admin.dimensions.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:82:07:fd:d6:6a:d3:96:78:c4:00:c9:4c:f4:d4:c1:47:57 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=admin.dimensions.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:82:07:fd:d6:6a:d3:96:78:c4:00:c9:4c:f4:d4:c1:47:57
Serial Number (int): 305584188090977767566825075296114919425879
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4a:58:80:66:1c:8a:e7:9a:15:9d:bc:79:b3:bf:52:eb:1c:25:31:2c
Fingerprint (sha256): af:29:c4:ad:b0:3e:02:ce:58:cf:07:21:2d:a6:bd:54:1b:2a:26:bd:d0:38:5b:b3:d9:c8:21:51:e1:03:62:88

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate admin.dimensions.org

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for admin.dimensions.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.ajshs.asd.k12.pa.us
admin.apluscharterschools.org
admin.beethoven-elementary.vanguardacademy.education
admin.bfcsd.org
admin.bgisd.org
admin.brocktonelementary.org
admin.brookwoodhighschool.net
admin.catsdr.com
admin.cfh.edu.mx
admin.colegiociodemexico.edu.mx
admin.colegiosenda.edu.mx
admin.cypsd.org
admin.delevandriveelementary.org
admin.des.asd.k12.pa.us
admin.dimensions.org
admin.ees.asd.k12.pa.us
admin.goldenvalley.kernhigh.org
admin.gorhamschools.org
admin.hudson.ucboe.us
admin.inspireschools.org
admin.les.asd.k12.pa.us
admin.magnoliapandas.net
admin.mozart-elementary.vanguardacademy.education
admin.noscihigh.org
admin.olaclaremont.org
admin.rlcs-slc.org
admin.sd44.org
admin.seventhstreetelementary.org
admin.somervilleisd.org
admin.svs.asd.k12.pa.us
admin.unionbigpicture.org
admin.wis.asd.k12.pa.us
admin.wps.asd.k12.pa.us
admin.wshs.asd.k12.pa.us
ajshs.asd.k12.pa.us
apluscharterschools.org
brocktonelementary.org
brookwoodhighschool.net
brookwoodhs.com
colegiociodemexico.edu.mx
delevandriveelementary.org
des.asd.k12.pa.us
dymallyhs.org
ees.asd.k12.pa.us
hopecharteracademy.org
hudson.ucboe.us
hudson.union-city.k12.nj.us
inspireacademy.net
inspirecharteracademy.net
inspirecharterschools.net
inspirecharterschools.org
inspireschools.net
inspireschools.org
les.asd.k12.pa.us
magnoliapanda.net
magnoliapandas.net
mentalhealth.lexnyc.org
mozart-elementary.vanguardacademy.education
mozart-secondary.vanguardacademy.education
noscihigh.org
public.rlcs-slc.org
rlcs-slc.org
school.rlcs-slc.org
seventhstreetelementary.org
svs.asd.k12.pa.us
wis.asd.k12.pa.us
wps.asd.k12.pa.us
wshs.asd.k12.pa.us
www.apluscharterschools.org
www.bfcsd.org
www.bgisd.org
www.brocktonelementary.org
www.brookwoodhighschool.net
www.brookwoodhs.com
www.catsdr.com
www.colegiociodemexico.edu.mx
www.colegiosenda.edu.mx
www.cypsd.k12.ca.us
www.cypsd.org
www.delevandriveelementary.org
www.dymallyhs.org
www.gorhamschools.org
www.holynamesf.com
www.hopecharteracademy.org
www.inspireacademy.net
www.inspirecharteracademy.net
www.inspirecharterschools.net
www.inspirecharterschools.org
www.inspireschools.net
www.inspireschools.org
www.magnoliapandas.net
www.noscihigh.org
www.rlcs-slc.org
www.rosner.edu.mx
www.sandiaprep.org
www.sd44.org
www.seventhstreetelementary.org
www.somervilleisd.org
www.unionbigpicture.org
www.vanalstyneisd.org

Other certificates including the domain name dimensions.org

(limited to 100 certificates)
admin.dimensions.org
cas.centerusd.org
admin.northcountry.centerusd.org
admin.missionprep.org
dimensions.org
dudley.centerusd.org
www.siths.org
admin.ajshs.asd.k12.pa.us
admin.dimensions.org
dimensions.org
cathedralschoolny.org
admin.kauffmanschool.org
northregionselpa.org
dimensions.org
admin.hamlincharter.org
admin.dimensions.org
admin.bennie.allenparkschools.com
admin.camdentonschools.org
admin.allenparkschools.com
admin.allenparkschools.com
admin.northcountry.centerusd.org
dimensions.org
admin.ajshs.asd.k12.pa.us
admin.dimensions.org
admin.dimensions.org
hamlincharter.org
admin.camdentonschools.org
pal.ldcsb.ca
dimensions.org
admin.calmecaacademy.com
