ssl803645.cloudflaressl.com

Issued by COMODO RSA Domain Validation Secure Server CA 2

About this certificate

This digital certificate with serial number 4a:5c:0f:6d:8e:8b:7c:0c:d1:21:be:2c:7d:1b:1e:49 was issued on by COMODO CA Limited.

With 97 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl803645.cloudflaressl.com

COMODO CA Limited

Organization: COMODO CA Limited
State / Province: Greater Manchester
Locality: Salford
Country: GB

This certificate has expire since

Certificate Details

Serial Number (hex): 4a:5c:0f:6d:8e:8b:7c:0c:d1:21:be:2c:7d:1b:1e:49
Serial Number (int): 98840875915198245460007457889262968393
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 1e:5e:00:6d:52:87:2e:36:ac:86:07:61:45:38:d4:0b:5a:66:54:42
AuthorityKeyId: d4:b0:f4:fd:4f:9c:42:a4:6c:dc:3d:2e:ee:5b:41:18:c9:ad:03:f6

Fingerprint (sha1): ae:3a:4c:35:b2:01:8e:3b:61:1a:90:62:ab:db:2b:9f:5e:c2:57:77
Fingerprint (sha256): a3:b9:b7:64:29:e7:78:a9:ea:03:19:df:49:0e:e5:cf:40:2c:4d:7f:e4:b7:c8:68:57:dd:92:5f:6f:0a:e2:1a

Issuing Certificate URL: http://crt.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crt

Revocation information

OCSP Server: http://ocsp.comodoca4.com
CRL Distribution Point: http://crl.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crl

Check the revocation status for certificate ssl803645.cloudflaressl.com

97

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl803645.cloudflaressl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl803645.cloudflaressl.com
*.avonworth.k12.pa.us
*.basd.k12.pa.us
*.bathwildcats.org
*.beachwoodschools.org
*.brookwoodcolumbus.org
*.clhsa.org
*.cvscs.org
*.dicksoncountyschools.net
*.esvmaloney.com
*.faithgreenfield.org
*.fonddulac.k12.wi.us
*.frankfort.kyschools.us
*.givetosccs.com
*.grant.kyschools.us
*.greeneesc.org
*.hardin.k12.mt.us
*.helpmegrow.org
*.itswhereyoubelong.com
*.lawrencedd.org
*.lcjvs.com
*.loganelmschools.com
*.loraincountyjvs.com
*.lutheranwest.com
*.margarettaschooldistrict.com
*.mcdowellschool.net
*.medina-esc.org
*.ndes.org
*.newarkschools.us
*.newday.academy
*.nmsna.com
*.nrcs.net
*.oneontacsd.org
*.pottstownschools.com
*.rcsjalliance.com
*.schenevuscsd.org
*.schoolnutritionsc.com
*.scsohio.org
*.selmacityschools.org
*.southcentralric.org
*.srsd.k12.pa.us
*.sstr2.org
*.starkcountycatholicschools.org
*.stjamesschoolwaynesburg.com
*.stjoanofarc.org
*.thegrahamfamilyofschools.org
*.trimble.k12.oh.us
*.uek12.org
*.worcestercs.org
avonworth.k12.pa.us
basd.k12.pa.us
bathwildcats.org
beachwoodschools.org
brookwoodcolumbus.org
clhsa.org
cvscs.org
dicksoncountyschools.net
esvmaloney.com
faithgreenfield.org
fonddulac.k12.wi.us
frankfort.kyschools.us
givetosccs.com
grant.kyschools.us
greeneesc.org
hardin.k12.mt.us
helpmegrow.org
itswhereyoubelong.com
lawrencedd.org
lcjvs.com
loganelmschools.com
loraincountyjvs.com
lutheranwest.com
margarettaschooldistrict.com
mcdowellschool.net
medina-esc.org
ndes.org
newarkschools.us
newday.academy
nmsna.com
nrcs.net
oneontacsd.org
pottstownschools.com
rcsjalliance.com
schenevuscsd.org
schoolnutritionsc.com
scsohio.org
selmacityschools.org
southcentralric.org
srsd.k12.pa.us
sstr2.org
starkcountycatholicschools.org
stjamesschoolwaynesburg.com
stjoanofarc.org
thegrahamfamilyofschools.org
trimble.k12.oh.us
uek12.org
worcestercs.org

