seafordbluejays.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 2e:18:73:3c:90:6d:a4:f5:0e:fa:44:fa:79:02:31:4e was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=seafordbluejays.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 2e:18:73:3c:90:6d:a4:f5:0e:fa:44:fa:79:02:31:4e
Serial Number (int): 61271440206203530131865290291670036814
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: b5:cb:b6:a1:33:8e:70:fd:4a:30:18:cb:36:a0:d4:1a:05:2c:fc:f3
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 3f:c5:0c:fb:74:9f:4c:f8:c8:8f:20:c8:00:d5:86:6b:dd:59:97:2e
Fingerprint (sha256): a4:cf:4a:e4:6a:dc:a2:aa:59:c3:d5:e7:95:8d:a9:63:22:68:c3:5a:b7:5d:19:98:42:6b:4d:4d:8d:2c:5a:4d

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/McVbS_4m3zU
CRL Distribution Point: http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl

Check the revocation status for certificate seafordbluejays.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seafordbluejays.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seafordbluejays.org

Other certificates including the domain name seafordbluejays.org

(limited to 100 certificates)
sms.seafordbluejays.org
admin.shs.seafordbluejays.org
seafordhighschool.seafordbluejays.org
www.seafordbluejays.org
bes.seafordbluejays.org
sms.seafordbluejays.org
shs.seafordbluejays.org
sms.seafordbluejays.org
www.escuelamexico.com.mx
admin.clift.wisd.org
ces.seafordbluejays.org
sms.seafordbluejays.org
admin.bes.seafordbluejays.org
admin.hartsacademy.org
seafordbluejays.org
wses.seafordbluejays.org
ces.seafordbluejays.org
seafordbluejays.org
seafordbluejays.org
www.infinityhs.org
admin.delta-summit.chsd218.org
admin.sms.seafordbluejays.org
shs.seafordbluejays.org
admin.ces.seafordbluejays.org
admin.bes.seafordbluejays.org
wses.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
bes.seafordbluejays.org
fdes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
tmsa.org
bes.seafordbluejays.org
www.seafordbluejays.org
seafordbluejays.org
admin.llesat.org
seafordbluejays.org
wses.seafordbluejays.org
admin.finley.wisd.org
seafordbluejays.org
ces.seafordbluejays.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
fdes.seafordbluejays.org
delta-summit.chsd218.org
bes.seafordbluejays.org
admin.shackelford.wisd.org
ces.seafordbluejays.org
fdes.seafordbluejays.org
admin.seafordbluejays.org
northernheights.adsb.on.ca
seafordbluejays.org
ces.seafordbluejays.org
catonschool.com
seafordbluejays.org
www.seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
seafordbluejays.org
fdes.seafordbluejays.org
wses.seafordbluejays.org
punxsy.k12.pa.us
seafordbluejays.org
shs.seafordbluejays.org
www.hartsacademy.org
sms.seafordbluejays.org
goldenvalleyhighschool.com
wses.seafordbluejays.org
bes.seafordbluejays.org
bes.seafordbluejays.org
admin.bes.seafordbluejays.org
shs.seafordbluejays.org
shs.seafordbluejays.org
seafordbluejays.org
admin.bes.seafordbluejays.org
fdes.seafordbluejays.org
sms.seafordbluejays.org
seafordbluejays.org
www.seafordbluejays.org
wses.seafordbluejays.org
shs.seafordbluejays.org
ces.seafordbluejays.org
wses.seafordbluejays.org
fdes.seafordbluejays.org
northside.wisd.org
seafordbluejays.org
seafordbluejays.org
admin.northside.wisd.org