admin.allenparkschools.com
admin.erusd.org
admin.apcs.allenparkschools.com
www.sunrisewaldorfschool.org
admin.dudley.centerusd.org
www.twodimensions.org
admin.dimensions.org
admin.centerpreschool.centerusd.org
admin.allenparkschools.com

Certificate

The complete raw certificate details for admin.dimensions.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIQhDCCD2ygAwIBAgISA4IH/dZq05Z4xADJTPTUwUdXMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODA2MDIwMTAxMzBaFw0x
ODA4MzEwMTAxMzBaMB8xHTAbBgNVBAMTFGFkbWluLmRpbWVuc2lvbnMub3JnMIIC
IjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYV
Cl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18R
THnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6St
agubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z3
75LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0
ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/J
MR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6c
kUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64Xj
XNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2
w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQV
G30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me
6o58sq/IQVmyem1M/E0CAwEAAaOCDI0wggyJMA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4E
FgQUL2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3
pkVl7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2Nz
cC5pbnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2Vy
dC5pbnQteDMubGV0c2VuY3J5cHQub3JnLzCCCY8GA1UdEQSCCYYwggmCghlhZG1p
bi5hanNocy5hc2QuazEyLnBhLnVzgh1hZG1pbi5hcGx1c2NoYXJ0ZXJzY2hvb2xz
Lm9yZ4I0YWRtaW4uYmVldGhvdmVuLWVsZW1lbnRhcnkudmFuZ3VhcmRhY2FkZW15
LmVkdWNhdGlvboIPYWRtaW4uYmZjc2Qub3Jngg9hZG1pbi5iZ2lzZC5vcmeCHGFk
bWluLmJyb2NrdG9uZWxlbWVudGFyeS5vcmeCHWFkbWluLmJyb29rd29vZGhpZ2hz
Y2hvb2wubmV0ghBhZG1pbi5jYXRzZHIuY29tghBhZG1pbi5jZmguZWR1Lm14gh9h
ZG1pbi5jb2xlZ2lvY2lvZGVtZXhpY28uZWR1Lm14ghlhZG1pbi5jb2xlZ2lvc2Vu
ZGEuZWR1Lm14gg9hZG1pbi5jeXBzZC5vcmeCIGFkbWluLmRlbGV2YW5kcml2ZWVs
ZW1lbnRhcnkub3JnghdhZG1pbi5kZXMuYXNkLmsxMi5wYS51c4IUYWRtaW4uZGlt
ZW5zaW9ucy5vcmeCF2FkbWluLmVlcy5hc2QuazEyLnBhLnVzgh9hZG1pbi5nb2xk
ZW52YWxsZXkua2VybmhpZ2gub3JnghdhZG1pbi5nb3JoYW1zY2hvb2xzLm9yZ4IV
YWRtaW4uaHVkc29uLnVjYm9lLnVzghhhZG1pbi5pbnNwaXJlc2Nob29scy5vcmeC
F2FkbWluLmxlcy5hc2QuazEyLnBhLnVzghhhZG1pbi5tYWdub2xpYXBhbmRhcy5u
ZXSCMWFkbWluLm1vemFydC1lbGVtZW50YXJ5LnZhbmd1YXJkYWNhZGVteS5lZHVj
YXRpb26CE2FkbWluLm5vc2NpaGlnaC5vcmeCFmFkbWluLm9sYWNsYXJlbW9udC5v
cmeCEmFkbWluLnJsY3Mtc2xjLm9yZ4IOYWRtaW4uc2Q0NC5vcmeCIWFkbWluLnNl
dmVudGhzdHJlZXRlbGVtZW50YXJ5Lm9yZ4IXYWRtaW4uc29tZXJ2aWxsZWlzZC5v
cmeCF2FkbWluLnN2cy5hc2QuazEyLnBhLnVzghlhZG1pbi51bmlvbmJpZ3BpY3R1
cmUub3JnghdhZG1pbi53aXMuYXNkLmsxMi5wYS51c4IXYWRtaW4ud3BzLmFzZC5r
MTIucGEudXOCGGFkbWluLndzaHMuYXNkLmsxMi5wYS51c4ITYWpzaHMuYXNkLmsx
Mi5wYS51c4IXYXBsdXNjaGFydGVyc2Nob29scy5vcmeCFmJyb2NrdG9uZWxlbWVu
dGFyeS5vcmeCF2Jyb29rd29vZGhpZ2hzY2hvb2wubmV0gg9icm9va3dvb2Rocy5j
b22CGWNvbGVnaW9jaW9kZW1leGljby5lZHUubXiCGmRlbGV2YW5kcml2ZWVsZW1l
bnRhcnkub3JnghFkZXMuYXNkLmsxMi5wYS51c4INZHltYWxseWhzLm9yZ4IRZWVz
LmFzZC5rMTIucGEudXOCFmhvcGVjaGFydGVyYWNhZGVteS5vcmeCD2h1ZHNvbi51
Y2JvZS51c4IbaHVkc29uLnVuaW9uLWNpdHkuazEyLm5qLnVzghJpbnNwaXJlYWNh
ZGVteS5uZXSCGWluc3BpcmVjaGFydGVyYWNhZGVteS5uZXSCGWluc3BpcmVjaGFy
dGVyc2Nob29scy5uZXSCGWluc3BpcmVjaGFydGVyc2Nob29scy5vcmeCEmluc3Bp
cmVzY2hvb2xzLm5ldIISaW5zcGlyZXNjaG9vbHMub3JnghFsZXMuYXNkLmsxMi5w
YS51c4IRbWFnbm9saWFwYW5kYS5uZXSCEm1hZ25vbGlhcGFuZGFzLm5ldIIXbWVu
dGFsaGVhbHRoLmxleG55Yy5vcmeCK21vemFydC1lbGVtZW50YXJ5LnZhbmd1YXJk
YWNhZGVteS5lZHVjYXRpb26CKm1vemFydC1zZWNvbmRhcnkudmFuZ3VhcmRhY2Fk
ZW15LmVkdWNhdGlvboINbm9zY2loaWdoLm9yZ4ITcHVibGljLnJsY3Mtc2xjLm9y
Z4IMcmxjcy1zbGMub3JnghNzY2hvb2wucmxjcy1zbGMub3JnghtzZXZlbnRoc3Ry
ZWV0ZWxlbWVudGFyeS5vcmeCEXN2cy5hc2QuazEyLnBhLnVzghF3aXMuYXNkLmsx
Mi5wYS51c4IRd3BzLmFzZC5rMTIucGEudXOCEndzaHMuYXNkLmsxMi5wYS51c4Ib
d3d3LmFwbHVzY2hhcnRlcnNjaG9vbHMub3Jngg13d3cuYmZjc2Qub3Jngg13d3cu
