sit.cpp.cjscp.org.uk

- Ministry of Justice -

Issued by Symantec Class 3 Secure Server CA - G4

About this certificate

This digital certificate with serial number 11:07:59:6f:91:ba:bc:36:b2:a6:69:54:8c:0a:4d:01 was issued on by Symantec Corporation.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Ministry of Justice

Organization: Ministry of Justice
Organization unit: CPP
State / Province: London
Locality: London
Country: GB

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 11:07:59:6f:91:ba:bc:36:b2:a6:69:54:8c:0a:4d:01
Serial Number (int): 22635035980235153155213045549750701313
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 5f:60:cf:61:90:55:df:84:43:14:8a:60:2a:b2:f5:7a:f4:43:18:ef

Fingerprint (sha1): ab:0f:55:07:8a:12:9f:fa:da:70:02:58:57:48:fa:ca:29:f0:9e:b5
Fingerprint (sha256): 98:da:68:e2:e5:22:77:ef:b2:05:49:b0:56:25:13:81:e6:d9:e1:5e:8b:ff:a2:f8:01:8d:7f:50:59:e1:f4:ce

Issuing Certificate URL: http://ss.symcb.com/ss.crt

Revocation information

OCSP Server: http://ss.symcd.com
CRL Distribution Point: http://ss.symcb.com/ss.crl

Check the revocation status for certificate sit.cpp.cjscp.org.uk

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sit.cpp.cjscp.org.uk

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sit.cpp.cjscp.org.uk
nft.cpp.cjscp.org.uk
*.nftpr1.cjscp.org.uk
*.nftpr2.cjscp.org.uk

Other certificates including the domain name cjscp.org.uk

(limited to 100 certificates)
saml-token.cjscp.org.uk
sit.cpp.cjscp.org.uk
saml-login.prp.cjscp.org.uk
onlineplea.cjscp.org.uk
prosecuting.cjscp.org.uk
sit.cjscp.org.uk
apigw.cjscp.org.uk
rota-sit.nftpr1.cjscp.org.uk
apigw.nft.cjscp.org.uk
nft.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
cjscp.org.uk
rota.cjscp.org.uk
nft.cjscp.org.uk
onlineplea.cjscp.org.uk
sit.cpp.cjscp.org.uk
redact.prosecuting.nft.cjscp.org.uk
cjscp.org.uk
sit.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
defending.sit.cjscp.org.uk
api.nft.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
login.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
redact.nft.cpp.cjscp.org.uk
saml-login.cjscp.org.uk
redact.prosecuting.nft.cjscp.org.uk
rota.sit.cjscp.org.uk
defending.prp.cjscp.org.uk
rota-sit.nftpr1.cjscp.org.uk
rota.cjscp.org.uk
login.cjscp.org.uk
apigw.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
redact.nft.cpp.cjscp.org.uk
demo.cjscp.org.uk
manage-users.nft.cpp.cjscp.org.uk
api.sit.cjscp.org.uk
api.sit.cjscp.org.uk
saml-gateway.prp.cjscp.org.uk
defending.sit.cjscp.org.uk
onlineplea.sit.cjscp.org.uk
saml-gateway.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
api.cjscp.org.uk
saml-token.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
identity-gateway.nft.cpp.cjscp.org.uk
saml-login.cjscp.org.uk
prosecuting.cjscp.org.uk
saml-login.prp.cjscp.org.uk
defending.nft.cjscp.org.uk
apigw.nft.cjscp.org.uk
saml-gateway.cjscp.org.uk
token.nft.cpp.cjscp.org.uk
defending.cjscp.org.uk
sit.cpp.cjscp.org.uk
cjscp.org.uk
sit.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
saml-token.prp.cjscp.org.uk
saml-gateway.cjscp.org.uk
api.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
apigw.dev.cjscp.org.uk
rota.cjscp.org.uk
defending.nft.cjscp.org.uk
apigw.dev.cjscp.org.uk
api.nft.cjscp.org.uk
sit.cpp.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
defending.cjscp.org.uk
prosecuting.cjscp.org.uk
nft.cjscp.org.uk
onlineplea.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
rota.sit.cjscp.org.uk
defending.prp.cjscp.org.uk
sit.cpp.cjscp.org.uk
api.prp.cjscp.org.uk
cjscp.org.uk
prosecuting.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
onlineplea.cjscp.org.uk
saml-token.cjscp.org.uk
rota.cjscp.org.uk
apigw.prp.cjscp.org.uk
prosecuting.cjscp.org.uk
prosecuting.cjscp.org.uk
my-services.nft.cpp.cjscp.org.uk
login.cjscp.org.uk
apigw.cjscp.org.uk
prosecuting.cjscp.org.uk
api.cjscp.org.uk
prosecuting.cjscp.org.uk

Certificate

The complete raw certificate details for sit.cpp.cjscp.org.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22635035980235153155213045549750701313
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Ministry of Justice'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CPP'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sit.cpp.cjscp.org.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 758173183694941179858722347642653180925070150227930792061210764243485342048704172180281686888285493679144604217726274235618919388512688690251896428085979809270441462719923157692786053668914378990268984113687177648860471108055046453873066320854696080506080630655679229053853114127576151614021091732873750626122108889071344501791004421537149256518930394131342331947504545156030613432373854315019207839728052248892685860014092212307007815078409724491325081400972637471870240899745284438588788931596545258344924718377043915788851410026359712153326913669012619727140044621999254294790401678238387526871965364982786246179780515910722072343669194025063477564464232450106975028248277311399072866113887909452390646999839449253583322030824245836079228784730323513830514685385066631211136669966431615046871953953797700666821575221538582778935192883400058446921875232216570121004483410108412749484905539405982116707503613088778850898989081044185870705952035173615252970913938554029980652602563599240046091766440030361580176950474797986056058458248256613065222960656707114875294175187276931374157571085981074573440703761429525381440742225580441312249523571407271326812901345958264791820331972480705038653252402594143962985969341527078460416059817
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sit.cpp.cjscp.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nft.cpp.cjscp.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nftpr1.cjscp.org.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nftpr2.cjscp.org.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5f60cf619055df8443148a602ab2f57af44318ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ss.symcb.com/ss.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015c44a4e3c60000040300473045022100def33166c12ad45854f90f2bcbc5911ca3ae40d990af68605fba6c4626bf0bfd022020620a9c09848e31601ec369547703bf36bb2404219a9b3adfff92bbf1d3149b007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015c44a4e3f80000040300483046022100cb3519ee6593edd137dd02d2acddd0aa333c959c935518651fbeeee701778105022100a2344d6305001917d7e612740e35e18e95f2ebf56af36b2af6b4db907134948b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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