admin.bp.smithvilleisd.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 87:6b:65:b5:7c:18:5c:fe:11:c8:a5:cb:9b:81:1f:b1 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=admin.bp.smithvilleisd.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 87:6b:65:b5:7c:18:5c:fe:11:c8:a5:cb:9b:81:1f:b1
Serial Number (int): 180003418096899847880813054088452317105
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 3d:a3:1c:7c:3f:d0:46:3f:99:ac:cb:39:56:f3:d7:aa:61:1e:51:c8
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): a2:99:25:82:b4:cb:fa:76:4f:14:62:ed:85:41:3b:ef:94:0f:05:c8
Fingerprint (sha256): 6e:b4:bd:64:0e:19:b1:0c:94:e6:e0:1b:4e:1f:0a:03:77:90:d4:98:95:06:9d:8d:e7:6d:54:8d:98:d1:0c:30

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/iuFVFFub_h4
CRL Distribution Point: http://crls.pki.goog/gts1p5/VSGYvwhDaGc.crl

Check the revocation status for certificate admin.bp.smithvilleisd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.bp.smithvilleisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bp.smithvilleisd.org

Other certificates including the domain name smithvilleisd.org

(limited to 100 certificates)
admin.dm.aceroschools.org
parish.sangabrielmissionchurch.org
www.cfn.edu.mx
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
*.smithvilleisd.org
spam.smithvilleisd.org
admin.angelocatholicschool.com
shs.smithvilleisd.org
eduphoria.smithvilleisd.org
www.collegeachievegreaterasburyparkcharterschool.org
www.christrpv.com
admin.angelocatholicschool.com
www.gorman.esc14.net
www.infinityhs.org
acsaregionxv.org
acsaregionxv.org
admin.res.rsu14.org
exchange.smithvilleisd.org
daycare.eastlandisd.net
acsaregionxv.org
admin.hg.aceroschools.org
admin.angelocatholicschool.com
spam.smithvilleisd.org
admin.angelocatholicschool.com
exchange.smithvilleisd.org
exchange.smithvilleisd.org
tmsa.org
exchange.smithvilleisd.org
admin.angelocatholicschool.com
admin.bp.smithvilleisd.org
smithvilleisd.org
admin.angelocatholicschool.com
shs.smithvilleisd.org
baxterjh.eisd.org
admin.angelocatholicschool.com
exchange.smithvilleisd.org
admin.angelocatholicschool.com
shs.smithvilleisd.org
admin.dz.aceroschools.org
ees.elkincityschools.org
acsaregionxv.org
admin.angelocatholicschool.com
hanak12school.org
eduphoria.smithvilleisd.org
shs.mpusd.net
adulted.sanjacinto.k12.ca.us
ems.elkincityschools.org
classlink.smithvilleisd.org
shs.smithvilleisd.org
web.euroamericanosur.edu.mx
eisner.caminonuevo.org
eduphoria.smithvilleisd.org
admin.keppel.pusdschools.net
acsaregionxv.org
exchange.smithvilleisd.org
smithvilleisd.org
exchange.smithvilleisd.org
ces.lowndes.k12.ms.us
admin.cms.davidson.k12.nc.us
chs.lowndes.k12.ms.us
acsaregionxv.org
acsaregionxv.org
*.smithvilleisd.org
smithvilleisd.org
admin.angelocatholicschool.com
exchange.smithvilleisd.org
acsaregionxv.org
shs.smithvilleisd.org
admin.angelocatholicschool.com
www.leusd.k12.ca.us
admin.cchs.mpusd.net
spam.smithvilleisd.org
ctc.lowndes.k12.ms.us
admin.angelocatholicschool.com
acsaregionxv.org
admin.llhs.org
exchange.smithvilleisd.org
merida.mis.edu.mx
shs.seafordbluejays.org
stthomasmorealhambra.org
bp.smithvilleisd.org
admin.angelocatholicschool.com
*.smithvilleisd.org
exchange.smithvilleisd.org
parish.sangabrielmissionchurch.org
admin.sfva.org
smithvilleisd.org
admin.ehs.elkincityschools.org
admin.angelocatholicschool.com
admin.ece.pusdschools.net
acsaregionxv.org
www.newlamiddle.org