Ymdpc2Qub3Jnghp3d3cuYnJvY2t0b25lbGVtZW50YXJ5Lm9yZ4Ibd3d3LmJyb29r
d29vZGhpZ2hzY2hvb2wubmV0ghN3d3cuYnJvb2t3b29kaHMuY29tgg53d3cuY2F0
c2RyLmNvbYIdd3d3LmNvbGVnaW9jaW9kZW1leGljby5lZHUubXiCF3d3dy5jb2xl
Z2lvc2VuZGEuZWR1Lm14ghN3d3cuY3lwc2QuazEyLmNhLnVzgg13d3cuY3lwc2Qu
b3Jngh53d3cuZGVsZXZhbmRyaXZlZWxlbWVudGFyeS5vcmeCEXd3dy5keW1hbGx5
aHMub3JnghV3d3cuZ29yaGFtc2Nob29scy5vcmeCEnd3dy5ob2x5bmFtZXNmLmNv
bYIad3d3LmhvcGVjaGFydGVyYWNhZGVteS5vcmeCFnd3dy5pbnNwaXJlYWNhZGVt
eS5uZXSCHXd3dy5pbnNwaXJlY2hhcnRlcmFjYWRlbXkubmV0gh13d3cuaW5zcGly
ZWNoYXJ0ZXJzY2hvb2xzLm5ldIIdd3d3Lmluc3BpcmVjaGFydGVyc2Nob29scy5v
cmeCFnd3dy5pbnNwaXJlc2Nob29scy5uZXSCFnd3dy5pbnNwaXJlc2Nob29scy5v
cmeCFnd3dy5tYWdub2xpYXBhbmRhcy5uZXSCEXd3dy5ub3NjaWhpZ2gub3JnghB3
d3cucmxjcy1zbGMub3JnghF3d3cucm9zbmVyLmVkdS5teIISd3d3LnNhbmRpYXBy
ZXAub3Jnggx3d3cuc2Q0NC5vcmeCH3d3dy5zZXZlbnRoc3RyZWV0ZWxlbWVudGFy
eS5vcmeCFXd3dy5zb21lcnZpbGxlaXNkLm9yZ4IXd3d3LnVuaW9uYmlncGljdHVy
ZS5vcmeCFXd3dy52YW5hbHN0eW5laXNkLm9yZzCB/gYDVR0gBIH2MIHzMAgGBmeB
DAECATCB5gYLKwYBBAGC3xMBAQEwgdYwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMu
bGV0c2VuY3J5cHQub3JnMIGrBggrBgEFBQcCAjCBngyBm1RoaXMgQ2VydGlmaWNh
dGUgbWF5IG9ubHkgYmUgcmVsaWVkIHVwb24gYnkgUmVseWluZyBQYXJ0aWVzIGFu
ZCBvbmx5IGluIGFjY29yZGFuY2Ugd2l0aCB0aGUgQ2VydGlmaWNhdGUgUG9saWN5
IGZvdW5kIGF0IGh0dHBzOi8vbGV0c2VuY3J5cHQub3JnL3JlcG9zaXRvcnkvMIIB
AwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA23Sv7ssp7LH+yj5xbSzluaq7NveEcYPH
XZ1PN7Yfv2QAAAFjvjpt7AAABAMARjBEAiBw6xzS+zwyP4wA3UJvGKPF0cCi7hiV
pBNRNQUy5Xm9swIgVY7vKqwzrzjQAoMdalF5W7KeAbMRLbUuZwrCYLzTgxEAdgAp
PFGWVMg5ZbqqUPxYB9S3b79Yeily3KTDDPTlRUf0eAAAAWO+Om5HAAAEAwBHMEUC
IQCtHM3W+C+ar5X1ijKXexKtMVlGP6JpvBUkbqBL58ROQgIgSKzFzn51G8W1h0A7
Xz+N9NeD9yLZaVbQvShuF+eLy74wDQYJKoZIhvcNAQELBQADggEBADmaX0lwz0qi
O91PaO+8Jgrugy7vQ0OqIiQiHxL80GGHxhaVOhaBsG5w3YpGpGiTr6OiBLp9Tym9
OUJ7K4nKWMT1gLanlDdl7rRMHSKlQbdNerSb1b4eAoPO1ZurV/OQRNCt0IVgBwq4
7kRZU0VDmdjJ7hNdVvZgf9kEuBmoL/nNmEqQowXw6jpoV6ujZejMB6l/SddNPnoz
V0SCW35/+a/aOQhM6R9rN2cb1QMzi/H/RrlGPJtgqNdkFSQDjgh0wK7F0U4F7BFA
l0+ZdukHDs7jbj2kKYAo/m4hLBA/4P2oI+4dC5F6nd6jlLLAixe4sMweJ0KPjxdo
sRuzb7ie2zk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 305584188090977767566825075296114919425879
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-02 01:01:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-31 01:01:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.dimensions.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2438 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ajshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.beethoven-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bfcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.bgisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.catsdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cfh.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiosenda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.des.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.dimensions.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ees.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.goldenvalley.kernhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hudson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.les.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.olaclaremont.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.svs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.unionbigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wis.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wps.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.wshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ajshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brookwoodhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'des.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dymallyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hopecharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.ucboe.