lusd.k12.ca.us

- Livingston Union School District -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 46:fa:5f:f5:f8:85:a4:8e:9c:d6:ce:2f:ce:fd:a3:5d was issued on by GeoTrust Inc..

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Livingston Union School District

Company registration number: 24 65748 0000000
Organization: Livingston Union School District
Organization unit: IT
State / Province: California
Locality: Livingston
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 46:fa:5f:f5:f8:85:a4:8e:9c:d6:ce:2f:ce:fd:a3:5d
Serial Number (int): 94345980236303827582396722541286499165
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): f1:91:5e:10:24:29:75:a2:1b:40:cb:01:80:b9:dc:98:6d:55:9a:df
Fingerprint (sha256): 9a:3e:c6:f0:d5:14:ed:be:03:74:f4:f8:39:69:b5:8f:60:a7:67:83:e3:41:30:75:d6:a5:64:e6:1a:7c:26:5e

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate lusd.k12.ca.us

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lusd.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lusdstudents.org
www.livingstonusd.org
aeriesnet.lusd.k12.ca.us
parentportalnet.lusd.k12.ca.us
teacherportalnet.lusd.k12.ca.us
library.lusd.k12.ca.us
lusd.k12.ca.us
www.lusd.k12.ca.us

Other certificates including the domain name lusd.k12.ca.us

(limited to 100 certificates)
sequoiasamurai.com
bps.bayfield.k12.co.us
admin.belmonthighschool.org
lusd.k12.ca.us
lusd-wlc-1.lusd.k12.ca.us
admin.adulteducation.pleasantonusd.net
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
admin.belmonthighschool.org
www.freeman.flintschools.org
admin.adulteducation.pleasantonusd.net
admin.belmonthighschool.org
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
exteraschools.org
www.lusd.k12.ca.us
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
www.kvilleps.org
lusd.k12.ca.us
admin.belmonthighschool.org
www.exteraschools.org
lusd.k12.ca.us
ninth.frenship.us
admin.corey.bpsd.k12.ca.us
admin.jewishacademyorlando.org
mail.lusd.k12.ca.us
admin.dtm.flintschools.org
bhs.bayfield.k12.co.us
lusd.k12.ca.us
lusd.k12.ca.us
admin.brownell.flintschools.org
bis.bayfield.k12.co.us
admin.belmonthighschool.org
lusd.k12.ca.us
admin.belmonthighschool.org
lusd.k12.ca.us
usf.com.mx
trinitystelementary.com
lusd.k12.ca.us
admin.adulteducation.pleasantonusd.net
lusd.k12.ca.us
www.forthamiltononline.org
lusd.k12.ca.us
lusd-wlc-1.lusd.k12.ca.us
admin.liholiho.org
lusd.k12.ca.us
lusd.k12.ca.us

Certificate

The complete raw certificate details for lusd.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqH/FoD702OrIexNBJTV
2tCI+atWyv1+ej7dd1/JMqq22XGVxkG6IOo50JLgLKY3fSh6vWlHjZFYwVFY4fMC
vI0qjsyFJKO2Mv8CxJ7hNAaO0IogLqhsi8/jj+JgwzeL48OuD8S0BQH10UN9qF0K
3DLh8dazOdp8+z0xUhygDqntgmHORKZIYbT5c1OB/5jaqtedg/imcuaGl4dnPv1X
D7/rtUfJsyjrWgDqkLATCw9hD1wA/ucIZ6gh8ndDzyQAabRKKKk7eyEFkjOUn3nD
rzgytvm2vmYHvY2hyo3PWDxZCMqda68g4qxouoVMmNlSksAyX4XxVku4Bp8E+NRR
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 94345980236303827582396722541286499165
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-11-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '24 65748 0000000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Livingston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Livingston Union School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'lusd.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24065161363996477806775384197406697144250131305874474459563309052209750349506876090115354388641192256358562936472448257532966245221534987149405301913813984122179754982704667953167307943736498841425215243664033745147809982311108900045701157371001189695194388118963630438680737924391142071378901369897912092173034600534868163252673916615759378797144039238676303270833793676356847804271594550173565061593745245291975407669248481161963693363586242956131002594904838906704734679697182052093783748079130264287715584888452626685057002924669080435357574350833394421864152682331765745229574607780466610686625652670402005324199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusdstudents.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.livingstonusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aeriesnet.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parentportalnet.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacherportalnet.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'library.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lusd.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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