www.madrid.k12.ia.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 9d:22:87:0b:09:83:bb:59:0e:6b:28:f4:bc:d9:48:b6 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.madrid.k12.ia.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9d:22:87:0b:09:83:bb:59:0e:6b:28:f4:bc:d9:48:b6
Serial Number (int): 208868072431172875913775802141973760182
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7d:24:c1:6b:01:68:13:d3:34:5d:79:0a:59:22:43:b6:b5:04:a9:b1
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 14:f9:90:09:72:54:8d:3a:dc:01:a4:a3:0e:e1:79:93:c6:c8:81:97
Fingerprint (sha256): 25:12:29:66:1a:7c:d6:48:59:93:b6:db:a2:78:74:37:f2:91:f4:b2:53:ff:6c:e9:cc:8a:57:96:9c:02:42:eb

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/l6JoUyf_Uz4
CRL Distribution Point: http://crls.pki.goog/gts1p5/ihFiAY-64YY.crl

Check the revocation status for certificate www.madrid.k12.ia.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.madrid.k12.ia.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.madrid.k12.ia.us

Other certificates including the domain name madrid.k12.ia.us

(limited to 100 certificates)
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
www.yorkprepsc.org
admin.bakerschools.org
admin.jrsr.madrid.k12.ia.us
www.cranburyschool.org
lpms.lincolnparkpublicschools.com
www.pullmanschools.org
admin.el.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.msab.msa.state.mn.us
el.madrid.k12.ia.us
admin.bakerschools.org
admin.cornellsd.org
admin.cienegaelementary.org
admin.union.kyschools.us
www.madrid.k12.ia.us
admin.bakerschools.org
www.ps52si.org
admin.bakerschools.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
texasleadership.net
admin.troupisd.org
admin.bakerschools.org
pdhs.rbusd.org
gulfelementary.org
www.olsorrows.com
activities.madrid.k12.ia.us
www.cornell.k12.pa.us
admin.bakerschools.org
activities.madrid.k12.ia.us
admin.cse.gatewayk12.org
admin.elementary.troupisd.org
admin.el.madrid.k12.ia.us
admin.desotoschools.com
activities.madrid.k12.ia.us
lacountycharterselpa.org
admin.el.madrid.k12.ia.us
admin.activities.madrid.k12.ia.us
www.colegioangloamericanohgo.edu.mx
www.hancockhs.org
activities.madrid.k12.ia.us
admin.glenknoll.org
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.fdes.mobridge-pollock.k12.sd.us
lincolnparkpublicschools.com
el.madrid.k12.ia.us
www.markedtreeschools.com
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
admin.bakerschools.org
admin.altavista.rbusd.org
admin.bakerschools.org
el.madrid.k12.ia.us
admin.dss.desotoschools.com
activities.madrid.k12.ia.us
admin.bakerschools.org
bronxdalehs.org
admin.hillcity.k12.sd.us
activities.madrid.k12.ia.us
www.overtoncountyschools.net
ms.mobridge-pollock.k12.sd.us
activities.madrid.k12.ia.us
activities.madrid.k12.ia.us
sh.iasd.cc
activities.madrid.k12.ia.us
admin.cypsd.org
www.bpsd.us
socialjusticemclc.org
admin.gulfstreamschool.org
activities.madrid.k12.ia.us
jrsr.madrid.k12.ia.us
admin.high.troupisd.org
admin.stmarysspokane.com
activities.madrid.k12.ia.us
admin.sainte-school.org
activities.madrid.k12.ia.us
www.pullmanschools.org
www.colegiocipres.edu.mx
admin.madrid.k12.ia.us
admin.bakerschools.org

