somerset.k12.md.us
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 3b:a9:06:fd:31:7f:9c:5e:13:28:b3:00:c0:bd:0a:2f was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=somerset.k12.md.us
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 3b:a9:06:fd:31:7f:9c:5e:13:28:b3:00:c0:bd:0a:2fSerial Number (int): 79302091674904197874329012253962865199
Serial Number lenght: 126 bits, 16 octets
SubjectKeyId: a2:6e:6e:73:19:d6:79:a0:c8:0c:ea:cb:eb:fe:12:a2:3d:67:91:66
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 6e:92:5a:f5:67:4d:30:7f:da:9e:f3:72:3c:ad:3d:36:77:8b:86:03
Fingerprint (sha256): 09:47:c7:5a:97:75:4d:67:16:e5:d9:15:37:fc:0f:c1:dc:a0:d9:ec:c0:bb:67:f8:aa:2c:7c:7c:37:5f:84:12
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/rzEQwMUMS7ICRL Distribution Point: http://crls.pki.goog/gts1p5/9gwVtkNuves.crl
Check the revocation status for certificate somerset.k12.md.us
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for somerset.k12.md.us
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
somerset.k12.md.us
Other certificates including the domain name somerset.k12.md.us
(limited to 100 certificates)
wes.somerset.k12.md.us
admin.arcataafterschool.org
somerset.k12.md.us
admin.bayhaven.org
chs.somerset.k12.md.us
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.chs.somerset.k12.md.us
somerset.k12.md.us
stmmsa.org
admin.elmwood.mbgsd.org
admin.bayhaven.org
cristoreytc.org
admin.whs.somerset.k12.md.us
somerset.k12.md.us
admin.somerset.k12.md.us
admin.bayhaven.org
upperallen.mbgsd.org
admin.pes.somerset.k12.md.us
admin.bayhaven.org
pa.somerset.k12.md.us
portrichmondhs.org
sp.somerset.k12.md.us
admin.portrichmondhs.org
ps.somerset.k12.md.us
admin.dis.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
monroe.k12.tn.us
admin.scths.somerset.k12.md.us
admin.chs.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.highschool.mbgsd.org
mail.somerset.k12.md.us
admin.bayhaven.org
admin.gulfstreamschool.org
somerset.k12.md.us
ps.somerset.k12.md.us
admin.bayhaven.org
lightspeed.somerset.k12.md.us
admin.sis.somerset.k12.md.us
admin.scths.somerset.k12.md.us
admin.ees.somerset.k12.md.us
mail.somerset.k12.md.us
admin.arcataafterschool.org
www.usd465.com
somerset.k12.md.us
admin.broadstreet.mbgsd.org
mail.somerset.k12.md.us
admin.upperallen.mbgsd.org
admin.bayhaven.org
mail.somerset.k12.md.us
msp.somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
admin.ges.somerset.k12.md.us
sis.somerset.k12.md.us
admin.wes.somerset.k12.md.us
stmmsa.org
mail.somerset.k12.md.us
lightspeed.somerset.k12.md.us
somerset.k12.md.us
mail.somerset.k12.md.us
mail.somerset.k12.md.us
somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
www.somerset.k12.md.us
admin.middleschool.mbgsd.org
somerset.k12.md.us
sp.somerset.k12.md.us
scths.somerset.k12.md.us
admin.arcataafterschool.org
somerset.k12.md.us
admin.bayhaven.org
chs.somerset.k12.md.us
admin.bayhaven.org
shepherdstown.mbgsd.org
admin.chs.somerset.k12.md.us
somerset.k12.md.us
stmmsa.org
admin.elmwood.mbgsd.org
admin.bayhaven.org
cristoreytc.org
admin.whs.somerset.k12.md.us
somerset.k12.md.us
admin.somerset.k12.md.us
admin.bayhaven.org
upperallen.mbgsd.org
admin.pes.somerset.k12.md.us
admin.bayhaven.org
pa.somerset.k12.md.us
portrichmondhs.org
sp.somerset.k12.md.us
admin.portrichmondhs.org
ps.somerset.k12.md.us
admin.dis.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
admin.bayhaven.org
monroe.k12.tn.us
admin.scths.somerset.k12.md.us
admin.chs.somerset.k12.md.us
admin.bayhaven.org
admin.bayhaven.org
admin.highschool.mbgsd.org
mail.somerset.k12.md.us
admin.bayhaven.org
admin.gulfstreamschool.org
somerset.k12.md.us
ps.somerset.k12.md.us
admin.bayhaven.org
lightspeed.somerset.k12.md.us
admin.sis.somerset.k12.md.us
admin.scths.somerset.k12.md.us
admin.ees.somerset.k12.md.us
mail.somerset.k12.md.us
admin.arcataafterschool.org
www.usd465.com
somerset.k12.md.us
admin.broadstreet.mbgsd.org
mail.somerset.k12.md.us
admin.upperallen.mbgsd.org
admin.bayhaven.org
mail.somerset.k12.md.us
msp.somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
admin.ges.somerset.k12.md.us
sis.somerset.k12.md.us
admin.wes.somerset.k12.md.us
stmmsa.org
mail.somerset.k12.md.us
lightspeed.somerset.k12.md.us
somerset.k12.md.us
mail.somerset.k12.md.us
mail.somerset.k12.md.us
