*.santacruz.k12.ca.us

- Santa Cruz County Office of Education -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0f:ad:c0:6a:c4:01:90:58:4c:94:55:8e:a3:b1:70:fb was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Santa Cruz County Office of Education

Organization: Santa Cruz County Office of Education
State / Province: California
Locality: Santa Cruz
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:ad:c0:6a:c4:01:90:58:4c:94:55:8e:a3:b1:70:fb
Serial Number (int): 20840589974790343406442453886204735739
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 78:4a:41:26:84:0b:83:a8:03:49:70:32:31:1c:20:37:7a:26:4a:a5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 44:24:82:d0:dc:c5:a2:61:a4:98:82:34:59:c5:ca:f2:66:e6:45:b3
Fingerprint (sha256): a9:33:f4:89:1f:7f:9f:07:f9:2d:21:fa:2f:d2:1c:b8:88:a0:c4:bd:e4:d5:34:1d:d1:35:bd:59:b8:21:82:8e

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.santacruz.k12.ca.us

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.santacruz.k12.ca.us

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.santacruz.k12.ca.us
santacruz.k12.ca.us
europa.sccoe.santacruz.santacruz.k12.ca.us

Other certificates including the domain name santacruz.k12.ca.us

(limited to 100 certificates)
www.brookknoll.santacruz.k12.ca.us
*.santacruz.k12.ca.us
webmail.santacruzcoe.org
sweet.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.bonnydoon.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
www.vinehill.santacruz.k12.ca.us
*.santacruz.k12.ca.us
email.santacruz.k12.ca.us
www.svms.santacruz.k12.ca.us
finrd.sccoe.santacruz.k12.ca.us
europa.sccoe.santacruz.k12.ca.us
email.santacruz.k12.ca.us
santacruzcoe.org
www.svms.santacruz.k12.ca.us
email.santacruz.k12.ca.us
*.santacruz.k12.ca.us
campus.sccs.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
acldtillotsonschool.org
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
acldtillotsonschool.org
campus.sccs.santacruz.k12.ca.us
admin.barringeracademiccenter.wearecms.com
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
campus.sccs.santacruz.k12.ca.us
*.santacruz.k12.ca.us
acldtillotsonschool.org
vpn.santacruz.k12.ca.us
davidsonk8.wearecms.com
www.brookknoll.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
www.vinehill.santacruz.k12.ca.us
santacruzcoe.org
www.vinehill.santacruz.k12.ca.us
www.svms.santacruz.k12.ca.us
*.santacruz.k12.ca.us
acldtillotsonschool.org
www.svms.santacruz.k12.ca.us
email.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
campus.sccs.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
*.santacruz.k12.ca.us
email.santacruz.k12.ca.us
acldtillotsonschool.org
acldtillotsonschool.org
www.vinehill.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
www.vinehill.santacruz.k12.ca.us
callisto.sccoe.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
webmail.santacruz.k12.ca.us
santacruzcoe.org
www.svms.santacruz.k12.ca.us
webmail.santacruz.k12.ca.us
*.santacruz.k12.ca.us
acldtillotsonschool.org
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
santacruzcoe.org
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.svhs.santacruz.k12.ca.us
santacruzcoe.org
acldtillotsonschool.org
www.svms.santacruz.k12.ca.us
*.santacruz.k12.ca.us
email.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
email.santacruz.k12.ca.us
*.santacruz.k12.ca.us
*.santacruz.k12.ca.us
www.vinehill.santacruz.k12.ca.us
www.brookknoll.santacruz.k12.ca.us
www.vinehill.santacruz.k12.ca.us
salty.santacruz.k12.ca.us

Certificate

The complete raw certificate details for *.santacruz.k12.ca.us in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvfNYb8FJKycDolZKwo21
2gTrOKP54OffZy3BVhyYAjrL0MDQhEMyLTOGD9egdYIyyXLyXNvfRAFOYCiFJ9Ms
LmKSOvbBFGUpJzkntUiLO8XcbRoGKKg0eSMy4McWNOogUt5j4xTCGKvgPAbcPbjY
pDze24qMFD2BuA1r541Ro+lq4JjmnJ7i9OzVY7WiU0jb9LpQLads3FXKCA92Fx31
wFDnc71jPEvJxfqhTnKuYx74xdMsWKPMk82je87sisPnWWWdplJ/5KCeNheyZmRg
5entDWUVC83YFKBUh3TqRR8/vddkgYBIE7grBCVQXjtyCLORnxH3g5/PnmsVuXt4
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20840589974790343406442453886204735739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-13 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Cruz County Office of Education'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.santacruz.k12.ca.us'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23979037754958083886066257034859865757720141068130728278208525519624031157208930163249348273997782366971863442622569451861179388486567504095728590655760973770402056367734325695239036628658472570665038666588537761082711386556613237073239920451847140136354400379658396036113655126599369411451709703987255915493139250870102186827315925825229686486914312095854835387964253169144949061524976419482186508706553242689009657375175962888820211070105032512866498283434760721025483128554325448337992899486728394224589094076250572240566013456705703505746110084955315743003716396016730498354780640484245659494590368821923595122819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							784a4126840b83a803497032311c20377a264aa5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.santacruz.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'santacruz.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'europa.sccoe.santacruz.santacruz.k12.ca.us'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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