ecisd.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 0f:f5:70:61:54:fa:38:0f:0e:d5:76:0c:46:57:6a:54 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ecisd.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:f5:70:61:54:fa:38:0f:0e:d5:76:0c:46:57:6a:54
Serial Number (int): 21212812008421380743465041324766882388
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e3:7b:ba:ed:d5:44:fb:68:0d:a1:05:2c:e9:32:c3:a4:8f:09:7d:04
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): da:08:61:7c:63:b5:ad:1e:76:23:fa:d3:c6:9d:53:bd:8c:28:2c:97
Fingerprint (sha256): 37:30:ad:ae:8a:ee:35:70:f5:a3:a7:7e:05:1d:29:72:3b:d1:64:77:6d:09:d6:7f:d3:90:c1:f5:0d:c9:06:ef

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/gVA1DNkY-VQ
CRL Distribution Point: http://crls.pki.goog/gts1p5/1iS8I0jLTkE.crl

Check the revocation status for certificate ecisd.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecisd.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecisd.us

Other certificates including the domain name ecisd.us

(limited to 100 certificates)
*.ecisd.us
ramirez.ecisd.us
es.jmsd.org
meridith-dunbar.tisd.org
admin.palla.gfusd.net
edinburg.ecisd.us
admin.pylusdparkview.org
www.myiusd.net
www.frazierprepacademy.com
admin.cvlcc.org
eduphoria.ecisd.us
comfortisd.org
eduphoria.ecisd.us
esparza.ecisd.us
vela.ecisd.us
admin.andrews.whittiercity.net
www.vistahorizonglobal.org
admin.ce.sheldonisd.com
canterbury.ecisd.us
*.ecisd.us
barrientes.ecisd.us
mssd2.k12.ar.us
eduphoria.ecisd.us
jfk.ecisd.us
articles.ecisd.us
admin.alohaes.us
admin.ce.sheldonisd.com
wes.sau29.org
admin.andrews.whittiercity.net
avila.ecisd.us
eduphoria.ecisd.us
edinburgalternative.ecisd.us
canogonzalez.ecisd.us
admin.alohaes.us
admin.barrientes.ecisd.us
ecsd.k12.ca.us
colegiosmadison.edu.mx
guerra.ecisd.us
admin.hedgescps.org
lee.ecisd.us
ecisd.us
admin.sym.keeneschoolsnh.org
ecisd.us
admin.blgarza.ecisd.us
montecristo.ecisd.us
admin.crawfordschools.org
MAIL.ECISD.US
admin.avila.ecisd.us
www.johnotynes.org
admin.athletics.sheldonisd.com
admin.jvwashamelementaryschool.wearecms.com
admin.hs.crawfordschools.org
sym.keeneschoolsnh.org
barrientes.ecisd.us
mail.ecisd.us
memorial.ecisd.us
ecisd.us
coltsneckschools.org
trevino.ecisd.us
ceca.sheldonisd.com
lbj.ecisd.us
www.jmsd.org
admin.whitmanhs.org
admin.athletics.sheldonisd.com
admin.avila.ecisd.us
admin.betts.ecisd.us
crawford.ecisd.us
hargill.ecisd.us
admin.barrientes.ecisd.us
admin.wes.sau29.org
admin.ecisd.us
www.vistahorizonglobal.org
admin.che.sau29.org
articles.ecisd.us
admin.barrientes.ecisd.us
admin.dieck.swartzcreek.org
admin.athletics.sheldonisd.com
eduphoria.ecisd.us
villarreal.ecisd.us
jefferson.ecisd.us
edinburgnorth.ecisd.us
blgarza.ecisd.us
admin.dezavala.ecisd.us
secundaria.colegiolasalle.edu.mx
sle.sheldonisd.com
www.ceam.edu.mx
www.mt-pleasant.k12.ia.us
innovate.ecisd.us
vision.ecisd.us
kahoiwai.kalo.org
eduphoria.ecisd.us
admin.jfk.ecisd.us
edinburg.ecisd.us
memorial.ecisd.us
www.fpcharter.org
admin.ce.sheldonisd.com
vanallen.mtpcsd.org
admin.avila.ecisd.us
admin.alohaes.us
austin.ecisd.us