Other certificates including the domain name cloudflaressl.com

(limited to 100 certificates)
ssl381797.cloudflaressl.com
sni32503.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni115750.cloudflaressl.com
sni.cloudflaressl.com
sni155855.cloudflaressl.com
sni59049.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni211154.cloudflaressl.com
sni.cloudflaressl.com
sni189810.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni856209.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni90611.cloudflaressl.com
sni.cloudflaressl.com
sni178904.cloudflaressl.com
sni26581.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni193995.cloudflaressl.com
sni44161.cloudflaressl.com
sni159804.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni146505.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni227751.cloudflaressl.com
sni240860.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni163960.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
ssl829466.cloudflaressl.com
sni.cloudflaressl.com
sni44515.cloudflaressl.com
sni.cloudflaressl.com
sni226824.cloudflaressl.com
sni.cloudflaressl.com
sni238751.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni171982.cloudflaressl.com
sni66010.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni204563.cloudflaressl.com
sni147888.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni70031.cloudflaressl.com
sni59352.cloudflaressl.com
sni165754.cloudflaressl.com
sni.cloudflaressl.com
sni234389.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni188256.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni61492.cloudflaressl.com
sni.cloudflaressl.com
sni110040.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com
sni.cloudflaressl.com

