lennox.k12.ca.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number ff:e2:10:08:01:3e:1d:78:0e:b8:73:14:7d:62:2a:0e was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lennox.k12.ca.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ff:e2:10:08:01:3e:1d:78:0e:b8:73:14:7d:62:2a:0e
Serial Number (int): 340126923167945954749295644832763619854
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a0:28:d7:d4:a9:cc:99:84:95:97:58:93:34:af:41:34:f4:7f:7c:df
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 62:6f:c4:75:4f:c2:0b:36:a7:67:7b:8a:6d:d0:fb:48:77:a7:8a:59
Fingerprint (sha256): 60:42:64:02:13:ae:33:d3:a1:f0:ab:6a:09:e2:08:b1:50:18:54:58:f8:1b:ca:72:e9:1d:98:e9:a3:76:51:09

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/nj8JVmLsZuo
CRL Distribution Point: http://crls.pki.goog/gts1p5/lyHNLHo1elk.crl

Check the revocation status for certificate lennox.k12.ca.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lennox.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lennox.k12.ca.us

Other certificates including the domain name lennox.k12.ca.us

(limited to 100 certificates)
admin.bronxbetterlearning.net
jamf.lennox.k12.ca.us
ehkeys.ossdms.org
2.bronxbetterlearning.net
lennox.k12.ca.us
northprimary.kiskiarea.com
2.bronxbetterlearning.net
komarek94.org
admin.eastprimary.kiskiarea.com
abramfriedmanoc.org
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
www.sanjoseprep.org
2.bronxbetterlearning.net
2.bronxbetterlearning.org
centroculturaljalilgibran.edu.mx
acldtillotsonschool.org
www.grandville.k12.mi.us
stbern.net
www.pilibospreschool.org
*.lennox.k12.ca.us
2.bronxbetterlearning.net
abramfriedmanoc.org
bronxbetterlearning.net
acldtillotsonschool.org
www.grandville.k12.mi.us
2.bronxbetterlearning.net
admin.athletics.deperek12.org
landrum.sbcisd.net
kernhighnetwork.net
jamf.lennox.k12.ca.us
2.bronxbetterlearning.net
acldtillotsonschool.org
lennox.k12.ca.us
2.bronxbetterlearning.net
academyofthecanyons.net
www.unionsquareacademy.org
www.stnorbertschool.org
www.ciudaddelosninoscr.org
mis.edu.mx
www.narbonnehsgauchos.com
lennox.k12.ca.us
sa.snowlineschools.com
admin.icabh.org
admin.bme.snowlineschools.com
ckr01.lennox.k12.ca.us
www.madisonmonterrey.edu.mx
stnorbertschool.org
www.kernhighnetwork.net
acldtillotsonschool.org
barbaravick.org
2.bronxbetterlearning.net
lennox.k12.ca.us
admin.centroculturaljalilgibran.edu.mx
www.corecharter.org
lennox.k12.ca.us
2.bronxbetterlearning.org
admin.stjoseph-school.org
2.bronxbetterlearning.net
academyofthecanyons.net
samuelgompersms.net
acldtillotsonschool.org
www.stbern.net
web.euroamericano.edu.mx
2.bronxbetterlearning.org
www.jaselu.com.mx
admin.dchs.davidson.k12.nc.us
www.grandville.k12.mi.us
lennox.k12.ca.us
mcs.k12.ny.us
2.bronxbetterlearning.net
aak.potsdam.k12.ny.us
academyofthecanyons.net
aacs.net
acldtillotsonschool.org
2.bronxbetterlearning.org
lennox.k12.ca.us
lennox.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
2.bronxbetterlearning.org
2.bronxbetterlearning.net
mcs.k12.ny.us
doe.as
admin.semperaltius.edu.mx
*.lennox.k12.ca.us
aak.potsdam.k12.ny.us
lennox.k12.ca.us
lennox.k12.ca.us
stroseschoolwilmington.org
2.bronxbetterlearning.org
bbjh.magnoliaisd.org
acldtillotsonschool.org
sketches.edlio.com
bcsdk12.org
2.bronxbetterlearning.org
academyofthecanyons.net

