lbef.loomis-usd.k12.ca.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number eb:33:6e:c3:d5:b3:e7:b9:0e:a8:d4:3a:52:0a:0b:0a was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=lbef.loomis-usd.k12.ca.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): eb:33:6e:c3:d5:b3:e7:b9:0e:a8:d4:3a:52:0a:0b:0a
Serial Number (int): 312635632729926397400761221661913123594
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c0:7d:aa:24:19:0d:c9:cf:4b:ed:25:8f:a7:59:27:f7:7f:3c:31:a0
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 36:15:ae:06:6b:d5:3c:57:27:87:42:23:fc:c2:c9:a7:58:da:a9:08
Fingerprint (sha256): 88:71:6c:0e:0a:aa:71:fb:e3:c3:c6:5d:dc:ca:c1:d5:c8:1d:3b:2f:ec:9a:f8:0c:c1:9f:c9:2a:b5:3e:a0:1d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/tovV6eLKcm0
CRL Distribution Point: http://crls.pki.goog/gts1p5/2vLv5qSFq1o.crl

Check the revocation status for certificate lbef.loomis-usd.k12.ca.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lbef.loomis-usd.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lbef.loomis-usd.k12.ca.us

Other certificates including the domain name loomis-usd.k12.ca.us

(limited to 100 certificates)
admin.argyleisd.com
admin.argyleisd.com
admin.ogsd.net
admin.argyleisd.com
admin.argyleisd.com
www.granths.org
aeries.loomis-usd.k12.ca.us
academy.ndasla.org
admin.alessandrohighschool.org
admin.tla.pgsd.ms
oc.pgsd.ms
webmail.loomis-usd.k12.ca.us
aeries.loomis-usd.k12.ca.us
admin.argyleisd.com
admin.acc.ausdk12.org
webmail.loomis-usd.k12.ca.us
admin.ps28.jcboe.org
pjh.petroliaisd.org
academy.ndasla.org
academy.ndasla.org
aeries.loomis-usd.k12.ca.us
www.loomis-usd.k12.ca.us
mycommodores.org
admin.argyleisd.com
admin.wes.bibbed.org
admin.southeast.varnett.org
webmail.loomis-usd.k12.ca.us
aeries.loomis-usd.k12.ca.us
griggscountycentral.org
admin.acc.ausdk12.org
admin.argyleisd.com
admin.acc.ausdk12.org
admin.argyleisd.com
admin.griggscountycentral.org
mycommodores.org
admin.phs.pgsd.ms
academy.ndasla.org
saspasadena.org
www.windhamraymondschools.org
www.griggscountycentral.org
powers.loomis-usd.k12.ca.us
academy.ndasla.org
admin.argyleisd.com
admin.argyleisd.com
wes.leusd.k12.ca.us
admin.acc.ausdk12.org
admin.acc.ausdk12.org
ophir.loomis-usd.k12.ca.us
webmail.loomis-usd.k12.ca.us
admin.argyleisd.com
academy.ndasla.org
webmail.loomis-usd.k12.ca.us
webmail.loomis-usd.k12.ca.us
admin.acc.ausdk12.org
gateway.rocklinacademy.com
admin.bhhs.bhusd.org
lbef.loomis-usd.k12.ca.us
admin.argyleisd.com
penryn.loomis-usd.k12.ca.us
admin.argyleisd.com
franklin.loomis-usd.k12.ca.us
loomisgrammar.loomis-usd.k12.ca.us
www.theirvingtonschool.org
meyers.rocklinacademy.com
admin.argyleisd.com
admin.argyleisd.com
admin.argyleisd.com
webmail.loomis-usd.k12.ca.us
admin.argyleisd.com
jms.jarrellisd.org
admin.acc.ausdk12.org
admin.argyleisd.com
anderson.ogsd.net
admin.acc.ausdk12.org
admin.aes.pgsd.ms
webmail.loomis-usd.k12.ca.us
www.loomis-usd.k12.ca.us
aeries.loomis-usd.k12.ca.us
admin.ccti.pgsd.ms
admin.bes.pgsd.ms
admin.acc.ausdk12.org
admin.argyleisd.com
aeries.loomis-usd.k12.ca.us
admin.acc.ausdk12.org
gateway.rocklinacademy.com
monte-rosa.mx
placer.loomis-usd.k12.ca.us
webmail.loomis-usd.k12.ca.us
mail.loomis-usd.k12.ca.us
academy.ndasla.org
admin.bhhs.bhusd.org
admin.argyleisd.com
admin.acc.ausdk12.org
adventure.ogsd.net
admin.argyleisd.com
franklin.loomis-usd.k12.ca.us
placer.loomis-usd.k12.ca.us
admin.argyleisd.com
lisbahamas.com
uci.edu.mx

