jonestown.coahomak12.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 9e:04:b8:a1:b3:84:bd:a8:0e:a7:d2:17:60:54:e4:d8 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=jonestown.coahomak12.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9e:04:b8:a1:b3:84:bd:a8:0e:a7:d2:17:60:54:e4:d8
Serial Number (int): 210042537296110374526816205098854966488
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7a:87:64:72:ad:a0:5b:df:4c:3e:68:e6:0f:f6:14:38:90:d3:8e:e5
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 9a:da:2a:8e:db:c6:50:99:56:5e:e6:13:fa:8e:dd:b2:57:dd:ac:30
Fingerprint (sha256): 0e:f5:38:3d:c0:f3:1d:46:7f:50:24:d4:ee:27:24:19:d5:20:0c:51:5b:34:62:ed:06:0b:9d:85:e2:3c:63:2f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/wR6RSXPMhOs
CRL Distribution Point: http://crls.pki.goog/gts1p5/GnKAhLi3E9E.crl

Check the revocation status for certificate jonestown.coahomak12.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for jonestown.coahomak12.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

jonestown.coahomak12.org

Other certificates including the domain name coahomak12.org

(limited to 100 certificates)
coahomak12.org
admin.ljef.ljsd.org
coahomak12.org
jonestown.coahomak12.org
www.holyfamilycatholicacademy.net
1.southampton.k12.nj.us
admin.avrlacademy.org
benchmarkbobcats.org
1.southampton.k12.nj.us
www.crawfordschools.org
cra.freeholdtwp.k12.nj.us
admin.frsd12.org
1.southampton.k12.nj.us
latimer.moreland.org
admin.bands.dekalbcentral.net
admin.aes.acsc.net
admin.cvhs.cvsd.org
2.southampton.k12.nj.us
admin.es.lorenaisd.net
1.southampton.k12.nj.us
coahomak12.org
admin.benchmarkbobcats.org
admin.coahomak12.org
riverview.durangoschools.org
coahomak12.org
www.southernwakeacademy.org
shs.lskysd.ca
admin.allison.pusd.org
church.faithmarietta.org
admin.ersk.acsc.net
grandview.adsb.on.ca
www.cristoreysanjose.org
admin.acsc.net
admin.bands.dekalbcentral.net
admin.chuckey.greenek12.org
admin.anderson.moreland.org
www.coahomak12.org
2.southampton.k12.nj.us
admin.ahs.cherokee.k12.nc.us
1.southampton.k12.nj.us
debusk.greenek12.org
admin.ps17queens.com
eceap.gsd.wednet.edu
admin.ups.lskysd.ca
harpethhighccs.net
admin.ges.cvsd.org
coahomak12.org
palmlanecharterschool.org
www.rosemont78.org
admin.elc.cvsd.org
admin.acsc.net
1.southampton.k12.nj.us
www.cherokee.k12.nc.us
admin.coahomak12.org
www.mstmaatroosevelt.org
admin.sherard.coahomak12.org
www.ps17queens.com
www.ckchicago.org
2.southampton.k12.nj.us
westcheathamccs.net
www.stjosaphat.net
coahomak12.org
admin.colegioedlio.org
mcems.cherokee.k12.nc.us
1.southampton.k12.nj.us
harrison.pusd.org
1.southampton.k12.nj.us
admin.cvsd.org
coahomak12.org
admin.benchmarkbobcats.org
www.tcsk12.com
admin.avrlacademy.org
oglesby.cps.edu
ckcs.lskysd.ca
faithmarietta.org
admin.ace.pusd.org
admin.jonestown.coahomak12.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
1.southampton.k12.nj.us
admin.rosemont78.org
www.swake.org
ups.lskysd.ca
1.southampton.k12.nj.us
admin.ace.pusd.org
sherard.coahomak12.org
www.cardinalritterprep.net
sherard.coahomak12.org
admin.elportal.ljsd.org
admin.floridamesa.durangoschools.org
www.cardinalritterprep.org

