admin.downtown.bcsd.com

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:74:7a:ec:a8:ca:24:6d:1c:88:b3:2f:ba:bb:5f:32:17:45 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.downtown.bcsd.com

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:74:7a:ec:a8:ca:24:6d:1c:88:b3:2f:ba:bb:5f:32:17:45
Serial Number (int): 300973006979114151266815614920604404291397
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 21:c9:40:32:0b:65:67:b1:0f:28:8c:fa:d3:1f:9a:31:1d:7a:ac:1c
Fingerprint (sha256): 82:5d:8d:a4:6b:13:9d:23:59:fa:06:7c:61:2b:70:df:42:bd:5d:a8:94:19:03:28:58:32:55:09:64:ba:3d:8a

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.downtown.bcsd.com

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.downtown.bcsd.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.bcsd.com
admin.casaloma.bcsd.com
admin.cato.bcsd.com
admin.chavez.bcsd.com
admin.chipman.bcsd.com
admin.collegeheights.bcsd.com
admin.downtown.bcsd.com
admin.dunnestemacademy.org
admin.eastview.gcschools.net
admin.eissler.bcsd.com
admin.emerson.bcsd.com
admin.euhs.exeter.k12.ca.us
admin.exeter.k12.ca.us
admin.fletcher.bcsd.com
admin.frankwest.bcsd.com
admin.fremont.bcsd.com
admin.garza.bcsd.com
admin.gcschools.net
admin.ghs.gcschools.net
admin.gms.gcschools.net
admin.gsdacademy.com
admin.halhenard.gcschools.net
admin.harding.bcsd.com
admin.harris.bcsd.com
admin.heather.scsdk8.org
admin.hermiston.k12.or.us
admin.highland.gcschools.net
admin.highschoolforartsandbusiness.org
admin.khs.exeter.k12.ca.us
admin.les.exeter.k12.ca.us
admin.mckinley.bcsd.com
admin.munsey.bcsd.com
admin.noble.bcsd.com
admin.notredameparish.org
admin.owensintermediate.bcsd.com
admin.owensprimary.bcsd.com
admin.pauly.bcsd.com
admin.rhes.exeter.k12.ca.us
admin.roosevelt.bcsd.com
admin.saltfork.org
admin.sierra.bcsd.com
admin.sjboces.org
admin.steinerschool.org
admin.stiern.bcsd.com
admin.tusculumview.gcschools.net
admin.voorhies.bcsd.com
admin.williams.bcsd.com
admin.wms.exeter.k12.ca.us
cas.centerusd.org
casaloma.bcsd.com
cato.bcsd.com
chavez.bcsd.com
collegeheights.bcsd.com
compton.bcsd.com
crammiddleschool.org
dunnestemacademy.org
eissler.bcsd.com
emerson.bcsd.com
euhs.exeter.k12.ca.us
evergreen.bcsd.com
exeter.k12.ca.us
faithmarietta.org
fletcher.bcsd.com
frankwest.bcsd.com
gsdacademy.com
harris.bcsd.com
high.saltfork.org
highschoolforartsandbusiness.org
hills.bcsd.com
horacemann.bcsd.com
jefferson.bcsd.com
juniorhigh.saltfork.org
khs.exeter.k12.ca.us
les.exeter.k12.ca.us
longfellow.bcsd.com
north.saltfork.org
notredameparish.org
owensprimary.bcsd.com
pioneer.bcsd.com
rhes.exeter.k12.ca.us
roosevelt.bcsd.com
saltfork.org
seal.bcsd.com
sjboces.org
south.saltfork.org
steinerschool.org
stiern.bcsd.com
washington.bcsd.com
wayside.bcsd.com
williams.bcsd.com
wms.exeter.k12.ca.us
www.bcsd.com
www.dunnestemacademy.org
www.exeter.k12.ca.us
www.gsdacademy.com
www.highschoolforartsandbusiness.org
www.notredameparish.org
www.saltfork.org
www.sjboces.org
www.steinerschool.org