Certificate

The complete raw certificate details for ssl803645.cloudflaressl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIINgjCCDGqgAwIBAgIQSlwPbY6LfAzRIb4sfRseSTANBgkqhkiG9w0BAQsFADCB
kjELMAkGA1UEBhMCR0IxGzAZBgNVBAgTEkdyZWF0ZXIgTWFuY2hlc3RlcjEQMA4G
A1UEBxMHU2FsZm9yZDEaMBgGA1UEChMRQ09NT0RPIENBIExpbWl0ZWQxODA2BgNV
BAMTL0NPTU9ETyBSU0EgRG9tYWluIFZhbGlkYXRpb24gU2VjdXJlIFNlcnZlciBD
QSAyMB4XDTIwMDExNzAwMDAwMFoXDTIwMDcyNTIzNTk1OVowJjEkMCIGA1UEAxMb
c3NsODAzNjQ1LmNsb3VkZmxhcmVzc2wuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAkm2Hiz2C03urktFxvkoIwRYjwE3rpsOOXrPWLA0XEwNwz2Ft
9UpIblkURMnqEVmlpf8K38ZJf6yMYZ7EAsLDINuC/Y/or4X57gWxZTOuZSTyg1yb
xsblvwSUttYve5QHSO0x0vVTwX0RUjosH5z3FVHpkJuK+wsCXq7ar1TcFaauEmDl
2ojrWCnb85MSvCqB0oCMC69A7yXxPxdljIyngJMvLzTtT/mAr1AFWr8Ya0x+D+YN
CKKZwCbWO6vPHD7eZHLvFqjsyd/oYQ95qMVNOT7pjZtkaP90/9/Jp5iyEEQmXqRg
moPFRq6pPa+2pXW5/23Zx6yT+9PEP13QwuEvGwIDAQABo4IKPTCCCjkwHwYDVR0j
BBgwFoAU1LD0/U+cQqRs3D0u7ltBGMmtA/YwHQYDVR0OBBYEFB5eAG1Shy42rIYH
YUU41AtaZlRCMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMB0GA1UdJQQW
MBQGCCsGAQUFBwMBBggrBgEFBQcDAjBJBgNVHSAEQjBAMDQGCysGAQQBsjEBAgIH
MCUwIwYIKwYBBQUHAgEWF2h0dHBzOi8vc2VjdGlnby5jb20vQ1BTMAgGBmeBDAEC
ATBWBgNVHR8ETzBNMEugSaBHhkVodHRwOi8vY3JsLmNvbW9kb2NhNC5jb20vQ09N
T0RPUlNBRG9tYWluVmFsaWRhdGlvblNlY3VyZVNlcnZlckNBMi5jcmwwgYgGCCsG
AQUFBwEBBHwwejBRBggrBgEFBQcwAoZFaHR0cDovL2NydC5jb21vZG9jYTQuY29t
L0NPTU9ET1JTQURvbWFpblZhbGlkYXRpb25TZWN1cmVTZXJ2ZXJDQTIuY3J0MCUG
CCsGAQUFBzABhhlodHRwOi8vb2NzcC5jb21vZG9jYTQuY29tMIIHgAYDVR0RBIIH
dzCCB3OCG3NzbDgwMzY0NS5jbG91ZGZsYXJlc3NsLmNvbYIVKi5hdm9ud29ydGgu
azEyLnBhLnVzghAqLmJhc2QuazEyLnBhLnVzghIqLmJhdGh3aWxkY2F0cy5vcmeC
FiouYmVhY2h3b29kc2Nob29scy5vcmeCFyouYnJvb2t3b29kY29sdW1idXMub3Jn
ggsqLmNsaHNhLm9yZ4ILKi5jdnNjcy5vcmeCGiouZGlja3NvbmNvdW50eXNjaG9v
bHMubmV0ghAqLmVzdm1hbG9uZXkuY29tghUqLmZhaXRoZ3JlZW5maWVsZC5vcmeC
FSouZm9uZGR1bGFjLmsxMi53aS51c4IYKi5mcmFua2ZvcnQua3lzY2hvb2xzLnVz
ghAqLmdpdmV0b3NjY3MuY29tghQqLmdyYW50Lmt5c2Nob29scy51c4IPKi5ncmVl
bmVlc2Mub3JnghIqLmhhcmRpbi5rMTIubXQudXOCECouaGVscG1lZ3Jvdy5vcmeC
FyouaXRzd2hlcmV5b3ViZWxvbmcuY29tghAqLmxhd3JlbmNlZGQub3JnggsqLmxj
anZzLmNvbYIVKi5sb2dhbmVsbXNjaG9vbHMuY29tghUqLmxvcmFpbmNvdW50eWp2
cy5jb22CEioubHV0aGVyYW53ZXN0LmNvbYIeKi5tYXJnYXJldHRhc2Nob29sZGlz
dHJpY3QuY29tghQqLm1jZG93ZWxsc2Nob29sLm5ldIIQKi5tZWRpbmEtZXNjLm9y
Z4IKKi5uZGVzLm9yZ4ISKi5uZXdhcmtzY2hvb2xzLnVzghAqLm5ld2RheS5hY2Fk
ZW15ggsqLm5tc25hLmNvbYIKKi5ucmNzLm5ldIIQKi5vbmVvbnRhY3NkLm9yZ4IW
Ki5wb3R0c3Rvd25zY2hvb2xzLmNvbYISKi5yY3NqYWxsaWFuY2UuY29tghIqLnNj
aGVuZXZ1c2NzZC5vcmeCFyouc2Nob29sbnV0cml0aW9uc2MuY29tgg0qLnNjc29o
aW8ub3JnghYqLnNlbG1hY2l0eXNjaG9vbHMub3JnghUqLnNvdXRoY2VudHJhbHJp
Yy5vcmeCECouc3JzZC5rMTIucGEudXOCCyouc3N0cjIub3JngiAqLnN0YXJrY291
bnR5Y2F0aG9saWNzY2hvb2xzLm9yZ4IdKi5zdGphbWVzc2Nob29sd2F5bmVzYnVy
Zy5jb22CESouc3Rqb2Fub2ZhcmMub3Jngh4qLnRoZWdyYWhhbWZhbWlseW9mc2No
b29scy5vcmeCEyoudHJpbWJsZS5rMTIub2gudXOCCyoudWVrMTIub3JnghEqLndv
cmNlc3RlcmNzLm9yZ4ITYXZvbndvcnRoLmsxMi5wYS51c4IOYmFzZC5rMTIucGEu
dXOCEGJhdGh3aWxkY2F0cy5vcmeCFGJlYWNod29vZHNjaG9vbHMub3JnghVicm9v
a3dvb2Rjb2x1bWJ1cy5vcmeCCWNsaHNhLm9yZ4IJY3ZzY3Mub3JnghhkaWNrc29u
Y291bnR5c2Nob29scy5uZXSCDmVzdm1hbG9uZXkuY29tghNmYWl0aGdyZWVuZmll
bGQub3JnghNmb25kZHVsYWMuazEyLndpLnVzghZmcmFua2ZvcnQua3lzY2hvb2xz
LnVzgg5naXZldG9zY2NzLmNvbYISZ3JhbnQua3lzY2hvb2xzLnVzgg1ncmVlbmVl
c2Mub3JnghBoYXJkaW4uazEyLm10LnVzgg5oZWxwbWVncm93Lm9yZ4IVaXRzd2hl
cmV5b3ViZWxvbmcuY29tgg5sYXdyZW5jZWRkLm9yZ4IJbGNqdnMuY29tghNsb2dh
bmVsbXNjaG9vbHMuY29tghNsb3JhaW5jb3VudHlqdnMuY29tghBsdXRoZXJhbndl
c3QuY29tghxtYXJnYXJldHRhc2Nob29sZGlzdHJpY3QuY29tghJtY2Rvd2VsbHNj
aG9vbC5uZXSCDm1lZGluYS1lc2Mub3JngghuZGVzLm9yZ4IQbmV3YXJrc2Nob29s
cy51c4IObmV3ZGF5LmFjYWRlbXmCCW5tc25hLmNvbYIIbnJjcy5uZXSCDm9uZW9u
dGFjc2Qub3JnghRwb3R0c3Rvd25zY2hvb2xzLmNvbYIQcmNzamFsbGlhbmNlLmNv
bYIQc2NoZW5ldnVzY3NkLm9yZ4IVc2Nob29sbnV0cml0aW9uc2MuY29tggtzY3Nv
aGlvLm9yZ4IUc2VsbWFjaXR5c2Nob29scy5vcmeCE3NvdXRoY2VudHJhbHJpYy5v
cmeCDnNyc2QuazEyLnBhLnVzgglzc3RyMi5vcmeCHnN0YXJrY291bnR5Y2F0aG9s
aWNzY2hvb2xzLm9yZ4Ibc3RqYW1lc3NjaG9vbHdheW5lc2J1cmcuY29tgg9zdGpv
YW5vZmFyYy5vcmeCHHRoZWdyYWhhbWZhbWlseW9mc2Nob29scy5vcmeCEXRyaW1i
bGUuazEyLm9oLnVzggl1ZWsxMi5vcmeCD3dvcmNlc3RlcmNzLm9yZzCCAQYGCisG
AQQB1nkCBAIEgfcEgfQA8gB3AAe3XBvlfWj/8bDGHSMVx7rmV3xXlLdq7rxhOhpp
06IcAAABb7S+xPQAAAQDAEgwRgIhANLT63CDDDzK3mRmmsi5fIJEPaFKsSl0xWGK
tscSQLnNAiEAuACC52pNOY/dCdYtZ3jyFpMLEaVZfWg/cyGBvSqiHvMAdwBep3P5
31bA57U2SH3QSeAyepGaDIShEhKEGHWWgXFFWAAAAW+0vsR/AAAEAwBIMEYCIQC2
O5Jb0zxnl728LA812omg/h1zHnM3Mr6iCHicdDjjDwIhAMQErOezsssuowt3QM0w
bJe6yAiwchKbsMrg91ePZD+uMA0GCSqGSIb3DQEBCwUAA4IBAQAtZ98bB41B393K
fd+PbKeEYT7RK/4+SHiU/SKBqe6eqBjqZmOyk2iB9nqJlc7PNO2xWhbzOuhezBFy
wzn1u1F1sn0QrTot1ex9N+lNhRk7isaWWDdEDoz7BH+Gsr8IbQ1PhPnq4ORQlJpU
+IVhyl/2LvX73KXl5Wj1eQ5HhrWP1uIbTSoZtCug4f3KMR/dPfrsPwonN4N32mnS
