webmail.premieramerica.com

- Premier America Credit Union -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0d:89:c5:19:12:30:ed:df:6b:83:ad:df:87:a5:c0:b0 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Premier America Credit Union

Organization: Premier America Credit Union
Organization unit: Information Security
State / Province: California
Locality: Chatsworth
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:89:c5:19:12:30:ed:df:6b:83:ad:df:87:a5:c0:b0
Serial Number (int): 17995306235849041906893436167999832240
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 26:9a:2c:26:62:ee:67:bb:81:36:9b:f7:7c:d6:f2:50:c9:12:f1:52
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): db:51:ba:a5:56:f9:47:c3:5d:b2:57:99:71:4b:64:cf:cd:9f:99:69
Fingerprint (sha256): d0:1a:38:5f:fd:61:78:b0:e6:61:52:93:3e:eb:f3:87:8a:9c:2d:0f:36:1a:6d:2d:9f:e6:37:c5:2e:a9:47:ec

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate webmail.premieramerica.com

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for webmail.premieramerica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

webmail.premieramerica.com
east-beast.srv.premier.org
premier.org
webmail.premier.org
luckycat.srv.premier.org
autodiscover.premieramerica.com
premieramerica.com
toppremiumfinance.com

Other certificates including the domain name premieramerica.com

(limited to 100 certificates)
www.premieramerica.com
www.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
www.mortgage.premieramerica.com
olb.premieramerica.com
learning.premieramerica.com
m.premieramerica.com
apply.premieramerica.com
www.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
m.premieramerica.com
www.mortgage.premieramerica.com
www.mortgage.premieramerica.com
premier.org
www.premieramerica.com
tools.premieramerica.com
www.premieramerica.com
tools.premieramerica.com
www.premieramerica.com
www.premieramerica.com
premieramerica.com
m.premieramerica.com
premieramerica.com
webmail.premieramerica.com
www.premieramerica.com
www.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
olb.premieramerica.com
www.mortgage.premieramerica.com
www.mortgage.premieramerica.com
apply.premieramerica.com
online.premieramerica.com
www.mortgage.premieramerica.com
premier.org
olb.premieramerica.com
premieramerica.com
www.premieramerica.com
lfgs.premieramerica.com
apply.premieramerica.com
webmail.premieramerica.com
www.premieramerica.com
www.premieramerica.com
olb.premieramerica.com
apply.premieramerica.com
tools.premieramerica.com
lfgs.premieramerica.com
wireless.premieramerica.com
www.mortgage.premieramerica.com
premier.org
tools.premieramerica.com
lfgs.premieramerica.com
olb.premieramerica.com
olb.premieramerica.com
premier.org
www.premieramerica.com
online.premieramerica.com
m.premieramerica.com
m.premieramerica.com
online.premieramerica.com
www.mortgage.premieramerica.com
olb.premieramerica.com
www.premieramerica.com
www.mortgage.premieramerica.com
www.premieramerica.com
www.mortgage.premieramerica.com
www.premieramerica.com
lfgs.premieramerica.com
webmail.premieramerica.com
www.premieramerica.com
www.premieramerica.com
m.premieramerica.com
olb.premieramerica.com
www.mortgage.premieramerica.com
www.premieramerica.com
www.mortgage.premieramerica.com
www.premieramerica.com
olb.premieramerica.com
apply.premieramerica.com
olb.premieramerica.com
www.premieramerica.com
www.premieramerica.com
apply.premieramerica.com
olb.premieramerica.com
www.premieramerica.com
officemail.premieramerica.com
tools.premieramerica.com
m.premieramerica.com
wireless.premieramerica.com
tools.premieramerica.com

Certificate

The complete raw certificate details for webmail.premieramerica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+kG8++6u093wh9/I9AL
qjQ8FdNvKqTAhOdpM9PDuJfYn+kCI3dl4niBO2k+46C9r4ZV1H6/mQv3hzZRjA/Y
BQYG2FqEqyxFDKWVEEdQ9l1VpUDxB81z52Y1Ldj8h2Qwrw4XYfHjtDzKtna4jbrU
/6zplJ208VIVdKO28H5tg0nLv5m6KpLSZkXrY1+Odgy9Pf0FfNM2fyESriaZM3m3
r2ka5nWMluAlK7lAOoKwc/EprJf14IkilcIUURJ8tFhq8pObal7seizw7S7U9LXk
6hBVkSzcy0U+rsm4bXF8mOIz4wCKHfg6PPAQZkbpBXvNPXLcsoLruvH8yAvFOKc6
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17995306235849041906893436167999832240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Chatsworth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Premier America Credit Union'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Security'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webmail.premieramerica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24226426223706231602971094656838620441847761156867299963827996551642026260997775738856278135128716474551170474363868356545918128596114084027142513600593317038499667440912096232339372906727716028178580730432650137649788671273043719125777906015588321649756756514498417953305204006273971897018605780704956994900408286722670495392809255498567897837986733805921444268736889458577651940021597937344637814634315978885129576180376596273021605884812033913872114750714932615388522138383292732604178214664615536644728633255770974033238036031351529760885469325150991100570751952959384062412999200586855976942818377280681918544477
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							269a2c2662ee67bb81369bf77cd6f250c912f152
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (195 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.premieramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'east-beast.srv.premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webmail.premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'luckycat.srv.premier.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.premieramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'premieramerica.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'toppremiumfinance.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							01e0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016100a600de000004030047304502203aba481351c95e9fec3a52333a99d33fbaa64ce311d60372596de6e4feae3669022100d501088f2bf8c98234edae7f85e83db331d0f60b014673f6cfa2863b08f831cd0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016100a601a800000403004630440220136495a50a7e2c548dc6d0bb2a9d01b408e113c6bb34dfac182df5f951966cb102205a1dbe6d9901dc76d5bb10f2d5b8362540e2752bc2d7ac537e44fa9706d02b21007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016100a6010b0000040300483046022100dd7cbc9557f6898a1260007ef051f18d5bc2cbe9815f64232ae0f1ad3cc6a253022100de99a46477bc4ddeb5baa895cfe1db479f2ffb74372d178978516e84af0a2f6b007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016100a6019400000403004730450220662d48973a3566b41e6f8eb215b04439408070c1c10e98f3925853ddd6563b06022100895bb13860809f8e97b6fd885144ddfa40c7e3e4240779afeffa31dd6613bbe1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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