Other certificates including the domain name bcsd.com

(limited to 100 certificates)
walshcps.org
admin-cuajimalpa.peterson.edu.mx
gutierrez.hcisd.org
bce.slvusd.org
*.bcsd.com
palomares.cv.k12.ca.us
admin.bcsd.com
www.cv.k12.ca.us
gfes.comalisd.org
admin-cuajimalpa.peterson.edu.mx
admin.proctor.cv.k12.ca.us
washington.bcsd.com
sunnyside.goldenruledallas.org
admin.veca.gocats.org
admin.gsdacademy.com
admin.rowlettacademy.org
www.dhs.dover.k12.nh.us
smartfind.bcsd.com
admin.bowie.hcisd.org
admin-cuajimalpa.peterson.edu.mx
www.msd120.org
admin.illinois.goldenruledallas.org
fremont.bcsd.com
www.rowlettacademy.org
admin.bclc.burke.k12.ga.us
Reportcard.bcsd.com
pioneer.bcsd.com
admin.nichols.bcsd.com
chs.comalisd.org
hles.comalisd.org
cses.comalisd.org
fes.comalisd.org
admin.wayside.bcsd.com
desoto.goldenruledallas.org
admin.fuesd.org
www.hilltopprep.org
admin.independent.cv.k12.ca.us
tpes.comalisd.org
www.btaallday.org
leonardeulerd.edu.mx
svms.comalisd.org
bcsd.com
www.wherelifehappens.org
admin.cano.hcisd.org
admin.crma5.org
dover.k12.nh.us
redwood.cv.k12.ca.us
admin.milam.hcisd.org
admin.evanshs.ccboe.net
admin.vannoy.cv.k12.ca.us
admin.compton.bcsd.com
admin.evergreen.bcsd.com
mvms.comalisd.org
116elementary.org
pg.goldenruledallas.org
admin.hills.bcsd.com
admin.alma.cv.k12.ca.us
admin.church.faithmarietta.org
www.teachersupportsite.com
crockett.hcisd.org
admin-cuajimalpa.peterson.edu.mx
voorhies.bcsd.com
bcsd.com
smartfind.bcsd.com
admin.longfellow.bcsd.com
admin.bonham.hcisd.org
burney.hattiesburgpsd.com
ballingerisd.net
sierra.bcsd.com
sequoia.bcsd.com
www.kcgpa.org
chs.comalisd.org
www.leavittms.net
admin.cornerstone.pvpusd.net
admin.redwood.cv.k12.ca.us
longfellow.bcsd.com
www.bce.slvusd.org
admin.athletics.goshenlocalschools.org
rvs.monroe.k12.tn.us
www.notredameparish.org
www.comalisd.org
admin.llc.lex3.org
admin.wayside.bcsd.com
admin.lunadabay.pvpusd.net
sequoia.bcsd.com
charter.slvusd.org
msd120.org
cses.comalisd.org
owensintermediate.bcsd.com
admin.casaloma.bcsd.com
painesville-city.k12.oh.us
admin.alma.cv.k12.ca.us
dvms.comalisd.org
slvusd.org
bcsd.com
stmss.org
admin.sle.slvusd.org
admin.athletics.goshenlocalschools.org
admin.harding.bcsd.com
cdc.comalisd.org

