kennedy.northbergen.k12.nj.us

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number bf:4b:d1:00:d2:32:41:6e:0d:83:66:5b:e0:68:bf:a2 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=kennedy.northbergen.k12.nj.us

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): bf:4b:d1:00:d2:32:41:6e:0d:83:66:5b:e0:68:bf:a2
Serial Number (int): 254276208547968814333285705728920174498
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: e1:af:02:6a:40:6f:d3:26:0e:5e:10:cc:a9:dd:a4:5e:c2:45:70:b8
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 8e:d2:b4:0f:b9:bf:b9:00:e9:73:47:f5:ce:34:6b:4e:88:cd:c4:81
Fingerprint (sha256): 97:9b:a6:ba:59:a1:40:23:6e:0a:c5:d5:34:bc:de:ac:82:b0:54:ff:50:c9:a6:5f:1d:d9:ec:2d:79:94:ad:a0

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/BqgWnvRm2rg
CRL Distribution Point: http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl

Check the revocation status for certificate kennedy.northbergen.k12.nj.us

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kennedy.northbergen.k12.nj.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kennedy.northbergen.k12.nj.us

Other certificates including the domain name northbergen.k12.nj.us

(limited to 100 certificates)
mckinley.northbergen.k12.nj.us
northbergen.k12.nj.us
cte.kernhigh.org
admin.arvin.kernhigh.org
admin.fulton.northbergen.k12.nj.us
www.ps086.com
mail3.northbergen.k12.nj.us
admin.bas.kernhigh.org
mail3.northbergen.k12.nj.us
horacemann.northbergen.k12.nj.us
admin.spxtulsa.org
northbergen.k12.nj.us
cra.freeholdtwp.k12.nj.us
northbergen.k12.nj.us
admin.aes.acsc.net
northbergen.k12.nj.us
admin.church.spxtulsa.org
2.southampton.k12.nj.us
admin.es.lorenaisd.net
northbergen.k12.nj.us
www.lincolnparkhs.org
fulton.northbergen.k12.nj.us
lincoln.northbergen.k12.nj.us
admin.cfh.edu.mx
sfrschool.org
admin.franklin.northbergen.k12.nj.us
admin.acsc.net
mail3.northbergen.k12.nj.us
admin.chuckey.greenek12.org
2.southampton.k12.nj.us
admin.arvin.kernhigh.org
admin.ps17queens.com
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
harpethhighccs.net
nbhs.northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.cfh.edu.mx
northbergen.k12.nj.us
www.northbergen.k12.nj.us
ps086.com
admin.arvin.kernhigh.org
admin.cfh.edu.mx
www.mstmaatroosevelt.org
northbergen.k12.nj.us
www.ps17queens.com
admin.stockdale.kernhigh.org
lincoln.northbergen.k12.nj.us
2.southampton.k12.nj.us
westcheathamccs.net
admin.cfh.edu.mx
admin.arvin.kernhigh.org
northbergen.k12.nj.us
www.northbergen.k12.nj.us
admin.northbergen.k12.nj.us
admin.horacemann.northbergen.k12.nj.us
admin.avrlacademy.org
2.southampton.k12.nj.us
sunnybraemiddleschool.org
1.southampton.k12.nj.us
northbergen.k12.nj.us
franklin.northbergen.k12.nj.us
1.southampton.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
kennedy.northbergen.k12.nj.us
nbhs.northbergen.k12.nj.us
admin.arvin.kernhigh.org

