www.materdeiprep.org

Issued by RapidSSL CA

About this certificate

This digital certificate with serial number 0d:de:41 was issued on by GeoTrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

SERIALNUMBER=g0-2sZSv6i0E7teRY28wNwjp8jNYJa6Y,CN=www.materdeiprep.org,OU=GT00065298+OU=See www.rapidssl.com/resources/cps (c)13+OU=Domain Control Validated - RapidSSL(R)

GeoTrust, Inc.

Organization: GeoTrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:de:41
Serial Number (int): 908865
Serial Number lenght: 20 bits, 3 octets

SubjectKeyId: 4f:a6:8f:3c:f8:cf:6e:6f:09:d4:23:7f:9e:54:23:55:a1:0d:7e:aa
AuthorityKeyId: 6b:69:3d:6a:18:42:4a:dd:8f:02:65:39:fd:35:24:86:78:91:16:30

Fingerprint (sha1): 2b:84:35:de:f5:ed:c4:fb:bd:d6:60:d5:c7:a5:82:13:e9:5c:b1:c7
Fingerprint (sha256): 97:c3:19:83:8a:33:b5:79:be:c5:38:cf:94:d3:57:42:ef:dd:7d:93:75:55:a9:5d:38:ab:0e:e3:1a:b4:3b:c5

Issuing Certificate URL: http://rapidssl-aia.geotrust.com/rapidssl.crt

Revocation information

OCSP Server: http://rapidssl-ocsp.geotrust.com
CRL Distribution Point: http://rapidssl-crl.geotrust.com/crls/rapidssl.crl

Check the revocation status for certificate www.materdeiprep.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.materdeiprep.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.materdeiprep.org
materdeiprep.org

Other certificates including the domain name materdeiprep.org

(limited to 100 certificates)
materdeiprep.org
materdeiprep.org
admin.spachs.ca
materdeiprep.org
scsb.org
admin.ecec.whittiercity.net
materdeiprep.org
mms.scsb.org
materdeiprep.org
materdeiprep.org
admin.ecec.whittiercity.net
admin.ecec.whittiercity.net
materdeiprep.org
materdeiprep.org
ringling.k12.ok.us
admin.ecec.whittiercity.net
materdeiprep.org
ecec.whittiercity.net
materdeiprep.org
admin.ecec.whittiercity.net
materdeiprep.org
materdeiprep.org
www.materdeiprep.org
www.materdeiprep.org
admin.ecec.whittiercity.net
materdeiprep.org
www.materdeiprep.org
www.materdeiprep.org
www.materdeiprep.org
www.materdeiprep.org
materdeiprep.org
materdeiprep.org
materdeiprep.org
admin.allenbrookelementaryschool.wearecms.com
materdeiprep.org
admin.crownpointelementaryschool.wearecms.com