Certificate

The complete raw certificate details for admin.bp.smithvilleisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFeDCCBGCgAwIBAgIRAIdrZbV8GFz+Ecily5uBH7EwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMTIwMTAyODM3WhcNMjQwNDE5
MTAyODM2WjAlMSMwIQYDVQQDExphZG1pbi5icC5zbWl0aHZpbGxlaXNkLm9yZzCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMcgd2qRJXvm21k3XLqfJg49
0zbouTH6SpFD3rbRRWPJ5/ClwSFeBqNrS8nMT03PO7hjtEYBnuBnQ+IEUyaTSXGy
p/G58k+a8jVEXBPBLG4dGvOXhOc1Alq0RLmKl412BFMOzgPI9x/Z+wZ1pjB4cjx0
FW6IpEDrk0CBuiHFMbdo7m6Uvgq943gyk/czRR3IR0ihA+n6iATG8qzaavsn7zGN
sTQLyvwDLDoY7t/QO7MGtpcrr/twpFplvscOSmkhjdMHoUzY/vTTvr5q9jdb7rZs
Aj9yZlUqTprXaGghSfGAvkDLsP/1C2L4vCxUoeFdslIXWXBcfoCA1gtAcuZgcREC
AwEAAaOCAoAwggJ8MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcD
ATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBQ9oxx8P9BGP5msyzlW89eqYR5RyDAf
BgNVHSMEGDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGow
NQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L2l1RlZG
RnViX2g0MDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9n
dHMxcDUuZGVyMCUGA1UdEQQeMByCGmFkbWluLmJwLnNtaXRodmlsbGVpc2Qub3Jn
MCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAx
oC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L1ZTR1l2d2hEYUdjLmNy
bDCCAQMGCisGAQQB1nkCBAIEgfQEgfEA7wB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABjSahPq4AAAQDAEcwRQIgCjvvut/heT4E6xThveajqpLK
xhy0p/EjNhbqwu59wogCIQDsuNJXRQ3jpasmZSJ/+GhGMk5AkgYpjK47i0sstw0s
yQB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjSahPtIAAAQD
AEYwRAIgffrlOSrWzXyt40ojxp1d+6slj+r9L4qMdT/dH/Bf5JwCIGhmAg0IDY6S
kaTDTjDoEZ2MEvB4rrCZ0slfSUc4aKJSMA0GCSqGSIb3DQEBCwUAA4IBAQAq/alc
HTwhVpPi7iwyOXeOK3JejJxsHwvStTv5AD0c6tZnk1ArHCLoqw++ss0SNF22j6sU
9q/TCJmYl9H1kwBl471r9vZoQdcRiER8hC0O2MLQ8gHWROZjfUedDBI4qwqJI5ZQ
83fwfsg294uw0nZ+hqC5IwjzhGxHooVG1FQrOJ3V83QCOgqarCx9XkXOQqCqgH15
MlgZcjyqslZkESiP9mbzIkO/0zPqjP3zER32O5ImOD+WacrhTR0mKeMLtSZOuMEV
YcMi2APtPBAmtXBooB96KPIwWQQuTgJ0Py4fEUfqLwT3Ms398DuEGafMszLbWf60
Sglc18fMiIYlGQFc
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyB3apEle+bbWTdcup8m
Dj3TNui5MfpKkUPettFFY8nn8KXBIV4Go2tLycxPTc87uGO0RgGe4GdD4gRTJpNJ
cbKn8bnyT5ryNURcE8Esbh0a85eE5zUCWrREuYqXjXYEUw7OA8j3H9n7BnWmMHhy
PHQVboikQOuTQIG6IcUxt2jubpS+Cr3jeDKT9zNFHchHSKED6fqIBMbyrNpq+yfv
MY2xNAvK/AMsOhju39A7swa2lyuv+3CkWmW+xw5KaSGN0wehTNj+9NO+vmr2N1vu
tmwCP3JmVSpOmtdoaCFJ8YC+QMuw//ULYvi8LFSh4V2yUhdZcFx+gIDWC0By5mBx
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 180003418096899847880813054088452317105
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-20 10:28:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 10:28:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.bp.smithvilleisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25137432501214239425926738048476641312258897370091383118603524121590556785785985664894203747669580728483121627935282465715277963089768843614949888559460979701891349860868542696405253825791161622144108860550951310570618606502028702540278299201817011768251085992923401884791852251059444523041009478863589463111569121804365377151679617298719409968000810164676700965050148547669796948845752118796387202979203997365143641650315597004989528353661470515358497389068326971556540930465026882802139769018282291270599041494597784824225817740750297309943076052253146092358417019822704175162167262983014598792377289294867138113809
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3da31c7c3fd0463f99accb3956f3d7aa611e51c8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/iuFVFFub_h4'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bp.smithvilleisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/VSGYvwhDaGc.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d26a13eae000004030047304502200a3befbadfe1793e04eb14e1bde6a3aa92cac61cb4a7f1233616eac2ee7dc288022100ecb8d257450de3a5ab2665227ff86846324e409206298cae3b8b4b2cb70d2cc900750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018d26a13ed2000004030046304402207dfae5392ad6cd7cade34a23c69d5dfbab258feafd2f8a8c753fdd1ff05fe49c02206866020d080d8e9291a4c34e30e8119d8c12f078aeb099d2c95f49473868a252
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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