kvdTOona3kI901HLUf8/VyYTuZTYhgP2WgZd8BhFP+5avKIjv3j888TOqew23z/z
q76WL3ReJZ5rMtRhm4mSHIZBA9Vykiso+ApY4D6dobjYl8gHaRi3cdiRc6sGKfEO
bUvBH7x4
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkm2Hiz2C03urktFxvkoI
wRYjwE3rpsOOXrPWLA0XEwNwz2Ft9UpIblkURMnqEVmlpf8K38ZJf6yMYZ7EAsLD
INuC/Y/or4X57gWxZTOuZSTyg1ybxsblvwSUttYve5QHSO0x0vVTwX0RUjosH5z3
FVHpkJuK+wsCXq7ar1TcFaauEmDl2ojrWCnb85MSvCqB0oCMC69A7yXxPxdljIyn
gJMvLzTtT/mAr1AFWr8Ya0x+D+YNCKKZwCbWO6vPHD7eZHLvFqjsyd/oYQ95qMVN
OT7pjZtkaP90/9/Jp5iyEEQmXqRgmoPFRq6pPa+2pXW5/23Zx6yT+9PEP13QwuEv
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 98840875915198245460007457889262968393
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Greater Manchester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Salford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO CA Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMODO RSA Domain Validation Secure Server CA 2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl803645.cloudflaressl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18484803518924002477524108639069641741805902452279370160550703410276708646318561352222380949359361803265813115273825639098888785802432675252454642680584038190595222072749426997597546169561004654251398730996341340316888192945740210322230658120078518174196393200211166767035692899571498513181908068311854420929848149161911194896270571048139387937863651645022583161703182367364248515786804363408716862838788073310835107695254503653776264458783436392583530235871426546156059694671524705038820842421966990694492755971440070439252134858082636981193104980557262987932864273808075202535255203527318690940581904111697779568411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d4b0f4fd4f9c42a46cdc3d2eee5b4118c9ad03f6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1e5e006d52872e36ac8607614538d40b5a665442
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.comodoca4.com/COMODORSADomainValidationSecureServerCA2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.comodoca4.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1911 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl803645.cloudflaressl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.avonworth.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.basd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.bathwildcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beachwoodschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brookwoodcolumbus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.clhsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cvscs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.dicksoncountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.esvmaloney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.faithgreenfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fonddulac.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.frankfort.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.givetosccs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.grant.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.greeneesc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hardin.k12.mt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.helpmegrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.itswhereyoubelong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lawrencedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lcjvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loganelmschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loraincountyjvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lutheranwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.margarettaschooldistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mcdowellschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.medina-esc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ndes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newarkschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.newday.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nmsna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.nrcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.oneontacsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pottstownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.rcsjalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schenevuscsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.schoolnutritionsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.scsohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.selmacityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.southcentralric.