Certificate

The complete raw certificate details for admin.downtown.bcsd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPPDCCDiSgAwIBAgISA3R67KjKJG0ciLMvurtfMhdFMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTAxMjcxMTA1NTdaFw0x
OTA0MjcxMTA1NTdaMCIxIDAeBgNVBAMTF2FkbWluLmRvd250b3duLmJjc2QuY29t
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAaOCC0Iwggs+MA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNV
HQ4EFgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm
0Tm3pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8v
b2NzcC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8v
Y2VydC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCCPYGA1UdEQSCCO0wggjpgg5h
ZG1pbi5iY3NkLmNvbYIXYWRtaW4uY2FzYWxvbWEuYmNzZC5jb22CE2FkbWluLmNh
dG8uYmNzZC5jb22CFWFkbWluLmNoYXZlei5iY3NkLmNvbYIWYWRtaW4uY2hpcG1h
bi5iY3NkLmNvbYIdYWRtaW4uY29sbGVnZWhlaWdodHMuYmNzZC5jb22CF2FkbWlu
LmRvd250b3duLmJjc2QuY29tghphZG1pbi5kdW5uZXN0ZW1hY2FkZW15Lm9yZ4Ic
YWRtaW4uZWFzdHZpZXcuZ2NzY2hvb2xzLm5ldIIWYWRtaW4uZWlzc2xlci5iY3Nk
LmNvbYIWYWRtaW4uZW1lcnNvbi5iY3NkLmNvbYIbYWRtaW4uZXVocy5leGV0ZXIu
azEyLmNhLnVzghZhZG1pbi5leGV0ZXIuazEyLmNhLnVzghdhZG1pbi5mbGV0Y2hl
ci5iY3NkLmNvbYIYYWRtaW4uZnJhbmt3ZXN0LmJjc2QuY29tghZhZG1pbi5mcmVt
b250LmJjc2QuY29tghRhZG1pbi5nYXJ6YS5iY3NkLmNvbYITYWRtaW4uZ2NzY2hv
b2xzLm5ldIIXYWRtaW4uZ2hzLmdjc2Nob29scy5uZXSCF2FkbWluLmdtcy5nY3Nj
aG9vbHMubmV0ghRhZG1pbi5nc2RhY2FkZW15LmNvbYIdYWRtaW4uaGFsaGVuYXJk
Lmdjc2Nob29scy5uZXSCFmFkbWluLmhhcmRpbmcuYmNzZC5jb22CFWFkbWluLmhh
cnJpcy5iY3NkLmNvbYIYYWRtaW4uaGVhdGhlci5zY3Nkazgub3JnghlhZG1pbi5o
ZXJtaXN0b24uazEyLm9yLnVzghxhZG1pbi5oaWdobGFuZC5nY3NjaG9vbHMubmV0
giZhZG1pbi5oaWdoc2Nob29sZm9yYXJ0c2FuZGJ1c2luZXNzLm9yZ4IaYWRtaW4u
a2hzLmV4ZXRlci5rMTIuY2EudXOCGmFkbWluLmxlcy5leGV0ZXIuazEyLmNhLnVz
ghdhZG1pbi5tY2tpbmxleS5iY3NkLmNvbYIVYWRtaW4ubXVuc2V5LmJjc2QuY29t
ghRhZG1pbi5ub2JsZS5iY3NkLmNvbYIZYWRtaW4ubm90cmVkYW1lcGFyaXNoLm9y
Z4IgYWRtaW4ub3dlbnNpbnRlcm1lZGlhdGUuYmNzZC5jb22CG2FkbWluLm93ZW5z
cHJpbWFyeS5iY3NkLmNvbYIUYWRtaW4ucGF1bHkuYmNzZC5jb22CG2FkbWluLnJo
ZXMuZXhldGVyLmsxMi5jYS51c4IYYWRtaW4ucm9vc2V2ZWx0LmJjc2QuY29tghJh
ZG1pbi5zYWx0Zm9yay5vcmeCFWFkbWluLnNpZXJyYS5iY3NkLmNvbYIRYWRtaW4u
c2pib2Nlcy5vcmeCF2FkbWluLnN0ZWluZXJzY2hvb2wub3JnghVhZG1pbi5zdGll
cm4uYmNzZC5jb22CIGFkbWluLnR1c2N1bHVtdmlldy5nY3NjaG9vbHMubmV0ghdh
ZG1pbi52b29yaGllcy5iY3NkLmNvbYIXYWRtaW4ud2lsbGlhbXMuYmNzZC5jb22C
GmFkbWluLndtcy5leGV0ZXIuazEyLmNhLnVzghFjYXMuY2VudGVydXNkLm9yZ4IR
Y2FzYWxvbWEuYmNzZC5jb22CDWNhdG8uYmNzZC5jb22CD2NoYXZlei5iY3NkLmNv
bYIXY29sbGVnZWhlaWdodHMuYmNzZC5jb22CEGNvbXB0b24uYmNzZC5jb22CFGNy
YW1taWRkbGVzY2hvb2wub3JnghRkdW5uZXN0ZW1hY2FkZW15Lm9yZ4IQZWlzc2xl
ci5iY3NkLmNvbYIQZW1lcnNvbi5iY3NkLmNvbYIVZXVocy5leGV0ZXIuazEyLmNh
LnVzghJldmVyZ3JlZW4uYmNzZC5jb22CEGV4ZXRlci5rMTIuY2EudXOCEWZhaXRo
bWFyaWV0dGEub3JnghFmbGV0Y2hlci5iY3NkLmNvbYISZnJhbmt3ZXN0LmJjc2Qu
Y29tgg5nc2RhY2FkZW15LmNvbYIPaGFycmlzLmJjc2QuY29tghFoaWdoLnNhbHRm
b3JrLm9yZ4IgaGlnaHNjaG9vbGZvcmFydHNhbmRidXNpbmVzcy5vcmeCDmhpbGxz
LmJjc2QuY29tghNob3JhY2VtYW5uLmJjc2QuY29tghJqZWZmZXJzb24uYmNzZC5j
b22CF2p1bmlvcmhpZ2guc2FsdGZvcmsub3JnghRraHMuZXhldGVyLmsxMi5jYS51
c4IUbGVzLmV4ZXRlci5rMTIuY2EudXOCE2xvbmdmZWxsb3cuYmNzZC5jb22CEm5v
cnRoLnNhbHRmb3JrLm9yZ4ITbm90cmVkYW1lcGFyaXNoLm9yZ4IVb3dlbnNwcmlt
YXJ5LmJjc2QuY29tghBwaW9uZWVyLmJjc2QuY29tghVyaGVzLmV4ZXRlci5rMTIu
Y2EudXOCEnJvb3NldmVsdC5iY3NkLmNvbYIMc2FsdGZvcmsub3Jngg1zZWFsLmJj
c2QuY29tggtzamJvY2VzLm9yZ4ISc291dGguc2FsdGZvcmsub3JnghFzdGVpbmVy
c2Nob29sLm9yZ4IPc3RpZXJuLmJjc2QuY29tghN3YXNoaW5ndG9uLmJjc2QuY29t
ghB3YXlzaWRlLmJjc2QuY29tghF3aWxsaWFtcy5iY3NkLmNvbYIUd21zLmV4ZXRl
ci5rMTIuY2EudXOCDHd3dy5iY3NkLmNvbYIYd3d3LmR1bm5lc3RlbWFjYWRlbXku
b3JnghR3d3cuZXhldGVyLmsxMi5jYS51c4ISd3d3LmdzZGFjYWRlbXkuY29tgiR3
d3cuaGlnaHNjaG9vbGZvcmFydHNhbmRidXNpbmVzcy5vcmeCF3d3dy5ub3RyZWRh
bWVwYXJpc2gub3JnghB3d3cuc2FsdGZvcmsub3Jngg93d3cuc2pib2Nlcy5vcmeC
FXd3dy5zdGVpbmVyc2Nob29sLm9yZzBMBgNVHSAERTBDMAgGBmeBDAECATA3Bgsr
BgEEAYLfEwEBATAoMCYGCCsGAQUFBwIBFhpodHRwOi8vY3BzLmxldHNlbmNyeXB0
Lm9yZzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB1AGPy283oO8wszwtyhCdXazOk
jWF3j711pjixx2hUS9iNAAABaI8zuMcAAAQDAEYwRAIgBqcoaLEtzobjV6+s6irE
IT4BxOEkQidgmsn1EYs0XSkCIEK2XRmiLbLm2ysDPEOqg3uJs+RZnYj6JZqj55FC
475GAHcAdH7agzGtMxCRIZzOJU9CcMK//V5CIAjGNzV55hB7zFYAAAFojzO6VgAA
BAMASDBGAiEA9Zxd75i8W3HthI/dT2e055ItDqS+lsC6KSeccvl7k8oCIQCW7BzL
0/EE9ldxs4oz47GPKcDPwn/mYq2f1NK+ozCKhTANBgkqhkiG9w0BAQsFAAOCAQEA
bJu6yQ8kKlrAeu700S5OJtHVrHSnG3QdHRXgYB0oUe88rtCcqXrkoAHXQ/ofoMGH
KMIAmZd1XPca1HMovlC4i4nwYvysjH/HXEpI1fQAV5VLlzsHHhOZB9jmlkBESn6u
7hBnuDYVTVddzKIZzHTlp9H6BRsy+gPUQLUmnP2xTDsuZL7vElYxfHNLWJ8ydfM6
x2CylrF3vv2F+GMbPWzJeXPDTD8hw0eYCKzLe/Hi2UFcG+6kLgFzwPps9v1EfDEq
DvWzGC+2WIiQwr0rBoUEpRDDjr4AYEoZtQGVq5aseXB/qzHfsgXkrqdnxc6BYiW3
0ppt/H7Hdi03o/c5JBaA9A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 300973006979114151266815614920604404291397
