goa.fairfield.k12.sc.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number df:73:ac:82:b4:99:3f:77:13:38:77:7c:7b:e0:80:5b was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=goa.fairfield.k12.sc.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): df:73:ac:82:b4:99:3f:77:13:38:77:7c:7b:e0:80:5b
Serial Number (int): 297018456128773266900385892063542018139
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3a:2a:d7:1c:65:e6:58:85:85:60:ac:8e:ad:68:cc:a1:54:b8:78:0a
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 7d:43:1f:1f:78:57:16:4a:8b:c3:4d:73:9a:33:28:dd:ec:e4:f0:e6
Fingerprint (sha256): 15:3d:58:98:ff:04:c8:49:fe:cb:2a:bc:d9:e9:95:88:c9:73:0b:1c:94:f6:86:56:ca:41:a9:70:eb:99:71:d4

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/4A5_Bk-kk14
CRL Distribution Point: http://crls.pki.goog/gts1p5/kxjz1VjDdFA.crl

Check the revocation status for certificate goa.fairfield.k12.sc.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for goa.fairfield.k12.sc.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

goa.fairfield.k12.sc.us

Other certificates including the domain name fairfield.k12.sc.us

(limited to 100 certificates)
athletics.godleyisd.net
powerschool.fairfield.k12.sc.us
powerschool.fairfield.k12.sc.us
*.fairfield.k12.sc.us
bce.slvusd.org
admin.ardreykellhighschool.wearecms.com
admin.athletics.godleyisd.net
pcsd4.org
www.dover.k12.ok.us
admin.athletics.godleyisd.net
admin.aplusarts.com
goa.fairfield.k12.sc.us
admin.fuesd.org
www.lusd.net
fctc.fairfield.k12.sc.us
admin.evanshs.ccboe.net
elementary.troupisd.org
powerschool.fairfield.k12.sc.us
sses.rcsnc.org
admin.athletics.godleyisd.net
admin.llc.lex3.org
admin.aplusarts.com
admin.eastview.gcschools.net
admin.athletics.godleyisd.net
admin.is339.org
slvusd.org
powerschool.fairfield.k12.sc.us
fchs.fairfield.k12.sc.us
admin.sle.slvusd.org
admin.athletics.godleyisd.net
admin.elementary.troupisd.org
mckinley.bcsd.com
mlst.fairfield.k12.sc.us
www.fairfield.k12.sc.us
charter.slvusd.org
cfll.ldcsb.ca
admin.athletics.godleyisd.net
admin.blms.lex3.org
gordon.fairfield.k12.sc.us
fms.fairfield.k12.sc.us
admin.mes.mayfield.kyschools.us
powerschool.fairfield.k12.sc.us
admin.aes.pgsd.ms
admin.bce.slvusd.org
kme.fairfield.k12.sc.us
admin.asd4.org
ann.ldcsb.ca
admin.mtvernon.bcsd.com
garza.bcsd.com
webmail.fairfield.k12.sc.us
admin.aplusarts.com
wlh.lauderdale.k12.ms.us
admin.hs.slvusd.org
mshs.monessenschooldistrict.com
admin.bce.slvusd.org
www.adsb.on.ca
*.fairfield.k12.sc.us
admin.aplusarts.com
sacredheartrockwood.wellingtoncdsb.ca
admin.cochranecollegiateacademy.wearecms.com
admin.slvusd.org
admin.ccboe.net
www.asd4.org
fmsms.fairfield.k12.sc.us
www.lex3.org
admin.charlotteeslanguageacademy.wearecms.com
asu.ldcsb.ca
fes.fairfield.k12.sc.us
powerschool.fairfield.k12.sc.us
seh.lauderdale.k12.ms.us
admin.lincoln.district75.org
www.slvusd.org
admin.barnetteelementaryschool.wearecms.com
admin.bcsd.com
admin.csms.district75.org
ges.fairfield.k12.sc.us
middle.troupisd.org
admin.bakerplacees.ccboe.net
admin.blps.lex3.org
www.bellamy.dover.k12.nh.us
admin.bles.lex3.org
admin.sra.pgsd.ms
hs.slvusd.org
admin.hs.slvusd.org
mle.fairfield.k12.sc.us
powerschool.fairfield.k12.sc.us
madriverhighschool.nohum.org
fairfield.k12.sc.us
fctc.fairfield.k12.sc.us

