tch.leusd.k12.ca.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number cd:65:5f:5c:1e:d3:6a:2f:0d:6f:19:f3:8b:21:80:7c was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=tch.leusd.k12.ca.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): cd:65:5f:5c:1e:d3:6a:2f:0d:6f:19:f3:8b:21:80:7c
Serial Number (int): 273018095246063204838162576524695404668
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4b:ad:fe:2a:37:8d:7b:4e:a4:b8:e9:fe:c6:c9:df:5d:9f:7d:0b:df
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): a5:12:35:22:3c:6a:69:80:25:b0:b8:c6:e1:6a:31:3e:78:5c:ba:c6
Fingerprint (sha256): 82:22:6b:24:af:e7:63:e8:64:2a:5f:94:58:34:0f:c8:af:d4:01:94:04:c1:2f:ed:f9:b4:63:58:71:b2:96:36

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/8nR0ta-o5Z0
CRL Distribution Point: http://crls.pki.goog/gts1p5/ji-8S0rxHfY.crl

Check the revocation status for certificate tch.leusd.k12.ca.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tch.leusd.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tch.leusd.k12.ca.us

Other certificates including the domain name leusd.k12.ca.us

(limited to 100 certificates)
www.cfn.edu.mx
leusd.k12.ca.us
rce.leusd.k12.ca.us
ees.leusd.k12.ca.us
jes.pullmanschools.org
admin.kcusd.com
admin.ccti.pgsd.ms
admin.ccti.pgsd.ms
admin.7gc.owassops.org
admin.ccti.pgsd.ms
admin.cce.leusd.k12.ca.us
admin.whitson.wsvsd.org
admin.ecacademy.scrsd.org
admin.ccti.pgsd.ms
admin.spachs.ca
cce.leusd.k12.ca.us
admin.ees.leusd.k12.ca.us
admin.ccti.pgsd.ms
ic.leusd.k12.ca.us
materdeiprep.org
acrma8.org
www.collegeachievegreaterasburyparkcharterschool.org
adfs.leusd.k12.ca.us
www.portrichmondhs.org
lms.pullmanschools.org
admin.alccobras.net
leusd.k12.ca.us
admin.ccti.pgsd.ms
www.stlouis-batesville.org
admin.res.rsu14.org
mdm.leusd.k12.ca.us
acsaregionxv.org
admin.stedschool.org
admin.hg.aceroschools.org
compass.gobearsgo.net
admin.ftn.flextechschools.org
admin.ccti.pgsd.ms
admin.ecacademy.scrsd.org
leusd.k12.ca.us
admin.ecacademy.scrsd.org
leusd.k12.ca.us
ic.leusd.k12.ca.us
admin.ecacademy.scrsd.org
sunrisewaldorfschool.org
admin.lhs.leusd.k12.ca.us
admin.chms.mx
admin.adulted.kcusd.com
admin.mes.leusd.k12.ca.us
ringling.k12.ok.us
dge.leusd.k12.ca.us
www.montrosechristiancdc.org
admin.ecacademy.scrsd.org
leusd.k12.ca.us
admin.ccti.pgsd.ms
steam.erusd.org
elementary.grovetonisd.net
admin.edlio.mx
admin.ccti.pgsd.ms
mail.leusd.k12.ca.us
acrma8.org
admin.ecacademy.scrsd.org
jis.jarrellisd.org
shs.smithvilleisd.org
bishopmacdonell.wellingtoncdsb.ca
wes.leusd.k12.ca.us
www.rebsamen.mx
jtwilliamssecondarymontessori.wearecms.com
lhs.leusd.k12.ca.us
acrma8.org
adfs.leusd.k12.ca.us
ccti.pgsd.ms
tch.leusd.k12.ca.us
adfs.leusd.k12.ca.us
aceroschools.org
admin.lvs.leusd.k12.ca.us
admin.ecacademy.scrsd.org
acrma8.org
www.shagirl.com
admin.sqhs.monroe.k12.tn.us
leusd.k12.ca.us
admin.athlosbrownsville.org
abchandler.henderson.k12.ky.us
admin.ecacademy.scrsd.org
shs.mpusd.net
mes.leusd.k12.ca.us
admin.ecacademy.scrsd.org
steam.erusd.org
svhs.wvsd.com
admin.ecacademy.scrsd.org
acsaregionxv.org
lvs.leusd.k12.ca.us
leusd.k12.ca.us
admin.centroculturaljalilgibran.edu.mx
it.canoncityschools.org
wth.leusd.k12.ca.us
admin.compass.gobearsgo.net
www.rebsamen.mx
admin.ecacademy.scrsd.org
ic.leusd.k12.ca.us
www.marissa40.org

