owa.gmw.nhs.uk

- Greater Manchester West Mental Health NHS Foundation Trust -

Issued by Symantec Class 3 Secure Server SHA256 SSL CA

About this certificate

This digital certificate with serial number 63:8c:d7:f9:8d:26:ba:cb:08:24:fc:64:9d:b1:65:f4 was issued on by Symantec Corporation.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Greater Manchester West Mental Health NHS Foundation Trust

Organization: Greater Manchester West Mental Health NHS Foundation Trust
Organization unit: ICT
State / Province: Lancashire
Locality: Manchester
Country: GB

Symantec Corporation

Organization: Symantec Corporation
Organization unit: Symantec Trust Network
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 63:8c:d7:f9:8d:26:ba:cb:08:24:fc:64:9d:b1:65:f4
Serial Number (int): 132324873632463006117829120581734327796
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: db:62:20:fb:7d:02:89:7c:d2:3b:6f:c7:e4:32:6c:05:52:1d:ad:b1

Fingerprint (sha1): 49:44:a4:8b:c0:2b:8a:10:68:54:3d:fe:f0:4e:bb:64:5a:46:b0:5f
Fingerprint (sha256): af:ce:9c:d1:97:60:54:73:57:5a:ec:57:cb:87:51:a6:91:3f:b0:63:5b:b5:9a:ed:a0:ec:95:3e:d0:61:1d:fe

Issuing Certificate URL: http://sg.symcb.com/sg.crt

Revocation information

OCSP Server: http://sg.symcd.com
CRL Distribution Point: http://sg.symcb.com/sg.crl

Check the revocation status for certificate owa.gmw.nhs.uk

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa.gmw.nhs.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa.gmw.nhs.uk
AutoDiscover.gmw.nhs.uk
AutoDiscover.gmmh.nhs.uk
outlook.gmw.nhs.uk
gmw.nhs.uk
gmmh.nhs.uk
mail.gmw.nhs.uk

Other certificates including the domain name gmw.nhs.uk

(limited to 100 certificates)
sip.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
gmw.nhs.uk
ara.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
adrms.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
ara.gmw.nhs.uk
learninghub.gmw.nhs.uk
sip.gmw.nhs.uk
outlook.gmw.nhs.uk
learninghub.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
owa.gmmh.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
sip.gmw.nhs.uk
sip.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
learninghub.gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
owa.gmw.nhs.uk
gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
*.gmw.nhs.uk
AutoDiscover.gmmh.nhs.uk
sip.gmmh.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
FTP01.gmw.nhs.uk
owa.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.gmw.nhs.uk
gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
IP-DECT6500.gmw.nhs.uk
gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
outlook.gmw.nhs.uk
www.gmw.nhs.uk
Documents.gmw.nhs.uk
www.gmw.nhs.uk
www.eol.gmw.nhs.uk
sip.gmw.nhs.uk
ara.gmw.nhs.uk
DirectAccess-NLS.gmw.nhs.uk
www.gmw.nhs.uk
ara.gmw.nhs.uk
OWA.GMW.NHS.UK
gmw.nhs.uk
gmw.nhs.uk
sip.gmw.nhs.uk

Certificate

The complete raw certificate details for owa.gmw.nhs.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UIYnb/aZ9xi1vcMNlr+
TAgmJyqmSk3jma0jxcMwQBpL9059GV29rj8xoR6t381bDjxdwuEzAPadxndf1rBm
JcOF7sQJnA+3g7yk8RdSF863ayX1hzTn3a6KxY8cakXjCowGfyArVToKsXHArpUa
8Pm20jNvOHNXSTMET6XRZDBQnKZNMGgGkfb63E096swrIVA/bHKLV5bnNyg/hzlJ
L9GDtmiSrij1bdqwi7YWgopAISDd1KZQ5sFKoRGCvOvo2neEM2Vz12jD7MCkXSP9
u0FE0MW3KAVl3m9TWd0wb0mxGnil2fclHTWx4nujfdNGTTHv6+sWdoIKON/Gj7v0
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 132324873632463006117829120581734327796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Trust Network'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Symantec Class 3 Secure Server SHA256 SSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-05-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Lancashire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Greater Manchester West Mental Health NHS Foundation Trust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ICT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'owa.gmw.nhs.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26416398967721423705322386034438045083749419211822164139359530418254875952827284071846388331613043757828751634696019633494075818232721829975204576735463930011054580027108546605292958610255300319134557494593066449047877076545813901450858385061526318319798408899398908304674387192022167946201061298776898141439127599445952980031974406580191689047158862636456980656468926696241347574704571709807713243744420556476416956512243699216802139170174574979160043320414339660691052611815010001092058454158955203133759478152436050172103548820721958331634112258092560467877567528498801229723097942075841518194413209883679221609639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (132 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'AutoDiscover.gmmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'outlook.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmw.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gmmh.nhs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.gmw.nhs.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://d.symcb.com/cps'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://d.symcb.com/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName db6220fb7d02897cd23b6fc7e4326c05521dadb1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://sg.symcb.com/sg.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							01df007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc0000015be6fa0c130000040300473045022100f2c8d6b7b9bfff79858dcb034442502f3fef988dfb2801ef93d6d73b45751d51022044cc8254ec1e68bdfac871b3ae24aec3351eb5fd2122d4162e4a9729286034ec007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000015be6fa0c2a000004030046304402203bd9fa03951c646f866ce03ae682f41b154a08d3f5963ebfd30888298861087d0220052d51c595f64d22298301c2e06ac0639d672fce443fd1d2929ccebfd31dfdf5007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000015be6fa0e0e000004030047304502203f8f592876308884a2b68ef97d115a5c20d8f6e0f6c4f43a1fbad47f7fed9bd4022100ebcb239cfe2925dd95284e583c5f1f7bb02fc3cc69d421be09c652f8153e6d63007600bc78e1dfc5f63c684649334da10fa15f0979692009c081b4f3f6917f3ed9b8a50000015be6fa0d08000004030047304502204b812f6882b3a9ed28a518abc94e6a42851ee3c7aac3bbc59ffe1ac2bd9d2ccf0221009f003f3e5f77dbd847abb52547a84ca2d5b01369318425fe8d17bf8215fc2d8e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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