Certificate

The complete raw certificate details for seafordbluejays.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFazCCBFOgAwIBAgIQLhhzPJBtpPUO+kT6eQIxTjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA1MTgwNTI3NThaFw0yNDA4MTYw
NTI3NTdaMB4xHDAaBgNVBAMTE3NlYWZvcmRibHVlamF5cy5vcmcwggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK5gtPeUAcm1jDX8tgd6RMxwQceOJthxOX
CHCZkYjPB+hnxP5+P6E0Bv2VZo4YUcTkyX2KMBWP6Btepasw5Fzzy7sGvCk7dBdo
yf9XNEvxpl7ZD5bflJosUVZvNjvzpiSrfdMqpg/h5nJR4q+/1cRWPO5sCWSdvTmz
17cBK22Z8558kqZodKfZR7dHFgf5iLPKH/LoXJExN8bfkWGh/XRxeNvWhA9he3ru
nSa60Z6hkOZeY3/AMBrsOqKKqdnlhEY1F58oJcRcHwXHZTR6YdHTpz6fmc+w9oXA
hrCtPja3f3XvAW4TB7vPgOR63Fs5ThW6Qiczzlqg7+9DPRmYcnmVAgMBAAGjggJ7
MIICdzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T
AQH/BAIwADAdBgNVHQ4EFgQUtcu2oTOOcP1KMBjLNqDUGgUs/PMwHwYDVR0jBBgw
FoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF
BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9NY1ZiU180bTN6VTAx
BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRl
cjAeBgNVHREEFzAVghNzZWFmb3JkYmx1ZWpheXMub3JnMCEGA1UdIAQaMBgwCAYG
Z4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2Ny
bHMucGtpLmdvb2cvZ3RzMXA1L0xGX0poQUJUYjFZLmNybDCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
j4piwfoAAAQDAEgwRgIhAP8PljmkoZldfkLw13VhxscFXxnO9fQdBq93sDjTtoyW
AiEA7Ls9GXI/T5oCRykwzxZTEyslzERFqtEH849/FlcyyZ8AdgDatr9rP7W2Ip+b
wrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAY+KYsYdAAAEAwBHMEUCIACHTfFUbg3n
8SMJOrhCJh3SjYDki2hTb/sWlR5TNeKhAiEAl/anrtRhQ1Li6uXJUZlMdDuNgseQ
R0qHXJeZv0XPZSYwDQYJKoZIhvcNAQELBQADggEBACzBa17f4maOv1L9VLNCQgbU
B9BLl2nTHnYFcXjGugty04+96b8/H4adM26VQLt4X4lHx2dbwurbgYX4S/rsn/RS
Z28pltQr/+zQqqkTrKBTAZHqqV97KJUNpxx2JljrFpQx4gICJRHsyI8MASMmFSLF
WSWDqL9Ale2TENzEDU1UCQNVTLjjOx6AWcMNzLIxWV/38SuqBlqMsH1Iw5URUE+w
id/Zu+yzy0hQojUxoRQj0w5Pqf9YCy7+Vt8rkRc/ZL5xmtG9dkgHH/l2S2VGigJF
NnLAjJugA/V8pJTgscK/CKY9mrhilBYRDas2dSDi6jxJqY4/6FV0eNrBY2sfjq8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuYLT3lAHJtYw1/LYHek
TMcEHHjibYcTlwhwmZGIzwfoZ8T+fj+hNAb9lWaOGFHE5Ml9ijAVj+gbXqWrMORc
88u7BrwpO3QXaMn/VzRL8aZe2Q+W35SaLFFWbzY786Ykq33TKqYP4eZyUeKvv9XE
VjzubAlknb05s9e3ASttmfOefJKmaHSn2Ue3RxYH+Yizyh/y6FyRMTfG35Fhof10
cXjb1oQPYXt67p0mutGeoZDmXmN/wDAa7DqiiqnZ5YRGNRefKCXEXB8Fx2U0emHR
06c+n5nPsPaFwIawrT42t3917wFuEwe7z4DketxbOU4VukInM85aoO/vQz0ZmHJ5
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 61271440206203530131865290291670036814
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-18 05:27:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-16 05:27:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seafordbluejays.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25613576616932690070009756851402650223080986568332006201377658769842666553971431954168652588061009186479067692914833019235335278304148334494583960052121119629153948727909810581057327713885436523871161632195855112560258479952504165917117091946617499902329696101666472105942996812980271088968263105599916217444158152889123375798845216282253309470628480111429404935854969473936886261187140811976147414948420198494122331853632996284410982224845590780177426066511358034907199384320880652333988266754790593287906072310739420613005243793450188473690579651981057446021002857990564312831400536692085002878992761862147309468053
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5cbb6a1338e70fd4a3018cb36a0d41a052cfcf3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/McVbS_4m3zU'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seafordbluejays.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/LF_JhABTb1Y.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f100770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018f8a62c1fa0000040300483046022100ff0f9639a4a1995d7e42f0d77561c6c7055f19cef5f41d06af77b038d3b68c96022100ecbb3d19723f4f9a02472930cf1653132b25cc4445aad107f38f7f165732c99f007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018f8a62c61d0000040300473045022000874df1546e0de7f123093ab842261dd28d80e48b68536ffb16951e5335e2a102210097f6a7aed4614352e2eae5c951994c743b8d82c790474a875c9799bf45cf6526
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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