ngms.greenek12.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 3b:fb:cc:89:03:cc:93:5f:0e:3c:35:9d:40:32:65:aa was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ngms.greenek12.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 3b:fb:cc:89:03:cc:93:5f:0e:3c:35:9d:40:32:65:aa
Serial Number (int): 79731866729795459469071348852663149994
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: d5:1b:5d:25:39:8a:50:86:59:3e:e0:03:b2:d7:4e:9e:50:f5:fc:fb
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 09:17:f1:79:d7:94:5e:6f:4d:1e:af:e6:b1:0c:ed:ca:bd:e2:33:db
Fingerprint (sha256): 01:54:42:98:5e:4a:e8:9d:5a:a4:95:6d:2f:c7:f4:56:ee:6b:ca:5e:dd:aa:59:2e:24:74:08:68:17:bf:a9:6c

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/KpEBosAl96A
CRL Distribution Point: http://crls.pki.goog/gts1p5/0VUcVnF-PfM.crl

Check the revocation status for certificate ngms.greenek12.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ngms.greenek12.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ngms.greenek12.org

Other certificates including the domain name greenek12.org

(limited to 100 certificates)
ngms.greenek12.org
admin.cdms.greenek12.org
admin.ljef.ljsd.org
www.cranburyschool.org
baileyton.greenek12.org
edcenter.greenek12.org
admin.cdhs.greenek12.org
admin.adultlearning.sunrisesd.ca
admin.hs.wvsd208.org
admin.cdms.greenek12.org
www.holyfamilycatholicacademy.net
admin.sghs.greenek12.org
ashlandcityccs.net
www.healthystartacademy.com
ps.bsd29j.com
cdms.greenek12.org
1.southampton.k12.nj.us
debusk.greenek12.org
admin.avrlacademy.org
benchmarkbobcats.org
1.southampton.k12.nj.us
www.crawfordschools.org
cra.freeholdtwp.k12.nj.us
1.southampton.k12.nj.us
admin.campcreek.greenek12.org
admin.bands.dekalbcentral.net
admin.aes.acsc.net
admin.adultlearning.sunrisesd.ca
www.holynamesf.com
2.southampton.k12.nj.us
admin.es.lorenaisd.net
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
edcenter.greenek12.org
admin.coahomak12.org
mdm.greenek12.org
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
sghs.greenek12.org
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
www.southernwakeacademy.org
shs.lskysd.ca
nphs.bpusd.net
lacountycharterselpa.org
church.faithmarietta.org
admin.ersk.acsc.net
www.colegioangloamericanohgo.edu.mx
grandview.adsb.on.ca
admin.glenknoll.org
www.cristoreysanjose.org
admin.acsc.net
admin.bands.dekalbcentral.net
admin.chuckey.greenek12.org
*.greenek12.org
2.southampton.k12.nj.us
preschool.shelbycs.org
msdurham.org
1.southampton.k12.nj.us
debusk.greenek12.org
sachs.org
admin.ps17queens.com
admin.ups.lskysd.ca
*.greenek12.org
bcsdk12.org
harpethhighccs.net
campcreek.greenek12.org
coahomak12.org
admin.aes.lammersvilleschooldistrict.net
www.rosemont78.org
admin.acsc.net
1.southampton.k12.nj.us
admin.ike.iasd.cc
www.mstmaatroosevelt.org
www.ps17queens.com
bronxdalehs.org
cranburyschool.org
www.ckchicago.org
2.southampton.k12.nj.us
westcheathamccs.net
admin.kauffmanschool.org
sh.iasd.cc
admin.colegioedlio.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.benchmarkbobcats.org
www.sainte-school.org
colonies.sunrisesd.ca
admin.avrlacademy.org
admin.bronxdalehs.org
oglesby.cps.edu
www.bsd29j.com
ckcs.lskysd.ca
faithmarietta.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
southbayadult.org
www.annaleeelementaryandsteammagnet.org