Certificate

The complete raw certificate details for kennedy.northbergen.k12.nj.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfzCCBGegAwIBAgIRAL9L0QDSMkFuDYNmW+Bov6IwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMxMTIzMDQxMzUxWhcNMjQwMjIx
MDQxMzUwWjAoMSYwJAYDVQQDEx1rZW5uZWR5Lm5vcnRoYmVyZ2VuLmsxMi5uai51
czCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMy8RkAn3VrDEx+GDy0O
ne4m+NawHyB4P93/TvPz2zLHNwexOWVZGfqVV2MmDgjE3HROigMIfTx3IB6wxMKH
dgbKpn3KC4AjL76VBWOjLOcPGCktHZ75S2Dk5f9qxffv9Z7TPXoc19h09g4o6ZLN
cM5+E49WswTC/VRPVv0n7kxUM7YBJeeW5JGfXyyfVZG62HwjLn5eiXICjhqxuBM9
gjAkQf7K/Jp2NQLCgIPcTWxYL+bJhs4d5UDGHSMFigbjB7tUUpNWBKdeyaDnXnBJ
9EXpYMSdK7Cnb1YqBk62ZphZo9NpfdsNeZ9SHNwItBLaNMnsu4C6IpsOmKmP9khL
kYkCAwEAAaOCAoQwggKAMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEF
BQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBThrwJqQG/TJg5eEMyp3aRewkVw
uDAfBgNVHSMEGDAWgBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRs
MGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0Jx
Z1dudlJtMnJnMDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0
cy9ndHMxcDUuZGVyMCgGA1UdEQQhMB+CHWtlbm5lZHkubm9ydGhiZXJnZW4uazEy
Lm5qLnVzMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0f
BDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1L0xGX0poQUJU
YjFZLmNybDCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABi/qZTXwAAAQDAEcwRQIgF0i+DmHKccD9/Opb
GTE6900KW9+Y913Ld3/Fddyb2PECIQCLdUMuHhEdVot7qfqc4E7p8TzzcJw7Ky0t
KH4PHHi6wwB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi/qZ
SZEAAAQDAEcwRQIgFn4Kfjc9hf+XQxJ3nwS42KQJOUI8SehuCpujCFikK5MCIQDz
Gbpb5g9+uRLfYU5pWLZCy0rlg3XUMi2pQf0/XhTuxTANBgkqhkiG9w0BAQsFAAOC
AQEAZJ09xCyIguDh56mnjL2MLEYRhOiib5qjvoznIppYBITuVvgiA2Us/CjHxrQK
ltzmH+UfIa2IlfJcg/mECIeq1WdSDVBqgKLbjFFnVVg5OotI/9mNoNJzeU36AKlC
N9270UzUxoz9NN7djOmhRgMffQDR6cQ+c7RyFIGEQZ03SRUI0pa4iA73Q03W3pKm
PGPxywbQdfHHJVWchlXTTPbrBmMMaYJCVREDmI1wvst/TKg4NRzKGd8IwP87USc4
UTDDEuakwkBttVZqiZHagXJCPAlS7Ot3XP4oZ4YO3iBFnaAA3ZTVpcDXhDOLdZX+
E4/ECBB7WjsLoKoxIai6UT07IA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzLxGQCfdWsMTH4YPLQ6d
7ib41rAfIHg/3f9O8/PbMsc3B7E5ZVkZ+pVXYyYOCMTcdE6KAwh9PHcgHrDEwod2
BsqmfcoLgCMvvpUFY6Ms5w8YKS0dnvlLYOTl/2rF9+/1ntM9ehzX2HT2Dijpks1w
zn4Tj1azBML9VE9W/SfuTFQztgEl55bkkZ9fLJ9VkbrYfCMufl6JcgKOGrG4Ez2C
MCRB/sr8mnY1AsKAg9xNbFgv5smGzh3lQMYdIwWKBuMHu1RSk1YEp17JoOdecEn0
RelgxJ0rsKdvVioGTrZmmFmj02l92w15n1Ic3Ai0Eto0yey7gLoimw6YqY/2SEuR
iQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 254276208547968814333285705728920174498
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-23 04:13:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-21 04:13:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kennedy.northbergen.k12.nj.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25845455788074729019326104954722987591057929767593704062679929878744060070957236381098245927142382598651912790542542136236697595704079607832844985487428046949984491752637279231513443692095120931091242527835537622590080586393606264652817815195013300211435240489558634731052556745293828661730098656785622459017994790767700013652203212699902089887807631672196660324388265201100913357401116048890432658073501710438905165034223619842509781598009590761090263226803782734276016412732834669418362906479621578502051056410466135628514489108887697116883786320211447527938503463847821369680391713195011354928365970806757674160521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e1af026a406fd3260e5e10cca9dda45ec24570b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/BqgWnvRm2rg'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (33 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kennedy.northbergen.k12.nj.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018bfa994d7c000004030047304502201748be0e61ca71c0fdfcea5b19313af74d0a5bdf98f75dcb777fc575dc9bd8f10221008b75432e1e111d568b7ba9fa9ce04ee9f13cf3709c3b2b2d2d287e0f1c78bac300760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018bfa99499100000403004730450220167e0a7e373d85ff974312779f04b8d8a40939423c49e86e0a9ba30858a42b93022100f319ba5be60f7eb912df614e6958b642cb4ae58375d4322da941fd3f5e14eec5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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