fire.lacounty.gov

- County of Los Angeles -

Issued by Sectigo SHA-256 EV Secure Server CA 2

About this certificate

This digital certificate with serial number fc:1c:a0:ac:3f:b1:3d:db:0b:cd:03:97:b8:d6:6c:c9 was issued on by Sectigo Limited.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

County of Los Angeles

Company registration number: Ch.424.23012.1947
Organization: County of Los Angeles
State / Province: California
Country: US

Sectigo Limited

Organization: Sectigo Limited
Country: GB

This certificate will expire on

Certificate Details

Serial Number (hex): fc:1c:a0:ac:3f:b1:3d:db:0b:cd:03:97:b8:d6:6c:c9
Serial Number (int): 335114098082330139459951406476783152329
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 5f:46:7b:d9:59:06:4b:87:50:8f:61:e0:ae:d7:76:e2:8e:ab:e7:22
AuthorityKeyId: e2:e5:55:07:bc:c1:bc:af:10:f6:e9:e4:c9:db:02:7a:1c:17:86:39

Fingerprint (sha1): 38:d7:bd:11:b8:d2:b4:b1:81:ce:0b:eb:e4:f7:16:05:85:a5:b1:75
Fingerprint (sha256): 07:00:87:c9:be:19:fb:c6:cd:0d:f5:7c:a4:86:37:75:51:24:e3:f4:c8:cb:47:8d:b7:37:68:83:77:fb:ac:1c

Issuing Certificate URL: http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt

Revocation information

OCSP Server: http://ocsp.sectigo.com
CRL Distribution Point: http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl

Check the revocation status for certificate fire.lacounty.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fire.lacounty.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fire.lacounty.gov
www.fire.lacounty.gov

Other certificates including the domain name lacounty.gov

(limited to 100 certificates)
sql.lacounty.gov
ccmsbravap1.isd.lacounty.gov
iadpmpoc.lacounty.gov
ecomplaint.dca.lacounty.gov
inventory.lacounty.gov
epicla.lacounty.gov
chip.lacounty.gov
sbc.lacounty.gov
web-preview.bos.lacounty.gov
assessorportalstg.assessor.lacounty.gov
learningnet.lacounty.gov
iddweb.isd.lacounty.gov
mail.dhs.lacounty.gov
dow-expwayc1.isd.lacounty.gov
learningnet.lacounty.gov
mail.dpss.lacounty.gov
b2bqa.dmh.lacounty.gov
apps4.dcfs.lacounty.gov
homeless.lacounty.gov
mgrievancedev.probation.lacounty.gov
escars.dcfs.lacounty.gov
pex.isd.lacounty.gov
bits.dcfs.lacounty.gov
secureauthidp.probation.lacounty.gov
phsp.publichealth.lacounty.gov
rprs.ttc.lacounty.gov
dcfsiibp.lacounty.gov
laccb.lacounty.gov
youthsubscription.dcfs.lacounty.gov
isdjpa.isd.lacounty.gov
hr.lacounty.gov
assessor.lacounty.gov
studentinfotracking.dcfs.lacounty.gov
assessor.lacounty.gov
iadpmpocint.lacounty.gov
apitest.dmh.lacounty.gov
cappay.dcfs.lacounty.gov
misdsmsdmzp01.isd.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
eforms.lacounty.gov
smsm.isd.lacounty.gov
eprspcont1.isd.lacounty.gov
mcdwinmgmt.isd.lacounty.gov
hr.lacounty.gov
apps2a.dcfs.lacounty.gov
expenditures.lacounty.gov
sas.lacounty.gov
landlord.ceo.lacounty.gov
ezforms.assessor.lacounty.gov
recovery.lacounty.gov
ceo911.lacounty.gov
rmisweb2.lacounty.gov
pi.assessor.lacounty.gov
adpacis.ph.lacounty.gov
sts.lacounty.gov
mypc.lacounty.gov
api.library.lacounty.gov
lacform700.lacounty.gov
ivantfd.probation.lacounty.gov
dcfsaspnet.dcfs.lacounty.gov
apps.hr.lacounty.gov
prosperla.lacounty.gov
api.library.lacounty.gov
pw.lacounty.gov
sts.lacounty.gov
fafwebservice.dcfs.lacounty.gov
*.era.lacounty.gov
ttc.lacounty.gov
mandreptfnl.isd.lacounty.gov
m.escars.dcfs.lacounty.gov
vx3.lacounty.gov
trafficdocs2.isd.lacounty.gov
housing.lacounty.gov
*.ph.lacounty.gov
fire.lacounty.gov
PasswordReset.lacounty.gov
t2c.dcfs.lacounty.gov
fire.lacounty.gov
oarrs.lacounty.gov
assessorcalamity.lacounty.gov
epictapp.lacounty.gov
omg.dhs.lacounty.gov
ccmsuat.isd.lacounty.gov
ccjv.lacounty.gov
eec.lacounty.gov
patientportal.lahealthportal.dhs.lacounty.gov
rprstst.ttc.lacounty.gov
propertytax.lacounty.gov
ecmcontst01.isd.lacounty.gov
dow-expwayx1.isd.lacounty.gov
archives.lacounty.gov
eprspotestlb.isd.lacounty.gov
eappeals.lacounty.gov
dcfspbigw.isd.lacounty.gov
pw.lacounty.gov
ceop.lacounty.gov
fire.lacounty.gov
mitchell.lacounty.gov
eprwebexttst.lacounty.gov
parks.lacounty.gov