Certificate

The complete raw certificate details for lennox.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIRAP/iEAgBPh14DrhzFH1iKg4wDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwMjAxMDgyMzQ2WhcNMjMwNTAy
MDgyMzQ1WjAbMRkwFwYDVQQDExBsZW5ub3guazEyLmNhLnVzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BAY9FUtPVGnNzc//yOMrOSTRIk4EseHOrbf
ZE1T/FNsnvuTSuXkJr7gDq71o1ap/f8lckbRXPo0cg6ux5Qr6MQFljAQJQUsTlqT
Ul170Ds+s540Vf+xVlwGr0VR1fn8VoxU3ZSVyIGD44Cv73joLdN+NVOZ2MXu3Ku0
loY/0tbEMpw1z96IMEk1w+2klZAR6Gq40AfF208+BpZu7SH1N9GU/mOMtL1GZAv/
G7cEerz461OXNbpjDQGoIiUm1WVri3ecjwCNFWTWBeBcOzwpnng7mN//5Bsr4s4+
nsNj1tYFR9oObh3GSMTHbSva1dM+ddNe/rZj6pi/29YpbPuWZwIDAQABo4ICdzCC
AnMwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB
/wQCMAAwHQYDVR0OBBYEFKAo19SpzJmElZdYkzSvQTT0f3zfMB8GA1UdIwQYMBaA
FNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcw
AYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvbmo4SlZtTHNadW8wMQYI
KwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIw
GwYDVR0RBBQwEoIQbGVubm94LmsxMi5jYS51czAhBgNVHSAEGjAYMAgGBmeBDAEC
ATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBr
aS5nb29nL2d0czFwNS9seUhOTEhvMWVsay5jcmwwggEEBgorBgEEAdZ5AgQCBIH1
BIHyAPAAdgB6MoxU2LcttiDqOOBSHumEFnAyE4VNO9IrwTpXo1LrUgAAAYYMShVm
AAAEAwBHMEUCIH4dXlvXERpCdPNa+Rg/NXg1/cTBunWRbeqW+nDXk3DyAiEA4LDr
CwsuBhRm2mlOQv+Ny0SE3FeDKXFjjuPFgKNSmMcAdgDoPtDaPvUGNTLnVyi8iWvJ
A9PL0RFr7Otp4Xd9bQa9bgAAAYYMShUvAAAEAwBHMEUCIHjJtmi6Ro4JA34rSq59
wTFmdlry3c2pbB0nBRDVmPahAiEA+qpTj2DPEuHNx+a52/YT5X+HZDvaOkZwJsjl
O+dOlL0wDQYJKoZIhvcNAQELBQADggEBAA1vm+Ot5K68Ww9oxZcy5zPFWWuVScZz
bA+ugGKVpGTfDBUXWqCqwqQK0oEQADX5kWZGEdgNrKkF8kkIMDmUwa3lc1KNcQDB
T0HXShX1+bexkN+ipREJ08XgzIjJ6vKfRADqAU9N/djwTK26pbnc/+jYsobPO8eb
E0bQGo+cPJJN8/so5Z5x5W5YnBfnHoyKS6NxSrX8U+dkXtuQlxZBg6jlpT9XaWja
PZW0lsO+OF0wjunjDwnH6+GK474jeJbsVU3ADVcNnIEb4kZCQudbLroGjVrUKC5F
B4r9LT/cZ8cxLwW8T/fzBjSE3pJNs4c6eJk/nMUvTKatK2qDY7lHp7g=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4BAY9FUtPVGnNzc//yOM
rOSTRIk4EseHOrbfZE1T/FNsnvuTSuXkJr7gDq71o1ap/f8lckbRXPo0cg6ux5Qr
6MQFljAQJQUsTlqTUl170Ds+s540Vf+xVlwGr0VR1fn8VoxU3ZSVyIGD44Cv73jo
LdN+NVOZ2MXu3Ku0loY/0tbEMpw1z96IMEk1w+2klZAR6Gq40AfF208+BpZu7SH1
N9GU/mOMtL1GZAv/G7cEerz461OXNbpjDQGoIiUm1WVri3ecjwCNFWTWBeBcOzwp
nng7mN//5Bsr4s4+nsNj1tYFR9oObh3GSMTHbSva1dM+ddNe/rZj6pi/29YpbPuW
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 340126923167945954749295644832763619854
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-01 08:23:46 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-02 08:23:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lennox.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28285318274760041755189658899405619012331693811063299323569407791860928854664288571094764089583526574328641846584986837582164830692012508681315854492767642381175398919347348683571316227464349414793054439633738115451495574738088789014467538409600647439404427963054256344327046720130135565435382205081023702074579177706877001814738327262733047929250690230619271366055368054436668659842968067322258987461799181179642420632714914171878222718143780917379372683716228509025838326367307781372244948371555077222391965292773971653065924408665310211815969994892764428034995753597860590410419811694407774873957180020407586756199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a028d7d4a9cc99849597589334af4134f47f7cdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/nj8JVmLsZuo'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lennox.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/lyHNLHo1elk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb52000001860c4a1566000004030047304502207e1d5e5bd7111a4274f35af9183f357835fdc4c1ba75916dea96fa70d79370f2022100e0b0eb0b0b2e061466da694e42ff8dcb4484dc57832971638ee3c580a35298c7007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e000001860c4a152f0000040300473045022078c9b668ba468e09037e2b4aae7dc13166765af2ddcda96c1d270510d598f6a1022100faaa538f60cf12e1cdc7e6b9dbf613e57f87643bda3a467026c8e53be74e94bd
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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