Certificate

The complete raw certificate details for jonestown.coahomak12.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdTCCBF2gAwIBAgIRAJ4EuKGzhL2oDqfSF2BU5NgwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMDA3MDEzOTU5WhcNMjQwMTA1
MDEzOTU4WjAjMSEwHwYDVQQDExhqb25lc3Rvd24uY29haG9tYWsxMi5vcmcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1C+5b23aPLKm5Cx/PU23JOUTP
thOCeLnkTobkMNeUqbkgcOBz6c5+VyO1RjASdlIzPaO1Xmh036h3fZywhvhpjhV3
62STZD5r0TFZrkzKzeKPD41653kuc09PDb7fix9fQP+WBlWzvaIEnNBkOQ3xZJlU
0Bx1LSOutxKhCyizn1g6w3ydqyNnd3CTqdR9yALJ3j9BZzaaPNMs4O4NKS4wRtyW
l+kwdrjzapEXeshOvcRls19nw8sO4fKA/+S6ePNCPNaCa4owlpDbbEuq3s3KFPXO
XpxomFGl7kTSLPRRjZ+090jZo7+i4TPCAhP1MmtKZjYeOis3dubT7nNtyKe3AgMB
AAGjggJ/MIICezAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEw
DAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUeodkcq2gW99MPmjmD/YUOJDTjuUwHwYD
VR0jBBgwFoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUG
CCsGAQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS93UjZSU1hQ
TWhPczAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3Rz
MXA1LmRlcjAjBgNVHREEHDAaghhqb25lc3Rvd24uY29haG9tYWsxMi5vcmcwIQYD
VR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6At
hitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvR25LQWhMaTNFOUUuY3JsMIIB
BAYKKwYBBAHWeQIEAgSB9QSB8gDwAHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhC
Cp/mZ0xaOnQAAAGLCAGIMAAABAMARjBEAiACkkcUPUjAHhkgOORb4X6pxm1aZX7s
PI+8OoaTLrM3vQIgZSqseb4TC0U3sAiTaYIodBGJLyEOSeaqflw1G4Gmz84AdwDa
tr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYsIAYgxAAAEAwBIMEYC
IQDy8sr/uq9mHTDE7n9O4FxhRTdC5mFm/a5qBPi38msniQIhAJyrkDQjQ5IuQKJz
ldcO5I/AFd3m/qDsrrS7yymZRT39MA0GCSqGSIb3DQEBCwUAA4IBAQCK12F4+iIT
Yg7Z68M/6qUfUUSNfYw6sRCdz5q3jZbqkzrt5aO3H+hl16g+uJvywnKwigqXHgvP
vCPtserMmk39nd11nBTv4Xnc4K7Fq3A2TDbt3np89dAmOctBhPH6ysk0WXzfMYXc
eOq2gEfhxWU/v26MlX/hCiDQU6DgnQFwZgDxyV4RFFllI9+H6pI3h4GIgTxeg4C4
w5gXNDAwjA4sdk2UmiUbyAEErrrUeVl8YX32twdbSxaJ0WW3UKIG/5dTEMzzX7fJ
neNJZdLTTmTnPfMdqMeTBtSkj9K21GmRlA9wlaHPuvb5PU6D7x/cg9nB3ySlz1wf
/zgORFhz1WgI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtQvuW9t2jyypuQsfz1Nt
yTlEz7YTgni55E6G5DDXlKm5IHDgc+nOflcjtUYwEnZSMz2jtV5odN+od32csIb4
aY4Vd+tkk2Q+a9ExWa5Mys3ijw+Neud5LnNPTw2+34sfX0D/lgZVs72iBJzQZDkN
8WSZVNAcdS0jrrcSoQsos59YOsN8nasjZ3dwk6nUfcgCyd4/QWc2mjzTLODuDSku
MEbclpfpMHa482qRF3rITr3EZbNfZ8PLDuHygP/kunjzQjzWgmuKMJaQ22xLqt7N
yhT1zl6caJhRpe5E0iz0UY2ftPdI2aO/ouEzwgIT9TJrSmY2HjorN3bm0+5zbcin
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 210042537296110374526816205098854966488
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-07 01:39:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-05 01:39:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'jonestown.coahomak12.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22855016638185807723366669513704590863970768945691258023112789833638887405166754729037954827303967860362617780432016425012552689257520278284959143643573171318572706779987804359625847476235563519591732721046883594608438608252035611053968204693077058869775258387157425918625881945011527090659320306876598001764237981978441162985214813430679725691883900750515670076110289006498032507014515883223768331029980275575752750456430349000807452546728853165891650971128635802519987450569077739300872797197705290401239535593509930009889764222188400302648080875131093908260005385341444844404804583220591439631646021692211688155063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7a876472ada05bdf4c3e68e60ff6143890d38ee5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/wR6RSXPMhOs'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jonestown.coahomak12.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/GnKAhLi3E9E.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018b0801883000000403004630440220029247143d48c01e192038e45be17ea9c66d5a657eec3c8fbc3a86932eb337bd0220652aac79be130b4537b008936982287411892f210e49e6aa7e5c351b81a6cfce007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018b080188310000040300483046022100f2f2caffbaaf661d30c4ee7f4ee05c61453742e66166fdae6a04f8b7f26b27890221009cab90342343922e40a27395d70ee48fc015dde6fea0ecaeb4bbcb2999453dfd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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