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hudson.union-city.k12.nj.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharteracademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharterschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspirecharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'les.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnoliapanda.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentalhealth.lexnyc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozart-elementary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mozart-secondary.vanguardacademy.education'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'public.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'school.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'svs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wis.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wps.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wshs.asd.k12.pa.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apluscharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bfcsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bgisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brocktonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookwoodhighschool.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.brookwoodhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.catsdr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiociodemexico.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiosenda.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypsd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cypsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.delevandriveelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.dymallyhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gorhamschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.holynamesf.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hopecharteracademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireacademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharteracademy.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharterschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspirecharterschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireschools.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.inspireschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnoliapandas.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.noscihigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rlcs-slc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rosner.edu.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sandiaprep.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd44.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seventhstreetelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.somervilleisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.unionbigpicture.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vanalstyneisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'This Certificate may only be relied upon by Relying Parties and only in accordance with the Certificate Policy found at https://letsencrypt.org/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500db74afeecb29ecb1feca3e716d2ce5b9aabb36f7847183c75d9d4f37b61fbf6400000163be3a6dec0000040300463044022070eb1cd2fb3c323f8c00dd426f18a3c5d1c0a2ee1895a41351350532e579bdb30220558eef2aac33af38d002831d6a51795bb29e01b3112db52e670ac260bcd38311007600293c519654c83965baaa50fc5807d4b76fbf587a2972dca4c30cf4e54547f47800000163be3a6e470000040300473045022100ad1ccdd6f82f9aaf95f58a32977b12ad3159463fa269bc15246ea04be7c44e42022048acc5ce7e751bc5b587403b5f3f8df4d783f722d96956d0bd286e17e78bcbbe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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