Certificate

The complete raw certificate details for www.materdeiprep.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIDDd5BMA0GCSqGSIb3DQEBBQUAMDwxCzAJBgNVBAYTAlVT
MRcwFQYDVQQKEw5HZW9UcnVzdCwgSW5jLjEUMBIGA1UEAxMLUmFwaWRTU0wgQ0Ew
HhcNMTMwOTA1MDgxMjQwWhcNMTQxMTA3MDA1NzAyWjCBwzEpMCcGA1UEBRMgZzAt
MnNaU3Y2aTBFN3RlUlkyOHdOd2pwOGpOWUphNlkxEzARBgNVBAsTCkdUMDAwNjUy
OTgxMTAvBgNVBAsTKFNlZSB3d3cucmFwaWRzc2wuY29tL3Jlc291cmNlcy9jcHMg
KGMpMTMxLzAtBgNVBAsTJkRvbWFpbiBDb250cm9sIFZhbGlkYXRlZCAtIFJhcGlk
U1NMKFIpMR0wGwYDVQQDExR3d3cubWF0ZXJkZWlwcmVwLm9yZzCCAiIwDQYJKoZI
hvcNAQEBBQADggIPADCCAgoCggIBANInuOVZNEugX074ItrLHyC1sIqM1SPHXQDR
MUDxPUa9dLean3D5gfYLspeBrJe2fE2q+eWkSShV0oe1D3IPm2FPzfvJ5ZYh/7pe
T6WHG2sXEmpbw6LGKiwKHIR2QwN8EVPR00TFcxMbuJKpp0CaTzaYix3n2pdSUYdD
7yv/UO+PKCwI+0hoYEYlx+vjcJpFLnY3ScnlRvHDv3Guk2B/8E96eYqXoYAfmLXt
3aGbjcIGNSzSjTrKSQ39l5pS8iLPvlCUiRJSpDDBei4gwIwFYxu7tVHkj3LFRoKB
yrIAS9BQ9Jxrws3lJBv/9dCvzVOErRX7sEhNhy2i6OiAD0l7ITcUgh7pOgF2Bq7z
LPa1SihYHopTlU1LDcSgB2HxGkLhDPdkfltA0mWIb0+JsrEi5DhKktuHoKZENdxk
E+l8W3alidttoNOIaAjTwPTSCF1YSE9GWVbm8W5x4XsImV2SMdltR4FbqQ/NTEzd
/cKkIuwtHIWXQt3sMgu4e7Izaay73oSjW+3fnDW0+lMxXmEouT3hZs7Bj+iv/Y9R
SqHz5j3PR99WLaVSVaxencJybFyuIOBRYEOkjG3+6Hn8j5OYLHtB0KmqnU8IoUYm
zWISxGjP9tu6zw1ZaGO451y8gHMJWXH5X3nnNR7e1rF0eLXW8CgG6zw+O3Fu3pyO
jDUlYEvZAgMBAAGjggHBMIIBvTAfBgNVHSMEGDAWgBRraT1qGEJK3Y8CZTn9NSSG
eJEWMDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMDEGA1UdEQQqMCiCFHd3dy5tYXRlcmRlaXByZXAub3JnghBtYXRlcmRlaXBy
ZXAub3JnMEMGA1UdHwQ8MDowOKA2oDSGMmh0dHA6Ly9yYXBpZHNzbC1jcmwuZ2Vv
dHJ1c3QuY29tL2NybHMvcmFwaWRzc2wuY3JsMB0GA1UdDgQWBBRPpo88+M9ubwnU
I3+eVCNVoQ1+qjAMBgNVHRMBAf8EAjAAMHgGCCsGAQUFBwEBBGwwajAtBggrBgEF
BQcwAYYhaHR0cDovL3JhcGlkc3NsLW9jc3AuZ2VvdHJ1c3QuY29tMDkGCCsGAQUF
BzAChi1odHRwOi8vcmFwaWRzc2wtYWlhLmdlb3RydXN0LmNvbS9yYXBpZHNzbC5j
cnQwTAYDVR0gBEUwQzBBBgpghkgBhvhFAQc2MDMwMQYIKwYBBQUHAgEWJWh0dHA6
Ly93d3cuZ2VvdHJ1c3QuY29tL3Jlc291cmNlcy9jcHMwDQYJKoZIhvcNAQEFBQAD
ggEBAK89g6XcvPN7C9UFueej7mMwrn77iHShoBHEY8N3+tRMtX97f3Knh4UjFkkB
PEYXUysWVlf+hmuZLCa5SPZZvts/VYchKxMceh8RA+sWYwArEQhQhsOeaafaam5r
t3+VgX3UgLlJpgk48ezIyL8ZQwBDjfvr/5G2kNg9i2HMYPB+fddZMl+/ve0tOvQj
aJJyKB8JcLLJPV6Er7QT7RaM799AlEkRBqQtdo5iYYx2JczoRIs/m2PXYsx4XCR0
lBNKsGqrRdeniltgQwlkXt15SQdvDEMkuASAfrhTSxzBp3fEaQ/YHEtJPpCNNeCZ
weqnCSb5gjjgQcZ3unEZzMQyBEQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 908865
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-09-05 08:12:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-07 00:57:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'g0-2sZSv6i0E7teRY28wNwjp8jNYJa6Y'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GT00065298'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.rapidssl.com/resources/cps (c)13'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated - RapidSSL(R)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.materdeiprep.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857358272408703913918050428442405841117045177396612331019241561742567332006065438511629867831610851853156092124879464631670459975234779213179296941917671080744935321505757894709998266434542567347078658975052817712483322568443958228111096004475868694110825111383796279847317249640861366851426426141251825214524587887962744614183737974760359036112429308858500037095293590459599815939241469145243425037170624416597984994998128347973641014450590713733897249734477940704467436487221783926391587425601538930161988497531703091670820593647127922951362071156601378468260562897436264491312895600544349720166533798559756598671857003200094551475994318248242286331958840927991077639180173175763578122968823311989761594644010943746499448473239406410093090554048188669547218515010115546586686378955417856510701042261236644817345285006001396234036502351192317603814002433935447168293665814254260618469633390148466041628601662283975864426247745024778737799661294876194480007691851409622068630856701937990230390059995732205917400775290407977476574790043930710723732635035566912691007969120173231809529881846769610942697357468385107387486957642639260570852212984747322615880635729148521942240562098553232456783346349862101420237843981567049339404045273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6b693d6a18424add8f026539fd35248678911630
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.materdeiprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'materdeiprep.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-crl.geotrust.com/crls/rapidssl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4fa68f3cf8cf6e6f09d4237f9e542355a10d7eaa
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://rapidssl-aia.geotrust.com/rapidssl.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113733.1.7.54
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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