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-27 11:05:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-27 11:05:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.downtown.bcsd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2285 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chavez.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.chipman.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.downtown.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eastview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.fremont.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.garza.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ghs.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gms.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.halhenard.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harding.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.heather.scsdk8.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hermiston.k12.or.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highland.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mckinley.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.munsey.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noble.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensintermediate.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.pauly.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sierra.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tusculumview.gcschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.voorhies.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cas.centerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'casaloma.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cato.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chavez.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'collegeheights.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'compton.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crammiddleschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eissler.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'emerson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euhs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'evergreen.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithmarietta.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fletcher.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankwest.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harris.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'high.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hills.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'horacemann.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jefferson.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'juniorhigh.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'khs.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'longfellow.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'north.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owensprimary.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pioneer.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rhes.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'roosevelt.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seal.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'steinerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stiern.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'washington.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wayside.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'williams.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wms.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcsd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dunnestemacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.exeter.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gsdacademy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.highschoolforartsandbusiness.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.notredameparish.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saltfork.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sjboces.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.steinerschool.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d000001688f33b8c70000040300463044022006a72868b12dce86e357afacea2ac4213e01c4e1244227609ac9f5118b345d29022042b65d19a22db2e6db2b033c43aa837b89b3e4599d88fa259aa3e79142e3be46007700747eda8331ad331091219cce254f4270c2bffd5e422008c6373579e6107bcc56000001688f33ba560000040300483046022100f59c5def98bc5b71ed848fdd4f67b4e7922d0ea4be96c0ba29279c72f97b93ca02210096ec1ccbd3f104f65771b38a33e3b18f29c0cfc27fe662ad9fd4d2bea3308a85
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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