aghseagles.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 17:c2:92:7e:8b:8a:8e:ea:11:53:93:c5:90:85:31:c9 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=aghseagles.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 17:c2:92:7e:8b:8a:8e:ea:11:53:93:c5:90:85:31:c9
Serial Number (int): 31582520751345354600011879874505814473
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 09:f1:71:aa:67:46:08:b8:08:ec:89:09:d0:97:6b:54:48:8f:06:f6
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 16:5b:69:6b:5b:6d:2a:ac:e6:c2:6f:15:03:3b:e2:23:6b:b1:1d:38
Fingerprint (sha256): 54:3e:6b:c4:94:2f:ad:c5:90:ab:8f:ce:0d:0d:5f:67:e7:eb:fe:a4:a0:04:0d:64:10:79:1e:be:b9:1f:ea:2f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/wz_lXlHBaCc
CRL Distribution Point: http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl

Check the revocation status for certificate aghseagles.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for aghseagles.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

aghseagles.org

Other certificates including the domain name aghseagles.org

(limited to 100 certificates)
www.aghseagles.org
www.colegioguadalupedetulpetlac.edu.mx
addams.southredford.org
admin.sallasmahone.gocats.org
soar.southredford.org
0-3.texasdhhresources.org
www.cristoreysandiego.org
fisher.southredford.org
aghseagles.org
0-3.texasdhhresources.org
vandenberg.southredford.org
colegiocipres.edu.mx
carnegie-schools.com
admin.aghseagles.org
admin.aghseagles.org
0-3.texasdhhresources.org
www.iuvyc.edu.mx
0-3.texasdhhresources.org
admin.soar.southredford.org
admin.stbarnabasparish.org
admin.thurston.southredford.org
admin.addams.southredford.org
admin.aghseagles.org
0-3.texasdhhresources.org
calhanschool.org
www.unionacademy.net
admin.icsjschool.org
0-3.texasdhhresources.org
admin.pierce.southredford.org
preescolar.semperaltius.edu.mx
www.strosewilmington.com
admin.aghseagles.org
admin.aghseagles.org
admin.aghseagles.org
aghseagles.org
www.angloarts.mx
admin.aghseagles.org
admin.colegioguadalupe.edu.mx
0-3.texasdhhresources.org
en.angloarts.mx
0-3.texasdhhresources.org
0-3.texasdhhresources.org
breed.exteraschools.org
aghseagles.org
www.aghseagles.org
0-3.texasdhhresources.org
upperallen.mbgsd.org
southeast.varnett.org
addams.southredford.org
aghseagles.org
admin.aghseagles.org
mps.monroe.k12.tn.us
admin.aghseagles.org
usj.dcsedu.com
0-3.texasdhhresources.org
0-3.texasdhhresources.org
0-3.texasdhhresources.org
admin.aghseagles.org
southredford.org
admin.aghseagles.org
0-3.texasdhhresources.org
admin.ohds.org
admin.aghseagles.org
admin.aghseagles.org
admin.aghseagles.org
pierce.southredford.org
aghseagles.org
www.admin.colegiocipres.edu.mx
www.mchdurham.org
0-3.texasdhhresources.org
www.dormanhigh.org
bps.bayfield.k12.co.us
0-3.texasdhhresources.org
admin.sd925.org
admin.aghseagles.org
www.ebdesilva.org
thurston.southredford.org
www.sedi.edu.mx
mchs.mitchell.k12.ga.us
admin.fisher.southredford.org
admin.colegioguadalupedetulpetlac.edu.mx
0-3.texasdhhresources.org
wes.magnoliaisd.org
www.whittierchristian.org
0-3.texasdhhresources.org
www.mwschool.org
jefferson.southredford.org
aghseagles.org
admin.southredford.org
www.carnegie-schools.com
pas.pusdschools.net
addams.southredford.org
admin.slcd.org
admin.aghseagles.org
admin.aghseagles.org
addams.southredford.org
admin.vandenberg.southredford.org
carlisle.k12.ia.us
admin.aghseagles.org
admin.angloarts.mx

