recovery.lacounty.gov

- County of Los Angeles -

Issued by Sectigo SHA-256 EV Secure Server CA 2

About this certificate

This digital certificate with serial number d0:df:90:29:cb:e9:a3:75:e0:e4:af:3f:7f:db:d9:17 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

County of Los Angeles

Company registration number: Government Entity
Organization: County of Los Angeles
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): d0:df:90:29:cb:e9:a3:75:e0:e4:af:3f:7f:db:d9:17
Serial Number (int): 277640229301161265680447350930688170263
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 8a:43:8e:fd:44:88:a2:9d:74:a9:03:d8:60:02:4d:8a:fe:e8:25:62
AuthorityKeyId: e2:e5:55:07:bc:c1:bc:af:10:f6:e9:e4:c9:db:02:7a:1c:17:86:39

Fingerprint (sha1): 2c:aa:59:cd:04:6c:12:bd:3a:84:5e:9c:08:54:ad:82:5c:9f:81:e3
Fingerprint (sha256): 03:3a:cd:9a:00:19:55:a7:13:77:ad:af:dd:64:eb:34:13:e4:18:68:b3:c6:b7:da:f2:bb:e3:68:f8:ed:10:66

Issuing Certificate URL: http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl

Check the revocation status for certificate recovery.lacounty.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for recovery.lacounty.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

recovery.lacounty.gov
www.recovery.lacounty.gov

Other certificates including the domain name lacounty.gov

(limited to 100 certificates)
sql.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
web-preview.bos.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
apitest.dmh.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
sas.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov
my.dpss.lacounty.gov
isdcadivr.isd.lacounty.gov
reservations.lacounty.gov
mail.o365.lacounty.gov
faf.dcfs.lacounty.gov
isdtest.lacounty.gov

Certificate

The complete raw certificate details for recovery.lacounty.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqli18D3olWW9Jw6N2HS2
W8nrhYSHZHgQKDPGamyR0JkvsZv7ZodlZmdmBIS0uhDomaVLQ2b39Kq6tUyO51+d
3NhibiR70qP3sGleiMVSOzIvgAsVJB//FBE5BIh4r2fccjqRiB7bOH/6MmMzK5pR
hAlrhapTZWGO/Xk7CcIhAiCCxWvzTgarLGGp1YgSdP3OYfYzkPmgEuM/QgmhYQw/
/tHUukvzc1hGku389sZ7B47k1Ouw2POyCep2GdpedGhQbm2+4fEQNPirpqR9dXfu
WX54lwQzl4+h2VCsX61Qb5BVxvusV3rC1E3OQCwSfEp2xYPxvk4WKsn02Kqlqd5f
0QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 277640229301161265680447350930688170263
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo SHA-256 EV Secure Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County of Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'recovery.lacounty.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21504256719338853176670811600808982670060535997564079905057824025337056726688418873475378745804562990237405535441288200356127191765324566683994743948553961251843087895198553447179707566809429943182355069748362147094911165970436728687293041648239985431563417957666311804912248152144409677091394748438440922406159585374625011389003757844925981561622324987859506124640176472827582734231041670876350036927842898306218321515550588091874641176192695005809752250863059673433978011937057690532259040460002662596057659024603326702122925562231642668271549482524169043380626336701337467277420823114203855332571116516533124095953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e2e55507bcc1bcaf10f6e9e4c9db027a1c178639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a438efd4488a29d74a903d860024d8afee82562
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recovery.lacounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.recovery.lacounty.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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