fra.edu
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 95:b0:40:2c:f9:94:44:0d:11:70:aa:17:16:f4:e7:63 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=fra.edu
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 95:b0:40:2c:f9:94:44:0d:11:70:aa:17:16:f4:e7:63Serial Number (int): 198970117256549388888629692712338384739
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 40:a2:cb:b7:d5:a2:83:55:f2:87:07:85:95:f7:28:2f:33:31:f1:17
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 29:a9:04:85:38:ae:b2:fd:c3:f5:cc:01:b2:06:d8:12:5e:bc:f8:b9
Fingerprint (sha256): 87:66:c5:cf:ec:1a:8b:1f:27:19:b3:1f:bc:46:af:dd:a1:c5:23:fe:bf:59:73:f3:61:2a:14:b2:4b:9e:63:63
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/P-4JuJNPlC8CRL Distribution Point: http://crls.pki.goog/gts1p5/jbdy7zzOxok.crl
Check the revocation status for certificate fra.edu
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for fra.edu
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
fra.edu
Other certificates including the domain name fra.edu
(limited to 100 certificates)
jww.jubileeacademies.org
www.fra.edu
admin.bennie.allenparkschools.com
ec.sd44.org
www.tricityselpa.org
fra.edu
admin.preescolar.semperaltius.edu.mx
www.tricityselpa.org
sports-jwb.jubileeacademies.org
admin.10x80.com
admin.3rcs.org
fra.edu
admin.hscnewhaven.org
admin.tricityselpa.org
fra.edu
admin.10x80.com
poecenter246.com
admin.10x80.com
admin.10x80.com
meadows.mbusd.org
admin-sports-jwb.jubileeacademies.org
fra.edu
admin.hscnewhaven.org
3rcs.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
www.hscnewhaven.org
www.boyslatinms.org
bradleyschools.org
admin-sports-jwb.jubileeacademies.org
js.jubileeacademies.org
carthage.smithcoedu.com
admin.ps20.jcboe.org
www.poecenter246.com
admin.fra.edu
jla.jubileeacademies.org
admin-sports-jwb.jubileeacademies.org
admin.allenparkschools.com
3rcs.org
fra.edu
kailuaintermediate.org
fra.edu
admin.10x80.com
fra.edu
admin-sports-jwb.jubileeacademies.org
leelcms.leeschooldistrictsc.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
admin.poecenter246.com
www.salisburycatholicschool.org
leelcms.leeschooldistrictsc.org
admin.kailuaintermediate.org
jd.jubileeacademies.org
admin.10x80.com
www.cmshnl.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
admin.bennie.allenparkschools.com
pl.sd44.org
admin.nolafsme.org
es.woccisd.net
3rcs.org
fra.edu
prep.teachpublicschools.org
www.geronimo.k12.ok.us
admin.boyslatinms.org
admin.jww.jubileeacademies.org
fra.edu
mms.mtps.org
www.fra.edu
admin.bennie.allenparkschools.com
ec.sd44.org
www.tricityselpa.org
fra.edu
admin.preescolar.semperaltius.edu.mx
www.tricityselpa.org
sports-jwb.jubileeacademies.org
admin.10x80.com
admin.3rcs.org
fra.edu
admin.hscnewhaven.org
admin.tricityselpa.org
fra.edu
admin.10x80.com
poecenter246.com
admin.10x80.com
admin.10x80.com
meadows.mbusd.org
admin-sports-jwb.jubileeacademies.org
fra.edu
admin.hscnewhaven.org
3rcs.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
www.hscnewhaven.org
www.boyslatinms.org
bradleyschools.org
admin-sports-jwb.jubileeacademies.org
js.jubileeacademies.org
carthage.smithcoedu.com
admin.ps20.jcboe.org
www.poecenter246.com
admin.fra.edu
jla.jubileeacademies.org
admin-sports-jwb.jubileeacademies.org
admin.allenparkschools.com
3rcs.org
fra.edu
kailuaintermediate.org
fra.edu
admin.10x80.com
fra.edu
admin-sports-jwb.jubileeacademies.org
leelcms.leeschooldistrictsc.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
admin.poecenter246.com
www.salisburycatholicschool.org
leelcms.leeschooldistrictsc.org
admin.kailuaintermediate.org
jd.jubileeacademies.org
admin.10x80.com
www.cmshnl.org
3rcs.org
admin-sports-jwb.jubileeacademies.org
admin.bennie.allenparkschools.com
pl.sd44.org
admin.nolafsme.org
es.woccisd.net
3rcs.org
fra.edu
prep.teachpublicschools.org
www.geronimo.k12.ok.us
admin.boyslatinms.org
admin.jww.jubileeacademies.org
fra.edu
mms.mtps.org
Certificate