Certificate

The complete raw certificate details for ecisd.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFVDCCBDygAwIBAgIQD/VwYVT6OA8O1XYMRldqVDANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yMzEwMDIxNTEyMDJaFw0yMzEyMzEx
NTEyMDFaMBMxETAPBgNVBAMTCGVjaXNkLnVzMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAmMHelXjC/STTPtgv89DJLEKI26+2Id09GSOkbIv5cwgDDEpO
KhnI1WOGflufzsNQEKTDlfcW2JnY1KbGXlQNU1cUOWLjM8LBRgtEKb5RpMF+zTTe
n108AqCU6ORf/45Rv/jrUD7v2zwhbv0CojZ4LbmBUkRqd7p0391JcCLdzUEp9REL
WCI3j62U/pSjGNeU4nlVa+mumlIqU0WDm7RD05gQaDxzqdw+eAUIjDYHqDGGO3bD
Yrrxfyeip69H/1Tpsg6iZyGKMSzFBpliYZMEGXQ1VeLLY3Sszb1ASt/J0Zp8yW3L
YPIjOahKzg6jmC7VEWXHTujyVWjY1n/m+yLUGQIDAQABo4ICbzCCAmswDgYDVR0P
AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD
VR0OBBYEFON7uu3VRPtoDaEFLOkyw6SPCX0EMB8GA1UdIwQYMBaAFNX8ng3fHsrd
CJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0cDov
L29jc3AucGtpLmdvb2cvcy9ndHMxcDUvZ1ZBMUROa1ktVlEwMQYIKwYBBQUHMAKG
JWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwEwYDVR0RBAww
CoIIZWNpc2QudXMwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8
BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvMWlT
OEkwakxUa0UuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYArfe++nz/EMiL
nT2cHj4YarRnKV3PsQwkyoWGNOvcgooAAAGK8SkvTwAABAMARzBFAiBWY5UrLBkA
ukv8TVYDWovZXELphdVnwyrhbsv2eJ4PpwIhAMXY3tmqk6Q0O5RIQcVVp9ul68lO
3+idu5VmAo7S00I4AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IA
AAGK8SkvXQAABAMARzBFAiEA3RbPoD8Rh1vLxmjet2JO7M/Idn6xKTcvBMO8u/Dc
KVwCIAtZypWMXvMh5mmDdgB641mbI3DLp/IY9SV++HRvKGYRMA0GCSqGSIb3DQEB
CwUAA4IBAQCPwfagRYipjGVGiKFnyaMdHmvnX7/kTcGHc5UmSlfhAcz3+KVq17km
bbFbH4EzqingLuBgZ5yFWXi1kAovWSPNDFXlVMpYTo/l73Wc2wzn2BIqOwjtHLaO
8Pc24TQIYUL2DWqMAYTU0qhmcSzvWuouxsgo3Cba3hFBt8fnlRZJ5Y8SDWW8GZUg
fzVN2JEb/FyEAH/h5DT7NHpPh6bNTTyGhIWXp2WhLmjrEBVuC7wIFs5BwSkJ+Eo6
yLtodiivCnPX9v8RRGM1uyQC0Qce59tyVfaxJb4vd1tFgrFQT0HUcRm87xzOan/6
6kQ1FrDnm6XOxO1+q+SCvfu4Ywu9dhqI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMHelXjC/STTPtgv89DJ
LEKI26+2Id09GSOkbIv5cwgDDEpOKhnI1WOGflufzsNQEKTDlfcW2JnY1KbGXlQN
U1cUOWLjM8LBRgtEKb5RpMF+zTTen108AqCU6ORf/45Rv/jrUD7v2zwhbv0CojZ4
LbmBUkRqd7p0391JcCLdzUEp9RELWCI3j62U/pSjGNeU4nlVa+mumlIqU0WDm7RD
05gQaDxzqdw+eAUIjDYHqDGGO3bDYrrxfyeip69H/1Tpsg6iZyGKMSzFBpliYZME
GXQ1VeLLY3Sszb1ASt/J0Zp8yW3LYPIjOahKzg6jmC7VEWXHTujyVWjY1n/m+yLU
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21212812008421380743465041324766882388
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-02 15:12:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-31 15:12:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecisd.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19283822952721775128248961104273447566635661015501768833735351330747246644238857327791831523272270683071190499264919891215531715234773190385793766603715690559170157077375232303554680636516213964605989725774600919770029414292073785840622651199401664245545463966979172626660344535698392303988275552939695151417416411343217476378916811369956256067712525211877227595352749158809359271064552663495105091436024692125006120106845572804989057629874074015886920626939305470956112749329423198777997728233866961116571039591515396664643003146028524326832647152775893750205624545759246612999619820635792465250582493917017431790617
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e37bbaedd544fb680da1052ce932c3a48f097d04
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/gVA1DNkY-VQ'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecisd.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/1iS8I0jLTkE.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a0000018af1292f4f000004030047304502205663952b2c1900ba4bfc4d56035a8bd95c42e985d567c32ae16ecbf6789e0fa7022100c5d8ded9aa93a4343b944841c555a7dba5ebc94edfe89dbb9566028ed2d342380076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb520000018af1292f5d0000040300473045022100dd16cfa03f11875bcbc668deb7624eeccfc8767eb129372f04c3bcbbf0dc295c02200b59ca958c5ef321e6698376007ae3599b2370cba7f218f5257ef8746f286611
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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