cps.sd53.bc.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 3e:5e:9c:8f:e7:88:91:65:13:16:2d:64:8e:03:ec:d1 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=cps.sd53.bc.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:5e:9c:8f:e7:88:91:65:13:16:2d:64:8e:03:ec:d1
Serial Number (int): 82903387100548604905339120672829598929
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 35:58:b3:82:c0:5c:a2:88:b2:c0:13:9d:7c:f2:5e:41:20:ec:cd:6e
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 3a:26:f0:7b:47:eb:80:e7:f6:29:7d:74:45:cc:63:01:fa:ac:9a:4e
Fingerprint (sha256): 05:6d:a1:f1:fd:ce:2f:0d:77:91:75:87:44:ed:76:1e:40:c8:2b:a1:a4:46:c7:7c:55:e5:ce:39:93:a9:d3:ea

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/DhisCnNKp7g
CRL Distribution Point: http://crls.pki.goog/gts1p5/sde2x9K3zZo.crl

Check the revocation status for certificate cps.sd53.bc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cps.sd53.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cps.sd53.bc.ca

Other certificates including the domain name sd53.bc.ca

(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
hilounionschool.org
admin.bicschools.net
cps.sd53.bc.ca
careerprograms.comoxvalleyschools.ca
*.sd53.bc.ca
www.sd53.bc.ca
admin.bicschools.net
admin.wq.mtpcsd.org
admin.colegiogreenhills.com
www.mvsd.ca
*.sd53.bc.ca
www.sd53.bc.ca
admin.waldorfhighschool.org
admin.adultlearning.sunrisesd.ca
www.ranchitoelementary.org
admin.hs.wvsd208.org
admin.rowlettacademy.org
mlc.wvsd208.org
www.hirschhs.org
topazschool.org
www.nlsd113.ca
www.rowlettacademy.org
okf.sd53.bc.ca
nelsondiocese.org
www.ellwood.k12.pa.us
admin.adultlearning.sunrisesd.ca
printshop.comoxvalleyschools.ca
admin.independent.cv.k12.ca.us
okf.sd53.bc.ca
ps.bsd29j.com
mes150.org
www.cw.wvsd208.org
atljewishacademy.org
comoxvalleyschools.ca
harlanfalcons.org
elem.bicschools.net
soss.sd53.bc.ca
edwhite.org
sd53.bc.ca
admin.soar.southredford.org
sd53.bc.ca
www.ohds.org
isp.mvsd.ca
ebjshs.ebps.net
*.sd53.bc.ca
admin.cdms.coltsneckschools.org
stmary.htcsd.ca
admin.colegiogreenhills.com
admin.highschool.homercenter.org
www.marianchs.com
ose.sd53.bc.ca
ose.sd53.bc.ca
sess.sd53.bc.ca
admin.adultlearning.sunrisesd.ca
youlearn.sd53.bc.ca
www.holynamesf.com
addams.southredford.org
athletics.hattiesburgpsd.com
www.jcoms.org
thecije.org
www.wexford.edu.mx
sd53.bc.ca
admin.wearedace.org
oss.sd53.bc.ca
www.sd53.bc.ca
soss.sd53.bc.ca
indigenouseducation.comoxvalleyschools.ca
captiveportal-login.sd53.bc.ca
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
admin.cano.hcisd.org
ose.sd53.bc.ca
adss.sd70.bc.ca
soss.sd53.bc.ca
bbel.bbrook.org
admin.adultlearning.sunrisesd.ca
alma.cv.k12.ca.us
captiveportal-login.sd53.bc.ca
admin.adultlearning.sunrisesd.ca
admin.adultlearning.sunrisesd.ca
jh.iasd.cc
www.thecije.org
htcsd.ca
www.wearedace.org
indigenoused.comoxvalleyschools.ca
www.youngachieversschool.org
sd53.bc.ca
cliftonisd.org
vannoy.cv.k12.ca.us
robinsonelementary.org
preschool.shelbycs.org
www.nelsondiocese.org
bellamy.dover.k12.nh.us
*.sd53.bc.ca
sachs.org
cps.sd53.bc.ca
admin.msd120.org
admin.ces.cliftonisd.org
youlearn.sd53.bc.ca