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.srsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sstr2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.starkcountycatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stjamesschoolwaynesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stjoanofarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.thegrahamfamilyofschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.trimble.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.uek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worcestercs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avonworth.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'basd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bathwildcats.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'beachwoodschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookwoodcolumbus.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clhsa.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cvscs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dicksoncountyschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'esvmaloney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'faithgreenfield.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fonddulac.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'frankfort.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'givetosccs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grant.kyschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'greeneesc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hardin.k12.mt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'helpmegrow.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'itswhereyoubelong.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lawrencedd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lcjvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loganelmschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'loraincountyjvs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lutheranwest.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'margarettaschooldistrict.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mcdowellschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medina-esc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ndes.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newarkschools.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newday.academy'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nmsna.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nrcs.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oneontacsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pottstownschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rcsjalliance.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schenevuscsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schoolnutritionsc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scsohio.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'selmacityschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'southcentralric.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'srsd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sstr2.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'starkcountycatholicschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjamesschoolwaynesburg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stjoanofarc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'thegrahamfamilyofschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'trimble.k12.oh.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uek12.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'worcestercs.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f200770007b75c1be57d68fff1b0c61d2315c7bae6577c5794b76aeebc613a1a69d3a21c0000016fb4bec4f40000040300483046022100d2d3eb70830c3ccade64669ac8b97c82443da14ab12974c5618ab6c71240b9cd022100b80082e76a4d398fdd09d62d6778f216930b11a5597d683f732181bd2aa21ef30077005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016fb4bec47f0000040300483046022100b63b925bd33c6797bdbc2c0f35da89a0fe1d731e733732bea208789c7438e30f022100c404ace7b3b2cb2ea30b7740cd306c97bac808b072129bb0cae0f7578f643fae
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		002d67df1b078d41dfddca7ddf8f6ca784613ed12bfe3e487894fd2281a9ee9ea818ea6663b2936881f67a8995cecf34edb15a16f33ae85ecc1172c339f5bb5175b27d10ad3a2dd5ec7d37e94d85193b8ac6965837440e8cfb047f86b2bf086d0d4f84f9eae0e450949a54f88561ca5ff62ef5fbdca5e5e568f5790e4786b58fd6e21b4d2a19b42ba0e1fdca311fdd3dfaec3f0a27378377da69d292f7533a89dade423dd351cb51ff3f572613b994d88603f65a065df018453fee5abca223bf78fcf3c4cea9ec36df3ff3abbe962f745e259e6b32d4619b89921c864103d572922b28f80a58e03e9da1b8d897c8076918b771d89173ab0629f10e6d4bc11fbc78