aristoiclassical.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number af:0d:1c:44:47:37:0e:34:0e:eb:a2:10:64:ff:f3:59 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=aristoiclassical.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): af:0d:1c:44:47:37:0e:34:0e:eb:a2:10:64:ff:f3:59Serial Number (int): 232682972438545177424914846504718431065
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 22:f4:b0:34:54:15:1f:47:ff:5c:0f:1c:66:90:7f:96:83:e8:c9:19
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): b9:ad:37:55:aa:df:dd:52:c9:2e:e2:69:ed:0f:71:11:79:cb:05:3d
Fingerprint (sha256): 03:29:36:6a:be:79:d7:d7:96:24:4f:a2:fa:7d:02:c2:b5:0e:9a:08:20:9b:7e:6f:25:54:64:a6:1f:95:09:ba
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/JBNi8DsI37kCRL Distribution Point: http://crls.pki.goog/gts1p5/MlMYqnZ9WUE.crl
Check the revocation status for certificate aristoiclassical.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for aristoiclassical.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
aristoiclassical.org
Other certificates including the domain name aristoiclassical.org
(limited to 100 certificates)
aristoiclassical.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
sgmission.org
admin.nms.davidson.k12.nc.us
admin.aristoiclassical.org
lifeschools.net
admin.fges.davidson.k12.nc.us
admin.bclc.burke.k12.ga.us
admin.bes.ballingerisd.net
mas.mpusd.net
admin.aristoiclassical.org
hes.masd209.org
aristoiclassical.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
aristoiclassical.org
hoganprep.net
admin.aristoiclassical.org
aristoiclassical.org
hy.hpisd.org
aristoiclassical.org
cte.mpsdnow.org
aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
pantojacharter.org
admin.aristoiclassical.org
aristoiclassical.org
rosebudacademy.com
admin.donegal.mpasd.net
hartorah.org
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
admin.aristoiclassical.org
admin.mes.mayfield.kyschools.us
admin.athenscityschools.net
admin.aristoiclassical.org
admin.mphs.mpsdnow.org
admin.nes.davidson.k12.nc.us
www.pantojacharter.org
admin.ves.monroe.k12.tn.us
www.mtadams.wednet.edu
admin.aristoiclassical.org
hs.cumberlandacademy.com
aristoiclassical.org
aristoiclassical.org
admin.wal.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
cte.mpsdnow.org
www.ncsd.net
aristoiclassical.org
admin.hs.hpisd.org
admin.aristoiclassical.org
es.glendaleacademy.org
aristoiclassical.org
admin.colonies.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
sgmission.org
admin.nms.davidson.k12.nc.us
admin.aristoiclassical.org
lifeschools.net
admin.fges.davidson.k12.nc.us
admin.bclc.burke.k12.ga.us
admin.bes.ballingerisd.net
mas.mpusd.net
admin.aristoiclassical.org
hes.masd209.org
aristoiclassical.org
admin.adultlearning.sunrisesd.ca
admin.aristoiclassical.org
aristoiclassical.org
hoganprep.net
admin.aristoiclassical.org
aristoiclassical.org
hy.hpisd.org
aristoiclassical.org
cte.mpsdnow.org
aristoiclassical.org
admin.aristoiclassical.org
admin.aristoiclassical.org
pantojacharter.org
admin.aristoiclassical.org
aristoiclassical.org
rosebudacademy.com
admin.donegal.mpasd.net
hartorah.org
admin.oghs.davidson.k12.nc.us
es.glendaleacademy.org
admin.nes.davidson.k12.nc.us
admin.aristoiclassical.org
admin.mes.mayfield.kyschools.us
admin.athenscityschools.net
admin.aristoiclassical.org
admin.mphs.mpsdnow.org
admin.nes.davidson.k12.nc.us
www.pantojacharter.org
admin.ves.monroe.k12.tn.us
www.mtadams.wednet.edu
admin.aristoiclassical.org
hs.cumberlandacademy.com
aristoiclassical.org
aristoiclassical.org
admin.wal.davidson.k12.nc.us
admin.bces.davidson.k12.nc.us
cte.mpsdnow.org
www.ncsd.net
aristoiclassical.org
admin.hs.hpisd.org
admin.aristoiclassical.org
es.glendaleacademy.org
aristoiclassical.org
admin.colonies.sunrisesd.ca
Certificate
