myinstallations-dev.airliquide.com

- AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE -

Issued by DigiCert TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 09:e8:c2:79:b1:46:f0:af:43:d9:e0:12:65:18:53:d9 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE

Organization: AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE
State / Province: Ile-de-France
Locality: PARIS
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e8:c2:79:b1:46:f0:af:43:d9:e0:12:65:18:53:d9
Serial Number (int): 13171609262179703662776821337105650649
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:92:f7:93:f8:21:ac:dc:b8:07:14:61:84:ff:3d:84:10:90:c5:39
AuthorityKeyId: b7:6b:a2:ea:a8:aa:84:8c:79:ea:b4:da:0f:98:b2:c5:95:76:b9:f4

Fingerprint (sha1): 19:ca:e6:9c:bd:25:dd:ef:04:f8:36:78:aa:f7:68:10:81:ae:3d:c4
Fingerprint (sha256): 91:04:80:6c:d8:35:62:a8:e0:22:a0:0f:31:0f:a9:e5:31:35:aa:ed:85:c7:34:b4:04:19:b9:97:60:51:fc:96

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl

Check the revocation status for certificate myinstallations-dev.airliquide.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for myinstallations-dev.airliquide.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

myinstallations-dev.airliquide.com
myinstallations-dev.airliquide.at
myinstallations-medical-dev.airliquide.com
myinstallations-medical-dev.airliquide.at

Other certificates including the domain name airliquide.com

(limited to 100 certificates)
industria.airliquide.it
apacmi.airliquide.com
www.airliquide.com
caps-pprd.airliquide.com
am-api-proxy.apps.airliquide.com
www.airliquide.com
AirLiquide-TokenSigning.apps.airliquide.com
myetelemetry.airliquide.com
www.cryopal.com
new.airliquide.com
connect-as.airliquide.com
datachallenges.airliquide.com
awarenet-AM01-pprd.airliquide.com
ext-procurement.airliquide.com
myinstallations.airliquide.fr
crm-ee.airliquide.com
elogbook.airliquide.com
ext-procurement.airliquide.com
webmail-na.airliquide.com
industrial.airliquide.es
be.airliquide.com
www.cryopal.com
www.airliquide.com
myairliquide.com
deveniractionnaire.airliquide.com
yorc.airliquide.com
hrmds.corp.airliquide.com
mygas-pprd.airliquide.com
www.airliquide.com
ascpprod.am.corp.airliquide.com
www.cryolor.com
fsdev.apps.airliquide.com
bos.iot.airliquide.com
myairliquide.com
www.offral.airliquide.com
cn.vpn.airliquide.com
mygas.airliquide.com
api-ww-dl-dev.apps.airliquide.com
myinstallations.airliquide.fr
adc-al-xendc2.am.corp.airliquide.com
myalt-distributors.airliquide.com
www.airliquide.com
auth.apps.airliquide.com
gideonsuat.airliquide.com
www.airliquide.com
bam.apps.airliquide.com
www.cryopal.com
e-data.airliquide.com
www.airliquide.com
futurereadydatachallenge.airliquide.com
mailhhc-pp.airliquide.com
Fabnet.Airliquide.com
myportal.airliquide.com
di-api-prod.airliquide.com
altacsweb.us.airliquide.com
e-data.airliquide.com
co-lftext-prod.apps.airliquide.com
www.cryopal.com
new.airliquide.com
connect-jp.airliquide.com
1timepass.apps.airliquide.com
gazyspozywcze.airliquide.com
ext-auth-prod.airliquide.com
kite.airliquide.com
www.cryopal.com
yorc.airliquide.com
pdt-prd.apps.airliquide.com
bomgar.apps.airliquide.com
go.airliquide.com
alair.apps.airliquide.com
distributor.airliquide.com
eworkpermit-test.airliquide.com
console-workspace.apps.airliquide.com
mygas.airliquide.com
esafety-test.airliquide.com
pprd-barpluseeuat.airliquide.com
www.airliquide.com
bomgar.apps.airliquide.com
homes-prd.apps.airliquide.com
myinstallations-dev.airliquide.com
mygas.airliquide.com
servitraxca.apps.airliquide.com
svxwebint.apps.airliquide.com
dev.bos.iot.airliquide.com
www.cryopal.com
auth-pprd.apps.airliquide.com
www.airliquide.com
kiosk.airliquide.com
cube-apac.big.airliquide.com
fleet.altomobile-pprd.airliquide.com
www.cryolor.com
sio-optim-bigateway.apps.airliquide.com
1timepass-pprd.apps.airliquide.com
oracleprod.am.corp.airliquide.com
altecstore.airliquide.com
kercomconfig-apac.preprod.bos.iot.airliquide.com
svxweb.apps.airliquide.com
air-liquide-livret2014.com
*.cms-eu-pprd.airliquide.com
de.hseonair-pprd.airliquide.com

Certificate

The complete raw certificate details for myinstallations-dev.airliquide.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcUWudMSHOCGNoVeKA8I
OkmWsTP4n/Mcnus1spUvICFo3d4l2quQs/YBUeh3apQNYg5qHdgwJtfzC3y26y2T
qHWpdCyjlrSxflrILdAVVS+PzPNK1B12Ju/yzpkLtT83TQyMmPaWZ2P4kvdMUNWQ
Jnd/CQBmzYMQMdhyTo5oxC0X2K+SJR6a27AUOzBwOXs3rMZy4GWa9De62RTUDh8w
0pdLJrt/bYEhxgSWTKkmntkMx7VQlNRyxXFlODef0Pj1BrgDqY163hb27jvW15qS
YjeENVo1rmVWduc6tPdnwGkLz6gVXfS2PFT2nHjli8iI7pxKwpTwMDSLmeEX7Ey0
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13171609262179703662776821337105650649
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-11-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AIR LIQUIDE SA POUR ETUDE EXPLOIT DES PROCEDES GEORGES CLAUDE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'myinstallations-dev.airliquide.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22946321295051546183216236232049734313675839719118994028460689760728862298339594095454059402050376059990115793339389061784021672175371007024521264005432068349329923660441866142459067380786834120527741521850765503667125232112379580173827156188784625565189817814220537816475994906574096062532438753260232116790863478060167073271208372329507618901280068733581331719930786012475782552043173011347488411706069982328139068789579694201061557906350691648395335145938759296862605936987524826980926299088820494335631184810437682982552954497361323488416584654653367944430867410506149660759333775454342208551945015136515303191639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName b76ba2eaa8aa848c79eab4da0f98b2c59576b9f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a92f793f821acdcb807146184ff3d841090c539
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-dev.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-dev.airliquide.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-medical-dev.airliquide.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myinstallations-medical-dev.airliquide.at'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertTLSRSASHA2562020CA1-4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertTLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc7840000017c93b98bdd0000040300483046022100dbfdf021e2b676d110476cda877d7b218b2aac7db0eeafe1b423e3be76617faa022100fe5bee28dd858d9dd446dd5ccfca050d7e631430068cd6230d841b4ba46e0b4f00750051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017c93b98c3800000403004630440220603746f6beb78a2487f67c9ce304d438da0afbaf0a63340476672bfaf1aa94700220532f1cc38144177d35bfea4adb31a00480abe163fa086f7706047cb6982f215c00750041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017c93b98bbd000004030046304402200cbb4be9a70f264e43321dbce8d50d9d3bc23e599e14ca619d983c13eda92a5e02205cd68a9aa2aa8b8b2c8db8ae8ed6e34d207f563a79e5745e00914d6d963da23a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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