Certificate

The complete raw certificate details for fire.lacounty.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsSjzZa8EHP/r/Xv5a40s
5rjYuXe30FzgVoRZjQ3T8HiYxQ0+zxgheWl0bmVuCBU50M+iOcg8hsPOEj/biDGw
AEnccpkZ2KSiDw45ej67tepMZ4Lk70shFN4KsyQG0LeUmqz1ef6D+BI6Jx+xuGXX
18XIqeM8d8WQ4mBpCdVD2EzbxvF0Bemd2dHmByTtnk28AqbAfkzkxFPLZ+Y2+Wv1
MHp01OBcDG1BRiIHz87NoqblrjaDMQL1KQ+nf+BhnHPDDlDkH1lzJxwyujzo4C53
zmViE5bd+1sm+BC01ZLcJIO+0wB5uwDK2ptumRpugImTIo4yNL9t1IdyFp9MHB/R
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 335114098082330139459951406476783152329
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sectigo SHA-256 EV Secure Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ch.424.23012.1947'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'County of Los Angeles'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fire.lacounty.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22364373556461843920103628538178966195926092565485147760430165311089556988447861706426790715284038838805634918789121018600909198844355251996474532160742005763089131207416752837865713695704258567625107998343614346411453504101348168602701046819210549087265907000922944591062248470100783279042839238473826855487818295960748146560807352270712908314911418649686548508753817596205042484154053887534312727251946001173377460664980795422473307219310733847091564087610757615714380168967348627857001201699091439755223902533538968781132436664151858030062234491122014821395259484873621435889524772191509014446132986550732772593989
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e2e55507bcc1bcaf10f6e9e4c9db027a1c178639
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5f467bd959064b87508f61e0aed776e28eabe722
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.1.5.1 (Comodo EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sectigo.com/SectigoSHA256EVSecureServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sectigo.com/SectigoSHA256EVSecureServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.lacounty.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fire.lacounty.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007600cf1156eed52e7caff3875bd9692e9be91a71674ab017ecac01d25b77cecc3b080000018e61ba4e0600000403004730450220075018a0a33b416b1f98bf7e42f6f12d25b816d488aeed67dc338a3120ba1dd9022100eee7b7c84bb8a6a2b31f67d07d2e10329cb05992a53da93a1612c979c9a0a44e007600a2e30ae445efbdad9b7e38ed47677753d7825b8494d72b5e1b2cc4b950a447e70000018e61ba4d9f0000040300473045022100f47b740c730ab6c9acfdcb56575fce923ed35ac545570ea575f04a4cb76a6011022041ba2f895764935b4fbdb9c010552f2dc7694adb111bd3a94a5426dd9cd0910f0076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018e61ba4d910000040300473045022100d6a23661a3e0dfc106484dc9fe0b56e82c789caa2417555bf0fe90269297df2302204645a3749cec89422e45b8e50c1ca5baddb48457f35cc7056e28a359a8078c1d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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