Certificate

The complete raw certificate details for tch.leusd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIRAM1lX1we02ovDW8Z84shgHwwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwMjIxMjM1MTMzWhcNMjQwNTIx
MjM1MTMyWjAeMRwwGgYDVQQDExN0Y2gubGV1c2QuazEyLmNhLnVzMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3LwCzVvPwgP5TEXoCj6BOLOrYnC31M/
IRG7jE/8zI0aiP1neTXBIhrkDuXw0Vlldx/ojFFHe19Fm/dxQahgB+cSnFXRq1ty
IDvsnENET7u6kCgGmIEbISg56faU97ZXE4QV0hvVWHFtPZA7JHlqALA+BQV35L8d
gQd9tifNsE17W4xzJTFr5MOoa5u+HNMIYk3IOnEX8nqJUCzGlwcrVCuwrNQTkHgT
0/puXMFZpL3pGVuE4+52PeKZennBeCLm8xRxzwcPtxRX2sG8Qn2modbF3hc0z9uO
QlHxSIJsan0u+mNQa2Pxin9UnM7pf04Koplh1BmK169dCOVgMrw4awIDAQABo4IC
ejCCAnYwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1Ud
EwEB/wQCMAAwHQYDVR0OBBYEFEut/io3jXtOpLjp/sbJ312ffQvfMB8GA1UdIwQY
MBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEF
BQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvOG5SMHRhLW81WjAw
MQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5k
ZXIwHgYDVR0RBBcwFYITdGNoLmxldXNkLmsxMi5jYS51czAhBgNVHSAEGjAYMAgG
BmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9j
cmxzLnBraS5nb29nL2d0czFwNS9qaS04UzByeEhmWS5jcmwwggEEBgorBgEEAdZ5
AgQCBIH1BIHyAPAAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAA
AY3OS9p6AAAEAwBHMEUCIQDNbh4TvOD3dQEXFNFcOLi3YOwlPXYLpTvCdRwnq2Lj
DgIgJAo7Ztjk7GJ5DWZZDtQF1sfrKZWn0BHuGNgoJ4qQH7QAdgBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAY3OS9qeAAAEAwBHMEUCIQD8Da2YUekL
sISzG5LVBzQLSoGFoYeOnaGFLy3xNJ6C1AIgQp5HNi4CqpIgE2vBlazM0cckTMHE
L8mu/NBp1q2GkScwDQYJKoZIhvcNAQELBQADggEBAD47VMkHbjC0m2rmhTVeLL7u
HYOYYB35TfSMF78u6H27tu8WYCQDPXZQAOXaDAQYD8a4yXbWGgS3EBRzaOxrQrXy
fFIRsH9MJfFnSXisNYBE6ZzPaOjtw/lgfxzOHF2A2xZo9r9i/Styq1HUVCz7Ow1r
Djt1pX8CiNo7mPkhI6qC9XliuccdfeBwVJzsLpnPgT3C47DnxxOtTLDDkpT77vqR
cPStib1oCYWY2kCsvHsuclBr+0HR+Z13erauDwdaLSmUK0QzQHuug0hXccw/0lfe
FKTw3dLPTBIJDAoxgKjm0SOfR439JohaUlNBr56UkrvvWKl/1S4qKyIz8hn1Z6w=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3LwCzVvPwgP5TEXoCj6
BOLOrYnC31M/IRG7jE/8zI0aiP1neTXBIhrkDuXw0Vlldx/ojFFHe19Fm/dxQahg
B+cSnFXRq1tyIDvsnENET7u6kCgGmIEbISg56faU97ZXE4QV0hvVWHFtPZA7JHlq
ALA+BQV35L8dgQd9tifNsE17W4xzJTFr5MOoa5u+HNMIYk3IOnEX8nqJUCzGlwcr
VCuwrNQTkHgT0/puXMFZpL3pGVuE4+52PeKZennBeCLm8xRxzwcPtxRX2sG8Qn2m
odbF3hc0z9uOQlHxSIJsan0u+mNQa2Pxin9UnM7pf04Koplh1BmK169dCOVgMrw4
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 273018095246063204838162576524695404668
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 23:51:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-21 23:51:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tch.leusd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20128568367602458050256119503877166065707681650659503635366902287633086403115625576524182214007876022900490434762906758457257755563200603554187705016792149276593268812151937971574483763658277713224709055655009924606128862810659459480562722866894206233550139158948568971219739703591534585845009286708972881969642830902773319867580093713281812073193529579743231600885122187436672547535375755250006737176879005445321112634815883508196096054879929240822506382663166007453114164779001815377257071986051374393276538321121602515184192668794988159015847758578228756866835888653185545149079770776908521684147952039968791869547
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4badfe2a378d7b4ea4b8e9fec6c9df5d9f7d0bdf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/8nR0ta-o5Z0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tch.leusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/ji-8S0rxHfY.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018dce4bda7a0000040300473045022100cd6e1e13bce0f775011714d15c38b8b760ec253d760ba53bc2751c27ab62e30e0220240a3b66d8e4ec62790d66590ed405d6c7eb2995a7d011ee18d828278a901fb400760048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018dce4bda9e0000040300473045022100fc0dad9851e90bb084b31b92d507340b4a8185a1878e9da1852f2df1349e82d40220429e47362e02aa9220136bc195acccd1c7244cc1c42fc9aefcd069d6ad869127
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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