Certificate

The complete raw certificate details for lbef.loomis-usd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdzCCBF+gAwIBAgIRAOszbsPVs+e5DqjUOlIKCwowDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMTI5MjMwMjM2WhcNMjQwMjI3
MjMwMjM1WjAkMSIwIAYDVQQDExlsYmVmLmxvb21pcy11c2QuazEyLmNhLnVzMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7tQ0DazkfyB+kKkGgj1/yXi
jx7BEcP4kr5aZyBF3KH04sI4O7yXtL2eKQWHoaGkgBMejPdTD6GedaocrDpeLj3D
ey4AUmcV9uPyLPACUZqjr7ckHqoF96BEtdm33TTDePWeH6PvqLssjZ3ziSTHKgsA
F4nKCKyNcWnL0Nb0Gd/SyxSjOkzdvHizUc4VbmejWMvOSm8fsVIC9ySGYlPdZpfP
xcoTa4xhftxPCq70j6fa4M1kiqtO6uKifoymhPWJjK0NefEOvk2DYYALPyze15tN
yO5Uc9bAxyGyfWt4mIxYZkqUV//roDtVkCn7uLo6mjAnMYJGAumsZ3WfybILvwID
AQABo4ICgDCCAnwwDgYDVR0PAQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMB
MAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFMB9qiQZDcnPS+0lj6dZJ/d/PDGgMB8G
A1UdIwQYMBaAFNX8ng3fHsrdCJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1
BggrBgEFBQcwAYYpaHR0cDovL29jc3AucGtpLmdvb2cvcy9ndHMxcDUvdG92VjZl
TEtjbTAwMQYIKwYBBQUHMAKGJWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0
czFwNS5kZXIwJAYDVR0RBB0wG4IZbGJlZi5sb29taXMtdXNkLmsxMi5jYS51czAh
BgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAv
oC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0czFwNS8ydkx2NXFTRnExby5jcmww
ggEEBgorBgEEAdZ5AgQCBIH1BIHyAPAAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuync
aEIKn+ZnTFo6dAAAAYwdiNmJAAAEAwBIMEYCIQCJJUR1KsdLd3xWvX8KDcmoSSLG
L+9DtslT26puftVKXQIhAO5JFvUG+n5yB95q66hkgqBhARpA757E1FfeGDZj5CFq
AHUASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGMHYjZfgAABAMA
RjBEAiBIjuWb+RmLzE6hpBS9At4SnucFe2w7C4dkE2yl7s0J2wIgVVdj6c7/q5Xd
fPHwiyftSS/BQyzRlPAkWDHQPg0OvWMwDQYJKoZIhvcNAQELBQADggEBAHN3NPBi
mgn055nZnajpQXqvJSbMPpFdFCNHwB9Ab7POSr8v45r7Upc0EOZA6dX3WCyeZI9A
YEZDmWdG9eUz7Rho3rk3/Zn43Tt4DPNuBWGM+Av8r2NMff7aeImDbu9NJU7rQ7DV
ZanZ++hjYv8GgLufgboGwrTcQJMgOlafgsKi++AcqnFeHNgfQ5lB4VcYl9wiRM0C
rnN7ClGHtIAqNxqvbdltOepoc5A2a/ghP4dtS5004D+GgO+glhywZHdL3du/n1jP
x+eOXtf8CSiIj3TpbC/30g6+bIwUB4F2oP3NSzsKbSVXAErALkK0RLYLTzeKpmZX
ykl5z5T0pPsNP5A=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7tQ0DazkfyB+kKkGgj1
/yXijx7BEcP4kr5aZyBF3KH04sI4O7yXtL2eKQWHoaGkgBMejPdTD6GedaocrDpe
Lj3Dey4AUmcV9uPyLPACUZqjr7ckHqoF96BEtdm33TTDePWeH6PvqLssjZ3ziSTH
KgsAF4nKCKyNcWnL0Nb0Gd/SyxSjOkzdvHizUc4VbmejWMvOSm8fsVIC9ySGYlPd
ZpfPxcoTa4xhftxPCq70j6fa4M1kiqtO6uKifoymhPWJjK0NefEOvk2DYYALPyze
15tNyO5Uc9bAxyGyfWt4mIxYZkqUV//roDtVkCn7uLo6mjAnMYJGAumsZ3WfybIL
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 312635632729926397400761221661913123594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 23:02:36 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-27 23:02:35 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lbef.loomis-usd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22689025391929308183129832513239881364725197088401451632838649212408986008088778425379729416120670067169302001363676325582113397119698230019607021754050375330842810077770040564319034585208741738224409143055137976660162861189065231680404260563240763863575375573265169838888928696278309963182018580807421891058625531700044831385027115591370643850161093220565896122956314584221071142827120701409093524728802104085727882930751295872337173234506291649203742609884110160511046711766821545715252678375116117394928730325112730326779139513315731072825294585442798472376563937426773030767524313345708176383301727779259136740287
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c07daa24190dc9cf4bed258fa75927f77f3c31a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/tovV6eLKcm0'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lbef.loomis-usd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/2vLv5qSFq1o.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018c1d88d9890000040300483046022100892544752ac74b777c56bd7f0a0dc9a84922c62fef43b6c953dbaa6e7ed54a5d022100ee4916f506fa7e7207de6aeba86482a061011a40ef9ec4d457de183663e4216a00750048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018c1d88d97e00000403004630440220488ee59bf9198bcc4ea1a414bd02de129ee7057b6c3b0b8764136ca5eecd09db0220555763e9ceffab95dd7cf1f08b27ed492fc1432cd194f0245831d03e0d0ebd63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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