Certificate

The complete raw certificate details for aghseagles.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIQF8KSfouKjuoRU5PFkIUxyTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA1MTcxNDMwMjBaFw0yNDA4MTUx
NDMwMTlaMBkxFzAVBgNVBAMTDmFnaHNlYWdsZXMub3JnMIIBIjANBgkqhkiG9w0B
AQEFAAOCAQ8AMIIBCgKCAQEAs0Ef3+BWoNHH08bXN/MAFue4gNNcyfWsc0aFcJkr
b43wHpr3s5I0kCyY37quRhpZhmSe7OyiFdeHnzPPji4CCoIjkwlakhxQHLeUBkPS
XEBwXU7rWSyyfmbZxz+EhZEKX1kASgSK12afDPex7hHjfzZbzarid11nsx38gQDQ
PZkZpEYevBtpCgUG6M9X0c7Y/7njCGhEAB/HBh3Q+n4PzcqYHvrWMdn8qILXAFBQ
G7xMxtgUVPiFHwVYGhfSia18VgpiH4cjZGUKibPUVrOytWIoBeJ79LuPECZTTej3
8eyh0sRDbVZ3BBGUuxYpHZ6KuODbioDfa3ZEtaMoJgxT8QIDAQABo4ICdTCCAnEw
DgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQC
MAAwHQYDVR0OBBYEFAnxcapnRgi4COyJCdCXa1RIjwb2MB8GA1UdIwQYMBaAFNX8
ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYp
aHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvd3pfbFhsSEJhQ2MwMQYIKwYB
BQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwGQYD
VR0RBBIwEIIOYWdoc2VhZ2xlcy5vcmcwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYK
KwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29v
Zy9ndHMxcDUva0Fkelp5V1VNMFUuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDw
AHUAdv+IPwq2+5VRwmHM9Ye6NLSkzbsp3GhCCp/mZ0xaOnQAAAGPhyz0gwAABAMA
RjBEAiAQfLpvu/9m62S7x4gN/9HEflS/DGABjNoBJrYUaSSwzQIgOVsB4PmjTUy7
o5FxgElhseq4UbQdhmMoAaw1t6nkQrMAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GE
hTS9pD0wSNf7qwAAAY+HLPiEAAAEAwBIMEYCIQC/vtu9TitQR47qtDvIu9DU+1EZ
KTv8XXJgmn2DyZ7XLgIhAKYsK7rPLJxF7ea6BUtk9b13x3PGggjlFOR8YuVcZ9Cb
MA0GCSqGSIb3DQEBCwUAA4IBAQAD0CijGo38YNWg37tuCKNG/cryY/oQgUsalw0G
EeWRnI7E0HmJ5ndJ0h1/VmGY69key8i7ohqRGBU9x2WDOaEhUjqqgBRPEADiwq96
+IRQrM3sRFbFw8a775QuvsztS1DgBlwJUoiV2ieD2BS9u42NBSx8pXNz1zElSWnf
j/rRIu4M3OjDGw0beMGOCNjjeXKPEztbKdyGSSG34L7FjF2Zn5SouYX77huNeU/B
teLIUuVRTmXHIJ/dMJfRHqsYPQukb9Hw+TCZzskFGRiRkVpA0fIys9SzCqMWLMla
XI3geb9y+QMj9Gih0uYaz2Fm+S9nLpQH8jCORO9xkI4rm7+0
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs0Ef3+BWoNHH08bXN/MA
Fue4gNNcyfWsc0aFcJkrb43wHpr3s5I0kCyY37quRhpZhmSe7OyiFdeHnzPPji4C
CoIjkwlakhxQHLeUBkPSXEBwXU7rWSyyfmbZxz+EhZEKX1kASgSK12afDPex7hHj
fzZbzarid11nsx38gQDQPZkZpEYevBtpCgUG6M9X0c7Y/7njCGhEAB/HBh3Q+n4P
zcqYHvrWMdn8qILXAFBQG7xMxtgUVPiFHwVYGhfSia18VgpiH4cjZGUKibPUVrOy
tWIoBeJ79LuPECZTTej38eyh0sRDbVZ3BBGUuxYpHZ6KuODbioDfa3ZEtaMoJgxT
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 31582520751345354600011879874505814473
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 14:30:20 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-15 14:30:19 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'aghseagles.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22628770681631067414934880447619350405440467593038156322608779038703783277028334471017864047881833384787014616325458826568695491485518257781393628245602933142636119287957487637640258728886933429406965597435009589505226569384265804278029891303970054064599301050982944208790682856730662927725852557051572301445230983821048040503635288510481322866446478616804071886308665053717385555708048814613311600721719330235750442460417565430785153379612956263538629443388651624426293428689986922816192698166709351310232026441056794673969161191932711255410348625615167998248071656012497893163473868102977953957402743782227659478001
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09f171aa674608b808ec8909d0976b54488f06f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/wz_lXlHBaCc'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aghseagles.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f872cf48300000403004630440220107cba6fbbff66eb64bbc7880dffd1c47e54bf0c60018cda0126b6146924b0cd0220395b01e0f9a34d4cbba39171804961b1eab851b41d86632801ac35b7a9e442b3007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f872cf8840000040300483046022100bfbedbbd4e2b50478eeab43bc8bbd0d4fb5119293bfc5d72609a7d83c99ed72e022100a62c2bbacf2c9c45ede6ba054b64f5bd77c773c68208e514e47c62e55c67d09b
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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