Certificate

The complete raw certificate details for ngms.greenek12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFaDCCBFCgAwIBAgIQO/vMiQPMk18OPDWdQDJlqjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA1MTcxNzQxNDlaFw0yNDA4MTUx
NzQxNDhaMB0xGzAZBgNVBAMTEm5nbXMuZ3JlZW5lazEyLm9yZzCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAL5yeYOUWtYoMOfOIIO3xNElYOet+sdL9035
5W0WDo8TWxgbUD2ukDkgATfn0kW3KYC7H0YChD0wFAZW+KwMdw8PpM6xvbnxVp89
wI+dTR5oS0p4L9LMiTVf+WD9vQL2iLjAyZQAdhPwrem2vXWlEQOtz6W7db9ykDj1
mQjv0lD00SV1TGu5FAKjnCm2WylZBiwxnaGDNVgWvRagCAZnD00PKz/9M2JIAxXp
WRc67scm8GV3i4AmtkciXPEVRFvlvhDihAKXRj3H6XdvGHI5sjHQdC3U1c3YrXd5
exlyFz6JT4ff7crR+oSJ5h94aHPKYJRabMtp36Yai0ccSKn2G4sCAwEAAaOCAnkw
ggJ1MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBTVG10lOYpQhlk+4AOy106eUPX8+zAfBgNVHSMEGDAW
gBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0twRUJvc0FsOTZBMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVy
MB0GA1UdEQQWMBSCEm5nbXMuZ3JlZW5lazEyLm9yZzAhBgNVHSAEGjAYMAgGBmeB
DAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz
LnBraS5nb29nL2d0czFwNS8wVlVjVm5GLVBmTS5jcmwwggEEBgorBgEEAdZ5AgQC
BIH1BIHyAPAAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAY+H
3EB0AAAEAwBHMEUCIGpl/Iib6YzXJv2HhglAOOraPTeFA4d9ifxM6kQG4XPJAiEA
0dfSRf78n/5m1llzx0lsesuuT3gDqR6jVsTpd5VNTE4AdgBIsONr2qZHNA/lagL6
nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY+H3ECUAAAEAwBHMEUCIQCiskQvakWmQY3/
53gg2Cqswcq5hvYyKoHyG07AKngn3gIgQ7f415IDFqD9+uweor0iWisWY2BJvQSR
kT3uyt4RNcAwDQYJKoZIhvcNAQELBQADggEBAGMvkeB8puBhllKu9YyDz1pMz5e5
iCkzudk6zfKQcU6PNyugf1pkMgnUEeACantukFb4efpjAV3tUbUyUGBrHRN19y4O
9UXw45h/Jl2d+ke0O0EWJTYJXPYYvSYp797vQaUPCdj/eEGqqVL0cq7N1oErvN7k
azVHbepRiRykVtezly3sCdyhYMtYArWl0V3elwUJUKFSep3WIvuULWKdvF7ututp
SPSLF/aMjT+lwl7sh6bgJ4i/uYWU1RpM5k8PtLVFC809zC35XvXiPetbhAM/bKLb
7UeqW0zB1oChv5eFCIWjpQgC5sozICJGDgv8X2LtBrDl2BmK6akEZUrIYHk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnJ5g5Ra1igw584gg7fE
0SVg5636x0v3TfnlbRYOjxNbGBtQPa6QOSABN+fSRbcpgLsfRgKEPTAUBlb4rAx3
Dw+kzrG9ufFWnz3Aj51NHmhLSngv0syJNV/5YP29AvaIuMDJlAB2E/Ct6ba9daUR
A63Ppbt1v3KQOPWZCO/SUPTRJXVMa7kUAqOcKbZbKVkGLDGdoYM1WBa9FqAIBmcP
TQ8rP/0zYkgDFelZFzruxybwZXeLgCa2RyJc8RVEW+W+EOKEApdGPcfpd28Ycjmy
MdB0LdTVzditd3l7GXIXPolPh9/tytH6hInmH3hoc8pglFpsy2nfphqLRxxIqfYb
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 79731866729795459469071348852663149994
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 17:41:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 17:41:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ngms.greenek12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24041727504270521769470991476053668171596538863820213882700238999186736747357442762204052869573259954952517039530906346731932153435967101667775720860306886980715732983595099105427825422167243559218827257679145492447618275493098613871661116434400544620860700187457691342804167772228221881922864045061266109672906130621233703829692480850543765143781874134226830598341695287393313965920520274458840060177718723433962699108343082823379355534959669701681986642788725398181544810058822599147031042095467368075524663596638875422449640990240597320130536201395993375879520484344333484248138516264276932545158673710383124323211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d51b5d25398a5086593ee003b2d74e9e50f5fcfb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/KpEBosAl96A'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ngms.greenek12.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/0VUcVnF-PfM.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f87dc4074000004030047304502206a65fc889be98cd726fd8786094038eada3d378503877d89fc4cea4406e173c9022100d1d7d245fefc9ffe66d65973c7496c7acbae4f7803a91ea356c4e977954d4c4e00760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f87dc40940000040300473045022100a2b2442f6a45a6418dffe77820d82aacc1cab986f6322a81f21b4ec02a7827de022043b7f8d7920316a0fdfaec1ea2bd225a2b16636049bd0491913deecade1135c0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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