Certificate

The complete raw certificate details for www.madrid.k12.ia.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIRAJ0ihwsJg7tZDmso9LzZSLYwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwNDA4MDEzOTMyWhcNMjMwNzA3
MDEzOTMxWjAfMR0wGwYDVQQDExR3d3cubWFkcmlkLmsxMi5pYS51czCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMU/HQxIo756eq2dmjqs1KAjFsumSGmw
YoM5wZR3aHqoVH970gwXZbYQtsGbrU0NzvqU9v28dSn2ej64VQ+lSbmakrrhfAn6
0Jcs3wKJCx8zVWUkIFmVNGr7DImrZESB+0lPtvaIxBk5pb+xZ3Q2f/s4C6Uiet/R
LjdxY4AFPLy6kDRN3oUwZiQn9AcPJR8oaAaZ2tJoHrkZTQBrsb+9eTIs0l/avd+T
amq77LJm1JlRswFnA/zjQqnR9vZLhLCuasL4zzCadCb0SSCOLfgGEvIu3H8i0WdT
24F4j2eaw8vyxakw13ndMKHUX+b4nAwG1Go+VCOcDw2Yr0m2n6mmVq0CAwEAAaOC
AnswggJ3MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNV
HRMBAf8EAjAAMB0GA1UdDgQWBBR9JMFrAWgT0zRdeQpZIkO2tQSpsTAfBgNVHSME
GDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYB
BQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L2w2Sm9VeWZfVXo0
MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUu
ZGVyMB8GA1UdEQQYMBaCFHd3dy5tYWRyaWQuazEyLmlhLnVzMCEGA1UdIAQaMBgw
CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov
L2NybHMucGtpLmdvb2cvZ3RzMXA1L2loRmlBWS02NFlZLmNybDCCAQQGCisGAQQB
1nkCBAIEgfUEgfIA8AB1ALNzdwfhhFD4Y4bWBancEQlKeS2xZwwLh9zwAw55NqWa
AAABh167t8MAAAQDAEYwRAIgVYy5o0mnWP8Zy78FoEuPPBq2V+khL4Bt9a0cB77C
OjkCIDRNejoZo/RLA+M1BD0rdULMb7koUIx4tDtmJjRBR9gNAHcA6D7Q2j71BjUy
51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGHXru3rAAABAMASDBGAiEA325yaEJz
2EMvN0oFCG8Jsa7OnhtetT9hI1cEpBmciDgCIQCmWdMBuH90UTqOxI62+nVHke3K
PTQ/rk8lUVcd7yjADTANBgkqhkiG9w0BAQsFAAOCAQEAsBuFMkB9kxdXp5/QMWbg
MYhvpNTgU0kewB0gLi4xH+5Ry/Ppl1GOm2/qUV/h9FafWk4133ILxk8b+gy0Rev8
MTPmV7PAhIv4P1IMyohUVHFqjzhv9+bOGr1BjFMHK9CSsHKXcd7ERuowsjSoIumu
IADtlxtdy02Pw8137FSbZ1di+frIZeYcT/AkpFajS/97W/NEyI8/MVUI46yV5oE2
u+Gtc7DvU9J7O6U7A7U6I2JueSA7n4tYH/zk8ktAs10CMhFIyHcX8s7ndYSS03zV
+d6yJHiX8VRc6HKdFZgyQJzz3QrC5SuNuJANam/kboQ7ZKGRWDEF9BlZswkcLCdv
WA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT8dDEijvnp6rZ2aOqzU
oCMWy6ZIabBigznBlHdoeqhUf3vSDBdlthC2wZutTQ3O+pT2/bx1KfZ6PrhVD6VJ
uZqSuuF8CfrQlyzfAokLHzNVZSQgWZU0avsMiatkRIH7SU+29ojEGTmlv7FndDZ/
+zgLpSJ639EuN3FjgAU8vLqQNE3ehTBmJCf0Bw8lHyhoBpna0mgeuRlNAGuxv715
MizSX9q935NqarvssmbUmVGzAWcD/ONCqdH29kuEsK5qwvjPMJp0JvRJII4t+AYS
8i7cfyLRZ1PbgXiPZ5rDy/LFqTDXed0wodRf5vicDAbUaj5UI5wPDZivSbafqaZW
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 208868072431172875913775802141973760182
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-08 01:39:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 01:39:31 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.madrid.k12.ia.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24900068489670341380211680691351646799414005757659966903365461231199898367110269264821621706159941148566292675242578446174485360112284675271096005983762489463450681990108798744506980982326649634709495350369691237625905960483989120982624632537486299050005395548580833231736611134138131174746027840105928198451557637970327105123342583354403477353779069468850311625100899809467920878578597864240350313456108403715630644266968082148969173569426437809032217995669162477700255255029988586283425826629280717066177592400722447063741715448442139449303659512750864570586089723359219551597863640981557501224448956177573214574253
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7d24c16b016813d3345d790a592243b6b504a9b1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/l6JoUyf_Uz4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.madrid.k12.ia.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/ihFiAY-64YY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001875ebbb7c300000403004630440220558cb9a349a758ff19cbbf05a04b8f3c1ab657e9212f806df5ad1c07bec23a390220344d7a3a19a3f44b03e335043d2b7542cc6fb928508c78b43b6626344147d80d007700e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001875ebbb7ac0000040300483046022100df6e72684273d8432f374a05086f09b1aece9e1b5eb53f61235704a4199c8838022100a659d301b87f74513a8ec48eb6fa754791edca3d343fae4f2551571def28c00d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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