The complete raw certificate details for fra.edu in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVTCCBD2gAwIBAgIRAJWwQCz5lEQNEXCqFxb052MwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMDA4MjMxMjA3WhcNMjQwMTA2 MjMxMjA2WjASMRAwDgYDVQQDEwdmcmEuZWR1MIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEA1540LUFD4pd4LIHc+deYKyDWtkO270DsbLRWM1FMT+badGe/ /HJawDVvQlAz36y1hn8LXrbGLOMTvK3pD39Jl4gQAUpatrl/ClTepN8vtFb/ki6e vhzkSHO83gGeqYv5Uy/9YTDVT9UuGSGvaxxtOtncgeDiAQb6843BS3GH/6mROFhp pKoZMtUOy6k0oQLWaGv9Jjc6SHNAjR8MBDNDd+Lo8PKQnkLStO8/66H3u261lJDh lPufffksGJ69fsS9IOWwz2o0hxsT+oPkUm2BnRCeC69EBhGdCTHnLc9tKvjACrEG HMa0MTpW7bAzHs7bLKX44bo3jeRI709hK2hPQwIDAQABo4ICcDCCAmwwDgYDVR0P AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFECiy7fVooNV8ocHhZX3KC8zMfEXMB8GA1UdIwQYMBaAFNX8ng3fHsrd CJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0cDov L29jc3AucGtpLmdvb2cvcy9ndHMxcDUvUC00SnVKTlBsQzgwMQYIKwYBBQUHMAKG JWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwEgYDVR0RBAsw CYIHZnJhLmVkdTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwG A1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFwNS9qYmR5 N3p6T3hvay5jcmwwggEGBgorBgEEAdZ5AgQCBIH3BIH0APIAdwC3Pvsk35xNunXy OcW6WPRsXfxCz3qfNcSeHQmBJe20mQAAAYsRxt5kAAAEAwBIMEYCIQD4Sz5g3GfA hHbikrArJKQ1q5xG9+tSEKX0VChxwFNmywIhALMLMj9RU2LEEYLuEutDNxG4h/c6 eSskUJBLBL02aXMOAHcA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA AAGLEcbeVAAABAMASDBGAiEApLhcZFJdo7lTS3fFSbmNkPlkihbBnBkrNsmugZCK cIgCIQCiIAyaSH4qdjJKqMyE/yEIzzVZiiyZ+6+uSkn6DKHIUjANBgkqhkiG9w0B AQsFAAOCAQEAhze6fIenM0dOrl+TgGAp/zmE5zGLGpN6QgAzYpyAdMkMndVJfbeB G/h+W3neQlnxcJnWrG+67XY7Fc2bUvOa7uYWn0uey/SYBTtT7UXS24hY0j0dntA7 Tbm3cNgJRnhlXZ37gANwj1wiuEnM9qKR7Ibco0SMDOX3Fmr0LhmaNA3hDPaZfoDQ gKPV3CzjCtI2K/MW4uneMRFERiJrSH9t6Swk8duQke8S9XKwkCt25r63BfAz7ySz YxGn96C4jgWoCycKEm3GTVKyykkBLSEEq0eGbbxykRA2jVJbPpkAjysX+JUmM5VA dAgcq3VrZAe5e+wqevScrgO5Kbmo6iqojA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1540LUFD4pd4LIHc+deY KyDWtkO270DsbLRWM1FMT+badGe//HJawDVvQlAz36y1hn8LXrbGLOMTvK3pD39J l4gQAUpatrl/ClTepN8vtFb/ki6evhzkSHO83gGeqYv5Uy/9YTDVT9UuGSGvaxxt OtncgeDiAQb6843BS3GH/6mROFhppKoZMtUOy6k0oQLWaGv9Jjc6SHNAjR8MBDND d+Lo8PKQnkLStO8/66H3u261lJDhlPufffksGJ69fsS9IOWwz2o0hxsT+oPkUm2B nRCeC69EBhGdCTHnLc9tKvjACrEGHMa0MTpW7bAzHs7bLKX44bo3jeRI709hK2hP QwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 198970117256549388888629692712338384739 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-08 23:12:07 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-06 23:12:06 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fra.edu' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27219248776735334675736643340623373764009085580794346723475136868915311168300774711851099268090475692179815628815164519606524537275358918833807093302761654315652735866760964866333196723480585487677987081074196435831587497662441557262924041222605975684995633835853866422701663795980301428202518589029049591194654133848420185586040466365279717616599452412432880739125979880910891920796540893333154498451839069838636169939201895951532777624098419434237310170494634347679228678230080641841724533909769597528956640082773021155172179044305437872299521511103201149999688553893869114677843654388324597111087887578032809463619 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 40a2cbb7d5a28355f287078595f7282f3331f117 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/P-4JuJNPlC8' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (11 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fra.edu' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/jbdy7zzOxok.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) 00f2007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb4990000018b11c6de640000040300483046022100f84b3e60dc67c08476e292b02b24a435ab9c46f7eb5210a5f4542871c05366cb022100b30b323f515362c41182ee12eb433711b887f73a792b2450904b04bd3669730e007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018b11c6de540000040300483046022100a4b85c64525da3b9534b77c549b98d90f9648a16c19c192b36c9ae81908a7088022100a2200c9a487e2a76324aa8cc84ff2108cf35598a2c99fbafae4a49fa0ca1c852 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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