Certificate

The complete raw certificate details for cps.sd53.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIQPl6cj+eIkWUTFi1kjgPs0TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAyMDMwNjMzMjhaFw0yNDA1MDMw
NjMzMjdaMBkxFzAVBgNVBAMTDmNwcy5zZDUzLmJjLmNhMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEA1f/QamkGckFQ2DNsp5QbRCbgKqQC2pKYZGC377v9
UTRGQ7AkOOuLj/6L9WGeQnlLHDX36ESyH25S0qnokEmWlZysC+HCq9VtyDPc9ZNS
hdunnegiDDUowN5p0IgIjnJGJ/35/m9EyzIv1QBT0j8uE9CXKnn9BPqbviZyFa4a
sU9B594dHFtg3COykepmvPMsVFYtGFCQ8Aq7lbsU2eeww+vifiyviIP7gDMk2hE+
cgVCPWqZYcHkyaOD1hioO91eNiy4zzB4h8pfmeF3OqXmyctSN55dubroibxVDXD6
lT/5gA3RivcIABxxloxwr1hfEXc3VeZKSK63uJ69mfCCHwIDAQABo4ICdTCCAnEw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFDVYs4LAXKKIssATnXzyXkEg7M1uMB8GA1UdIwQYMBaAFNX8
ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvRGhpc0NuTktwN2cwMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwGQYD
VR0RBBIwEIIOY3BzLnNkNTMuYmMuY2EwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYK
KwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29v
Zy9ndHMxcDUvc2RlMng5SzN6Wm8uY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHYA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGNbeL9sgAABAMA
RzBFAiA5UaRMAcqV72Siav7vsoFQ9ts0UqYue8WKWOgUdMDN/gIhAKZhJKO6z6kV
cB53G8/nnfnLTtRlJ95mSc+TiMoj6lzUAHYA7s3QZNXbGs7FXLedtM0TojKHRny8
7N7DUUhZRnEftZsAAAGNbeL8kgAABAMARzBFAiB/XhuGep5sqHtMXXtA1DFOw8FJ
wJd4UyrTQP8FQT4Q2wIhAPvPvtj3JeZrk6k5OHabS/6026mj41Ao6u2UY9ym1cuQ
MA0GCSqGSIb3DQEBCwUAA4IBAQAbgXAHlm1zU9hcCsadMnKWBnuFcbGQ81gP4tbn
/8C1oohxOLLPV99HIqcaHZyeXAIM3fI3qwe9JepaCtdQpWWxOe8Vg4j7Iy9ZCDEb
C9fVLmlMDsIACyTwJM9NXCXNuGNu5Rm3EE3qVwvrTgXZz0wPbdlTJqKpFxwnqbAd
iWKr7YFq2jHRHLJ9DsuHgjSEr+im0TwxG/nRmRv4LTY3z/K5Zdex89kEJM2X0M2I
EhxGFEWhMXuA7y+PWj4HrqCFIWPboE9vKs2Y11Dg7be2/jGOjFvt6y979qsDlzFs
XxKxMfbd+z/M5ZvWxZrz4QFLf2yBKGfXp7045oLraFGR7KUV
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1f/QamkGckFQ2DNsp5Qb
RCbgKqQC2pKYZGC377v9UTRGQ7AkOOuLj/6L9WGeQnlLHDX36ESyH25S0qnokEmW
lZysC+HCq9VtyDPc9ZNShdunnegiDDUowN5p0IgIjnJGJ/35/m9EyzIv1QBT0j8u
E9CXKnn9BPqbviZyFa4asU9B594dHFtg3COykepmvPMsVFYtGFCQ8Aq7lbsU2eew
w+vifiyviIP7gDMk2hE+cgVCPWqZYcHkyaOD1hioO91eNiy4zzB4h8pfmeF3OqXm
yctSN55dubroibxVDXD6lT/5gA3RivcIABxxloxwr1hfEXc3VeZKSK63uJ69mfCC
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 82903387100548604905339120672829598929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 06:33:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 06:33:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cps.sd53.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27014905603712708934642114307567728699295732118991110391294236737429983836094852340244766116203674106512883544297747851717913900358198563077803431178898959906932701896916023121478600809653766763734730319857801443137055420169688592233839387073641033543281391883370632389677954001968496766667581283268673767994794277720810052058943633411155346504654322648577464562417446014866330957357131513932479193757250887202470653264915198538115693728440101884548331742358593793688307380645016787288365202817992551202869349723419849306466456405094385952921761164625717349672049421769444894073663881306269428180461900170672949199391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3558b382c05ca288b2c0139d7cf25e4120eccd6e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/DhisCnNKp7g'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.sd53.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/sde2x9K3zZo.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d6de2fdb2000004030047304502203951a44c01ca95ef64a26afeefb28150f6db3452a62e7bc58a58e81474c0cdfe022100a66124a3bacfa915701e771bcfe79df9cb4ed46527de6649cf9388ca23ea5cd4007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d6de2fc92000004030047304502207f5e1b867a9e6ca87b4c5d7b40d4314ec3c149c09778532ad340ff05413e10db022100fbcfbed8f725e66b93a93938769b4bfeb4dba9a3e35028eaed9463dca6d5cb90
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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