web-preview.bos.lacounty.gov

- County of Los Angeles -

Issued by Sectigo SHA-256 EV Secure Server CA 2

About this certificate

This digital certificate with serial number df:c3:ea:c1:06:de:c5:ca:4a:a6:89:ac:d5:31:a9:ff was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

County of Los Angeles

Company registration number: Ch.424.23012.1947
Organization: County of Los Angeles
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): df:c3:ea:c1:06:de:c5:ca:4a:a6:89:ac:d5:31:a9:ff
Serial Number (int): 297435102324459376417709864916412901887
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 16:94:6c:f4:3f:19:01:0e:53:e3:7f:eb:fd:a9:d9:ae:3d:8e:50:96
AuthorityKeyId: e2:e5:55:07:bc:c1:bc:af:10:f6:e9:e4:c9:db:02:7a:1c:17:86:39

Fingerprint (sha1): 2d:1f:10:93:61:96:f0:5f:86:ed:f4:8a:5d:5f:5f:55:f4:0e:7b:f8
Fingerprint (sha256): 00:2e:2a:ae:41:ed:dc:31:1a:57:dd:07:82:ab:4c:37:bf:8e:26:47:4a:14:da:ca:38:e7:21:da:68:2b:f4:e3

Issuing Certificate URL: http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl

Check the revocation status for certificate web-preview.bos.lacounty.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for web-preview.bos.lacounty.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

web-preview.bos.lacounty.gov
www.web-preview.bos.lacounty.gov

Other certificates including the domain name lacounty.gov

(limited to 100 certificates)
sql.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
sbc.lacounty.gov
web-preview.bos.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
apitest.dmh.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
expenditures.lacounty.gov
sas.lacounty.gov
landlord.ceo.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
m.escars.dcfs.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
patientportal.lahealthportal.dhs.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eprspotestlb.isd.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov

Certificate

The complete raw certificate details for web-preview.bos.lacounty.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjL3xfg083owo9ac0CeL
ONnAE2Zr7XT0uZN4mt9m37Lz5GtsCPfjuF1srEKdQypHMAhbMdTJJOSIxu7L2w23
nhaICtIDXwJ9WxJU/TSoDghSElR25a54DGACer9VRggy4BnH6NTncZniZw7UzDqc
RJfbvkNG2wGUZPcPDsVesiEilp93/RXHK0LOK0EAXOfDYJXd8HOXC9AH6XUU/1cm
6pzd/ypS3DnuSBXE42ItxifKOEoP2q4f19Hy7kK7wqxARA1wKBpd+qf9XyQRjmKL
F0o6M6uaVKjocXX0ZtaLBgFXrTXkctVQCBx95VHxw9Vrx196hqKw/RB5Sx4+B+S+
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297435102324459376417709864916412901887
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo SHA-256 EV Secure Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ch.424.23012.1947'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County of Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'web-preview.bos.lacounty.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19970785375361744118631815326193952806947397185549830399167970743543945686327362339899523299128864092524551591340068532123457368292942858827637738122606328317534625439787620950011531573763222565592294718288010232226379495067220088406756985600638484891473577489115396148186580474742484544070452532227072256224396859318632129455489025671541508200691235289090503168045654626141932658391631287744685864090952085231309638792804442818872495490029081672005052235717816548241091623946925208070505980260046668752496999505635192489769754221102355629572643799350252162352217136886191123540655692741275289109742383475106395766329
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e2e55507bcc1bcaf10f6e9e4c9db027a1c178639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							16946cf43f19010e53e37febfda9d9ae3d8e5096
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-preview.bos.lacounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.web-preview.bos.lacounty.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00218bb034bd3cb0a375482d6cee7178c50bb1c1628b8b4958ba5a5032bbae5eb73c2ef9f6e4020c24baf041b5ab90d0f8758ba22880caf04b466d4e0d3047b452c0496b782e4d7085d3739d37e98eabddbb6e826d4491529b8eea83529db9188dee7be17403586e326c5ecce69f038f481616c581c062a2fea601054f48bff4d1fd84bd85a8e8fce6df12b2a41ce4f33830b760303732f1bf01552b20a9e528a812f3e29fd5b2e7583ae1059cbcebc1bc4d8baf00448fce1df7509d26d94f09522e182f671efae29cfc399cb4a203c0bdc5eb8e7d36c7234d6349d25394d59347da8aaca18016a16c41ce576d5b2386847b933a0219883f35fba4bf399f2a355e