www.brazos.org

- Brazos River Authority -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0c:e2:52:e1:83:e7:54:12:ab:1a:3d:89:0d:5b:d1:f0 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Brazos River Authority

Company registration number: Government Entity
Organization: Brazos River Authority
Organization unit: IT
State / Province: Texas
Locality: Waco
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:e2:52:e1:83:e7:54:12:ab:1a:3d:89:0d:5b:d1:f0
Serial Number (int): 17125876064194121839426671423759569392
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8a:9e:5e:c5:08:2b:6a:52:69:9c:39:69:39:57:93:b3:f8:36:9f:c2
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 2c:65:07:c5:7c:fd:ee:98:e6:f0:9f:bc:93:be:d4:05:9d:e6:10:d8
Fingerprint (sha256): 56:0d:56:a7:d4:76:a6:c5:76:8c:20:b3:78:ce:a5:da:ba:64:87:26:d3:74:4e:39:c5:1a:64:51:df:c2:e1:47

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.brazos.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.brazos.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.brazos.org
brazos.org

Other certificates including the domain name brazos.org

(limited to 100 certificates)
*.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
webmail.brazos.org
webmail.brazos.org
*.brazos.org
webmail.brazos.org
helpdesk.brazos.org
helpdesk.porticopm.com
www.brazos.org
sft.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
*.brazos.org
*.brazos.org
*.brazos.org
mail.brazos.org
www.brazos.org
helpdesk.porticopm.com
*.brazos.org
helpdesk.brazos.org
www.brazos.org
*.brazos.org
www.brazos.org
helpdesk.brazos.org
directaccess.brazos.org
sip.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
rdgw-srv.brazos.org
mail.brazos.org
*.brazos.org
helpdesk.brazos.org
tickets.ec-comptech.com
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
helpdesk.porticopm.com
*.brazos.org
*.brazos.org
*.brazos.org
sip.brazos.org
www.brazos.org
*.brazos.org
tickets.ec-comptech.com
*.brazos.org
mail2.brazos.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
www.brazos.org
mail.brazos.org
directaccess.brazos.org
*.brazos.org
sip.brazos.org
clfhelpdesk.clf.uk
clfhelpdesk.clf.uk
www.brazos.org
webmail.brazos.org
rpad1.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
*.brazos.org
legacy.brazos.org

Certificate

The complete raw certificate details for www.brazos.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17125876064194121839426671423759569392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-27 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Waco'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brazos River Authority'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.brazos.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 715601902530468134234918631150114441462851605729771507721080931543475947500265733547665620321201024316919617702090652560355437586906448346650482967761621937410929075100449179255464643708046833264059437121503334146671226958600508914348358839410077754559003268420255328282337007722132910583520050084012089381909900705788206705698939769383662382433751390753864507231461309775982756245857160066370399930190222819539115490793492151013073686764443548321031942959390945941581793341578409036905864132761745117205103621221375490495288819272695492519701335805433303267311995516102162286079936589662634946039273548635524879939536888761344579369371252972484915183577439157435539325322744400422545742852221857084270497548644910475914692054507308252117612784576244036151416798260683518553758178045394055221348153691776728011714746655571551891023457878325848759004040584500715730155055511209090310217577213024184769263340219496050429607707398530621508036000104988533031278462210946673461937707340342334930721448307094174805487160094232246650195037451323781897499053094823934588903668774131154017687236707469008258187583124237027618533291580876838941851113523854598333502853360455508061230323939379381851273924787254390311946628004175075005112531013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8a9e5ec5082b6a52699c3969395793b3f8369fc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brazos.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brazos.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		007b8e9dc6e9e6d903c7c55decea6e8e6ad0be07fa1ee53dff4eef661896b43e7a471e7e8167dba8c4618c49a5905840eb353e125c63fe984b0c68bb5da49bab35c614df95f92c42f5c5496c5ed832ccf7b05ef494751c4e7e02d48cdb6846239fcaabd045a23accbcbb7dd122b77f3b35a76df290ac5683eee9ef6b255e8e9169d31a36ca53de6fb0a20ef4c85ada398537fc5ab15cf0bc6b2787296d1e085f11a7fd6abef9e24548c872e0b009f342f890ce0164bd3c1493cd4b3fbe071cdd3d91b133bff6d89c17d5985bf1f2b8fab9efe4c7730845618c61860302138cdb1a99d9baf9ad9daeabb36fd5dac9924acacbf521f31915c8e75ffae2fe3f0f412e