760541793943422302884558282325145976224022209081678860050141164468517282349164531142909856796562143748798727967477433478163324837549215374052953417410088072469744934919535559670922652685096104470098299108643024839045324404881132445150760890146654707844498398551001321835924681638975393701443187925639563379693730340252080546358375995144294155336766366502632870772739776929514851437356245509991716547097945487224967543693455521823790900017166653778728043534225482692124330221195339569559044609969088441023590564100248167826798931510008143070279288269589733661920656258982271639811522845435335400491161910573100717417098696825763378567323759494206546260155680473805380818656661854682656264087709067792880488363776198335809116855900482346193316435726119159312878145059877846302414811028498537697854782471477135631692969
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'extranet.jec.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.extranet.jec.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71e4210b857cdcb58bed17d5bc44d55d3f456d2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015d88c498ba000004030047304502206882851e85f38f8f1e9fda50e2e1c1799a4ac3436428e456b120b9e35924d6bf022100d4d8a06702627afd8b6bdc056489249b6f297957811930d828f47358eed693eb0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000015d88c49b6b0000040300473045022037557f8ab5d432d81148bece13c504ba3df61ead763b94a4346903d79aab8f9b02210084580fc65f959d6616f99e94ca14261490b23bc794dd29ff30b085fe8cb78990007500ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015d88c49b930000040300463044022022ebd4cadf9b56d9c7be0f1dcd1f686d5bf7a399b23def6855c482df335c456602207af14a25fdef5ab14ff05ef5fb3c7eddc4b31812511d68ac1b223c911588963a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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