The complete raw certificate details for aristoiclassical.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFazCCBFOgAwIBAgIRAK8NHERHNw40DuuiEGT/81kwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwNDEzMjAwMzM0WhcNMjMwNzEy MjAwMzMzWjAfMR0wGwYDVQQDExRhcmlzdG9pY2xhc3NpY2FsLm9yZzCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBALJ2ZpNQDw8Kq62EueZfzYDAG7QcmfKy W7vjjy/Ta6WUZpRbt3siU6RHS/RSs3oaQ9vtdMzalCPUgCKoLa9t2iKlmT6xJ5DV o1T3Avy2pt9ff3RukpdQjSkVk9yozoFMXMs+9ViY5dChayc4r1PxPkICmRNXGIbj k0NZ1TngpMgbhOnZYGFsgQFBr7Nmq7XNWh/JEI0ra9yKYpxiiLWaRfnx+mfI+PEf bJYfiUkVZnh8C1Qr+aptDmXt/i8ZNJYAwMC2RR2BcTz2HbcaQ/jvvEBWC1V83kjT ge0sGbHfkD8ogoqIl0WHah3FJOshSsu2QLtVKOm9k9yn2ToD3EVYgxsCAwEAAaOC AnkwggJ1MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV HRMBAf8EAjAAMB0GA1UdDgQWBBQi9LA0VBUfR/9cDxxmkH+Wg+jJGTAfBgNVHSME GDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYB BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0pCTmk4RHNJMzdr MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUu ZGVyMB8GA1UdEQQYMBaCFGFyaXN0b2ljbGFzc2ljYWwub3JnMCEGA1UdIAQaMBgw CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov L2NybHMucGtpLmdvb2cvZ3RzMXA1L01sTVlxblo5V1VFLmNybDCCAQIGCisGAQQB 1nkCBAIEgfMEgfAA7gB2ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWa AAABh3xuSL0AAAQDAEcwRQIhAJPQX4v9y8A0qa/ulnl+Xmsf2sY2A2DIQPbJ8Odm KcYPAiAEboACeP9HwoipNXnaQEVx5zOKgYOZYh9XJqTlIlqSSwB0AOg+0No+9QY1 MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABh3xuSKYAAAQDAEUwQwIgGzSiOEd1 gfKgEXkHqf9eavYppGuo493LFJXgRJkcuk8CHzXMmxC9/K5fGIY/4Ufu1Dd1LAl0 wCHW7+4xbC2jjc8wDQYJKoZIhvcNAQELBQADggEBAIl20THC45hHLWGR7fS14bXT 86BVxzIhodd48YYpdTD68gtXaE+yJfXoQutTTcA++CqRoNGRLinkRp805sshHfVB IFWmZb1/+OI/F2w5ksEkDeytY9Ue0XHQB3QDvWmjAxCe9GXYXTNZOSUYWe8rNYqP cfyQpmTSjK+xiIcGoQarlE4caNfaxL8yIuGI6SeHUICDw7OA0xrefb7eGMv4XAJL mxaltqofb15Azwm6UU6XKpEIfockKvBBopoEWAxT5W5MVnGM9/xmb41SxhhMxWMh IUE1x5s+7eUPjIUJfOAdkXAp+D3jhVvxx2LFadQNF3eOjC/vfB3+H3M+QyniYkw= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnZmk1APDwqrrYS55l/N gMAbtByZ8rJbu+OPL9NrpZRmlFu3eyJTpEdL9FKzehpD2+10zNqUI9SAIqgtr23a IqWZPrEnkNWjVPcC/Lam319/dG6Sl1CNKRWT3KjOgUxcyz71WJjl0KFrJzivU/E+ QgKZE1cYhuOTQ1nVOeCkyBuE6dlgYWyBAUGvs2artc1aH8kQjStr3IpinGKItZpF +fH6Z8j48R9slh+JSRVmeHwLVCv5qm0OZe3+Lxk0lgDAwLZFHYFxPPYdtxpD+O+8 QFYLVXzeSNOB7SwZsd+QPyiCioiXRYdqHcUk6yFKy7ZAu1Uo6b2T3KfZOgPcRViD GwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 232682972438545177424914846504718431065 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-13 20:03:34 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-12 20:03:33 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aristoiclassical.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22528803837946101357465484187379472823011280369076955654505414551990183227298810842263623565994181674808976760362220292943169858971900403051694911529687764129008566106788038535105523567318295694839704375249433832890444043283389499246243928550647850302968800285139069569355798151127640806026018967535239711302480979407793999574441566712613161875883858279239718214469581963199645812975088613688128438937823169262394908768299761728751212060876180508166911209349384420662021259987072149922726638492764521237019204997678637225086448660862665528195405348874453558339950328778197162856117925453764506614924407222197231846171 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 22f4b03454151f47ff5c0f1c66907f9683e8c919 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/JBNi8DsI37k' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aristoiclassical.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/MlMYqnZ9WUE.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes) 00ee007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001877c6e48bd000004030047304502210093d05f8bfdcbc034a9afee96797e5e6b1fdac6360360c840f6c9f0e76629c60f0220046e800278ff47c288a93579da404571e7338a818399621f5726a4e5225a924b007400e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001877c6e48a6000004030045304302201b34a238477581f2a0117907a9ff5e6af629a46ba8e3ddcb1495e044991cba4f021f35cc9b10bdfcae5f18863fe147eed437752c0974c021d6efee316c2da38dcf . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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