Certificate

The complete raw certificate details for goa.fairfield.k12.sc.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFczCCBFugAwIBAgIRAN9zrIK0mT93Ezh3fHvggFswDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMTIyMTExOTI4WhcNMjQwMjIw
MTExOTI3WjAiMSAwHgYDVQQDExdnb2EuZmFpcmZpZWxkLmsxMi5zYy51czCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIS5KJN9r5Sllrux1wGgt3BHC0FU
cbkVHg2ti/3eS/Kbe+dj+gyIbfYKrBMmcZAIpgCFVaOPs9ZYg3khJMWZmwQFBP3H
dtOieZrQUvrCgzVv4qQlU7UPoFotq4ctK9aidFF6MdiakSJ8bk55JoZFwlWDWIfS
WHKFrUNRE5h0nR6cOqyXvnywf9C2x+Slkx9kYVny+Cww/EgJXCNTNN47z+vO2J4S
LSkImRFbuKNGUhAjsiUcjZKQhzpnFec2CWUdVGt8hdVucTitK/R9ppal59+/fZSZ
5EOJYbcfVh/4FqEUb6F4tgOyK64hnGboMdl88DwM6OSYnOe4lZkJzlObU/cCAwEA
AaOCAn4wggJ6MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM
BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ6KtccZeZYhYVgrI6taMyhVLh4CjAfBgNV
HSMEGDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYI
KwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1LzRBNV9Cay1r
azE0MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMx
cDUuZGVyMCIGA1UdEQQbMBmCF2dvYS5mYWlyZmllbGQuazEyLnNjLnVzMCEGA1Ud
IAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYr
aHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L2t4anoxVmpEZEZBLmNybDCCAQQG
CisGAQQB1nkCBAIEgfUEgfIA8AB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7
v6s52IRzAAABi/b4lkIAAAQDAEgwRgIhAIo41QpYrLcXALJpw8y8gLSEn+HNsfIJ
5cOYQ5zkaPA0AiEA1ywY6b6Q7oc2LunEyoX9HHzD6jwO5yMYeNwWRM1BYzwAdQDu
zdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYv2+JYfAAAEAwBGMEQC
IH1uF705P1RQULVz+iAbIMHD7VrKKDDfHmS7ZtqxjeppAiBOJ9xaXzHjOQ6qEI/u
WYm/Gt1ywgGh2d+ShR9v5tbnWTANBgkqhkiG9w0BAQsFAAOCAQEAla0DB++pqTa9
613uW4q/pTyGLDSXgVjg1Je2b51DQNaVL8dSxUnwKDFuw4XgZ7FyxPIFVM1ohElN
V9DezW34VvJUfhaB14LJxAIQXHUWAsnBbCVEw3sd7SJvE/8Mwb/LZag2YOI+3+gl
SpkZhzuHjMNWx8Gcoit0ZaNfSPpfM9NXXx6X/UzPRrqm4GSJCaCh/WhbrkpmRYxT
F0uje84qK3h37GQSBnspXYSawPFvqNf13sC4sd3WZuua1HI7GODc+2Q+QibiO2MW
LwCRra6fBxfHBNEi7qUhui4HF2kARBSIKuRIu1Kf/i4JQ5VU428eLeTYm7AdgN6F
/yYZerVtUQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLkok32vlKWWu7HXAaC3
cEcLQVRxuRUeDa2L/d5L8pt752P6DIht9gqsEyZxkAimAIVVo4+z1liDeSEkxZmb
BAUE/cd206J5mtBS+sKDNW/ipCVTtQ+gWi2rhy0r1qJ0UXox2JqRInxuTnkmhkXC
VYNYh9JYcoWtQ1ETmHSdHpw6rJe+fLB/0LbH5KWTH2RhWfL4LDD8SAlcI1M03jvP
687YnhItKQiZEVu4o0ZSECOyJRyNkpCHOmcV5zYJZR1Ua3yF1W5xOK0r9H2mlqXn
3799lJnkQ4lhtx9WH/gWoRRvoXi2A7IrriGcZugx2XzwPAzo5Jic57iVmQnOU5tT
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 297018456128773266900385892063542018139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 11:19:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-20 11:19:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'goa.fairfield.k12.sc.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16754761315118957713271589981383443941627053576836301220247478229360269900811729133866918919060114730741615643780132783217661792022083258295008369688782356028902089042552557100504755406995820169240834018227741665763048877270916855006411493857305283838711345648744573651678357863592952686438247654728154562420846771595139386006358175222989172062746119039040911842957556521442693027124559376060467322548103427807865687065729288834940909885115065684163083078164475510517409225155282040814465889287582299142970886053848909164179191000671814435399096038690967106053721693961795379321725190918288622399419289332351774708727
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a2ad71c65e658858560ac8ead68cca154b8780a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/4A5_Bk-kk14'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'goa.fairfield.k12.sc.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kxjz1VjDdFA.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018bf6f8964200000403004830460221008a38d50a58acb71700b269c3ccbc80b4849fe1cdb1f209e5c398439ce468f034022100d72c18e9be90ee87362ee9c4ca85fd1c7cc3ea3c0ee7231878dc1644cd41633c007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018bf6f8961f000004030046304402207d6e17bd393f545050b573fa201b20c1c3ed5aca2830df1e64bb66dab18dea6902204e27dc5a5f31e3390eaa108fee5989bf1add72c201a1d9df92851f6fe6d6e759
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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