somerset.k12.md.us
admin.bayhaven.org
mail.somerset.k12.md.us
www.somerset.k12.md.us
admin.middleschool.mbgsd.org
somerset.k12.md.us
sp.somerset.k12.md.us
scths.somerset.k12.md.us
Certificate
The complete raw certificate details for somerset.k12.md.us in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaDCCBFCgAwIBAgIQO6kG/TF/nF4TKLMAwL0KLzANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMjEyMDIwMTEzNTdaFw0yMzAzMDIw MTEzNTZaMB0xGzAZBgNVBAMTEnNvbWVyc2V0LmsxMi5tZC51czCCASIwDQYJKoZI hvcNAQEBBQADggEPADCCAQoCggEBALKK72wvY24u0ogQg2Yg8yKPCR7W8rnfdbwA VptE4uuEyEw50Xme1jiDmZngUVQUcI20YA3nnwPHvFJi4nGidDNAazNL6AD0tRLy VyFk0Kbp1sw7h9HoIuU0QJXPBdGXZ9+p5pZV5hDZLJIwl+iqiwjppCjzwRdrPlpx cO0uHVm61WTYGJlECju5dc7NSUlPC1xXx/lBNnZPD8IjYMzTzpm+sFTKXNxxjsst n1bAhpqTy90kzV78p7nLgnmmzGz4Pw2yD/dDMOP0AtCXAvi/96AaLoqvT4m47OQW H43el0QwGhTmbLEIlCGfMz503j2OvJpTsRTcADlayXLsJqBu1ikCAwEAAaOCAnkw ggJ1MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB Af8EAjAAMB0GA1UdDgQWBBSibm5zGdZ5oMgM6svr/hKiPWeRZjAfBgNVHSMEGDAW gBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L3J6RVF3TVVNUzdJMDEG CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVy MB0GA1UdEQQWMBSCEnNvbWVyc2V0LmsxMi5tZC51czAhBgNVHSAEGjAYMAgGBmeB DAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxz LnBraS5nb29nL2d0czFwNS85Z3dWdGtOdXZlcy5jcmwwggEEBgorBgEEAdZ5AgQC BIH1BIHyAPAAdgCt9776fP8QyIudPZwePhhqtGcpXc+xDCTKhYY069yCigAAAYTQ nKc5AAAEAwBHMEUCIBf5ku9fv5iIrGLTL/llSi9KXwB8/bC/FAlFvjAuxpoLAiEA l7FkB3Bq9tlDDlwyw+m4wJW0u9CWoXdwsHHTYgS5AnIAdgB6MoxU2LcttiDqOOBS HumEFnAyE4VNO9IrwTpXo1LrUgAAAYTQnKc9AAAEAwBHMEUCIArHgenDRFCDzqri drYTDbzkN5aj21GkufxFfuJ2CAy3AiEAjFzfzCHrCwpwnwi6x8L8adY/ujEmpzoJ Q/2QId5MEyQwDQYJKoZIhvcNAQELBQADggEBAGnZOM2NzNQ8Rg8aFlc/NJguZ+gy qdtdrpj2sXwhJXZym79ntib6gEobx+JyF+ercv0qgllcO9DYSV40en5CJxwtTBrU OhqvJ+ox6qPLw5tJfLk9/FvhaC+LQ/fu9ZQfxmPED9HcjRp4JmkvKFXtDCj86A/5 Qj2/OoQeCWvxc7eEbC/3TI6QVb6ZocA1+QIDhA7xNPdysu+QHA95luBw83GDZo6G bvL7J3xwyvJvv6m5/uoUe8DiINxWofMGrq8vFzamxrHwuLtb96Q/V6ux6G7GhBR8 b5hUn0tYr6wEs5YABmhaQ7UQMXikKhxsFNxkQe5j74mloBJyg3jUQMoI5/M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsorvbC9jbi7SiBCDZiDz Io8JHtbyud91vABWm0Ti64TITDnReZ7WOIOZmeBRVBRwjbRgDeefA8e8UmLicaJ0 M0BrM0voAPS1EvJXIWTQpunWzDuH0egi5TRAlc8F0Zdn36nmllXmENkskjCX6KqL COmkKPPBF2s+WnFw7S4dWbrVZNgYmUQKO7l1zs1JSU8LXFfH+UE2dk8PwiNgzNPO mb6wVMpc3HGOyy2fVsCGmpPL3STNXvynucuCeabMbPg/DbIP90Mw4/QC0JcC+L/3 oBouiq9Pibjs5BYfjd6XRDAaFOZssQiUIZ8zPnTePY68mlOxFNwAOVrJcuwmoG7W KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 79302091674904197874329012253962865199 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-02 01:13:57 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-02 01:13:56 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'somerset.k12.md.us' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22538929806492527781084378864182134656948175544206219821375005670105310573361099280357745119570318075022971882391093912560584677243076648222981068583939041153544260147607013748751083968971543420211691624910628621519302840170061821746148666176077357650344624723031435314000334332043896779119962981722079648620846823361735916299615703132440399910092282444810447951527142987287967848656646229730086336581622049812328167576636317384220780791311509040741852483146337542736488727288111297329163034348686081836135800400871466783753409244897351076780581467279097665583692601668094614918357611197894066278882425062301329446441 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a26e6e7319d679a0c80ceacbebfe12a23d679166 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/rzEQwMUMS7I' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'somerset.k12.md.us' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/9gwVtkNuves.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a00000184d09ca7390000040300473045022017f992ef5fbf9888ac62d32ff9654a2f4a5f007cfdb0bf140945be302ec69a0b02210097b16407706af6d9430e5c32c3e9b8c095b4bbd096a17770b071d36204b902720076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000184d09ca73d000004030047304502200ac781e9c3445083ceaae276b6130dbce43796a3db51a4b9fc457ee276080cb70221008c5cdfcc21eb0b0a709f08bac7c2fc69d63fba3126a73a0943fd9021de4c1324 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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