mail.pycsd.org

- Wayne-Finger Lakes BOCES -

Issued by GeoTrust EV RSA CA 2018

About this certificate

This digital certificate with serial number 0c:bf:7a:c5:d7:d3:a5:a4:28:ea:12:c8:0a:fb:c7:3c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wayne-Finger Lakes BOCES

Company registration number: Government Entity
Organization: Wayne-Finger Lakes BOCES
Organization unit: Wayne-Finger Lakes BOCES
State / Province: New York
Locality: Newark
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:bf:7a:c5:d7:d3:a5:a4:28:ea:12:c8:0a:fb:c7:3c
Serial Number (int): 16944954778113946043973004683032381244
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:b6:6b:0b:a4:56:ce:91:47:76:dc:30:e2:ef:78:d1:ec:c3:a6:a5
AuthorityKeyId: ca:92:67:52:61:de:ae:fc:ba:22:2b:7f:1c:87:4c:25:fb:6f:99:58

Fingerprint (sha1): 58:c5:80:f7:e7:71:0a:f6:43:1a:93:68:b0:eb:04:d1:f3:12:b9:14
Fingerprint (sha256): 1f:83:d7:88:cc:15:76:d5:dc:be:a2:b3:b4:2c:45:6d:c4:5e:12:09:9e:89:44:f7:e2:16:94:eb:75:ec:46:d5

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl

Check the revocation status for certificate mail.pycsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.pycsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.pycsd.org

Other certificates including the domain name pycsd.org

(limited to 100 certificates)
www.fra.edu
academy.pycsd.org
pycsd.org
academy.pycsd.org
marvin.wisd.org
portal.pycsd.org
admin.southeast.varnett.org
www.tricityselpa.org
fhclergue.adsb.on.ca
3rcs.org
academy.pycsd.org
schooltool.pycsd.org
admin.preescolar.semperaltius.edu.mx
pycsd.org
cce.leusd.k12.ca.us
pycsd.org
mail.pycsd.org
www.tricityselpa.org
academy.pycsd.org
3rcs.org
ros.ldcsb.ca
mta-sts.pycsd.org
es.pycsd.org
gradebook.pycsd.org
admin.3rcs.org
schooltool.pycsd.org
smclassroom.pycsd.org
formit.pycsd.org
schooltool.pycsd.org
schooltool.pycsd.org
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
admin.tricityselpa.org
nhstitans.org
schooltool.pycsd.org
admin.ecacademy.scrsd.org
mail.pycsd.org
wes.bibbed.org
admin.keillerleaders.org
poecenter246.com
3rcs.org
admin.crumpton.mpusd.net
admin.ecacademy.scrsd.org
www.cairoschooldistrict1.com
pycsd.org
rsu14.org
admin.pycsd.org
es.glendaleacademy.org
3rcs.org
3rcs.org
3rcs.org
academy.pycsd.org
3rcs.org
admin.ecacademy.scrsd.org
www.hscnewhaven.org
www.boyslatinms.org
steam.erusd.org
bradleyschools.org
admin.elc.aacs.net
admin.mas.mpusd.net
academy.pycsd.org
pycsd.org
admin.ecacademy.scrsd.org
3rcs.org
admin.delreywoods.mpusd.net
jla.jubileeacademies.org
www.rebsamen.mx
www.calvaryschools.org
academy.pycsd.org
3rcs.org
admin.pennekampschool.org
kailuaintermediate.org
admin.ecacademy.scrsd.org
schooltool.pycsd.org
*.pycsd.org
admin.es.glendaleacademy.org
mail.pycsd.org
3rcs.org
pycsd.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.athletics.rsu14.org
admin.vapa.mvusd.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
3rcs.org
3rcs.org
admin.cchs.mpusd.net
ms.pycsd.org
admin.poecenter246.com
schooltool.pycsd.org
academy.pycsd.org
cch.ldcsb.ca
www.salisburycatholicschool.org
schooltool.pycsd.org
mail.pycsd.org
cat.ldcsb.ca
jd.jubileeacademies.org

Certificate

The complete raw certificate details for mail.pycsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA51E7sqFNATx4ndwmZLFA
mTVZiNYmcymWUEUqPQ7PBDpqNmAbWpIJrCYlWwBTRkZ+IfsummaIyLgCLey/OzLW
FZ+L42+52NoJpju9Q3cnieIbfQzfYrcYfUUm55IvgLrbX1z5TgheHyd7qRg0ickM
vl1w3B17Gi3Iiy67jUzbQB2vVf1cozAtEUu9es7tzmOMVsnsB2RL5XzaaNlIE/Ao
YWfEV1owL84xZ1GMn1vQebw8X8ATuBLRiANd5iYGy6szpeH8B8pez0qYgdLEif0M
eWPLnFgqHOtvToNLlzMuM36p85q4RJdVLp+YLfe4hk5l7GBIunvgrJgXIFOTh9Ea
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16944954778113946043973004683032381244
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.pycsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29201106028298843127615724670691498281450123144114626536935456497079447828052106203074132833583042971586336419875118781800553310606078540272449530339789366787620320479266945946471571442956784882101604863222820181066132644883862794680178733958211739565029456585435720082587996093336599643140254137755120156121827896529429948554754398923995628142067107243877905698355088503407252353392171884457277060445248626533572233021466037289595674847524921340017082464697966622183207004815756613735607509369351924493023006176644495872925665307774438672548701237293069608834973523353577438693319933835426898060840779396361596508863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ca92675261deaefcba222b7f1c874c25fb6f9958
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7b66b0ba456ce914776dc30e2ef78d1ecc3a6a5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pycsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000163ee8cd5530000040300483046022100ac0c2ddd3928bbaa2cc9c6b07d862c514d39f9824a0c67aa7c03093f18d211c3022100a345cf96bd3112a7b6cdc897ba02640d00d34cca7cbe576a23902f3894b6ea6d0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000163ee8cd4d70000040300473045022100a41e0af37566270203d9b2427e75992b30f383eff62a2bcbf42391d3d83c1525022078010a0a4f7a2ffc16ed01a2a047e8e80ef1725d8bd99286605e6ee6e601be9b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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