dataportal.santacruzcoe.org

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:32:e3:65:20:3f:52:0f:b7:62:00:8b:24:ae:60:fe:43:b1 was issued on by Let's Encrypt.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dataportal.santacruzcoe.org

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:32:e3:65:20:3f:52:0f:b7:62:00:8b:24:ae:60:fe:43:b1
Serial Number (int): 278653235972407429359725712461499392213937
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: a6:0b:a6:a9:5b:2d:87:97:ae:f6:ef:a5:1e:64:1b:33:02:6e:5a:7d
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 92:10:9c:2e:5f:76:5d:c7:f5:eb:6a:61:09:b2:7a:71:d6:de:12:69
Fingerprint (sha256): b5:36:5e:e2:7c:17:5e:ad:6f:8b:f5:3e:c5:39:c2:85:c9:0e:17:a1:4d:2b:ec:2a:64:41:c0:35:60:57:aa:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate dataportal.santacruzcoe.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dataportal.santacruzcoe.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dataportal.santacruzcoe.org

Other certificates including the domain name santacruzcoe.org

(limited to 100 certificates)
*.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
webmail.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
email.santacruz.k12.ca.us
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
oasis.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
*.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
oasis.santacruzcoe.org
cypress.santacruzcoe.org
dataportal.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
leadership.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
*.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
bayoflife.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
dlearning.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
*.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
webmail.santacruz.k12.ca.us
santacruzcoe.org
cypress.santacruzcoe.org
webmail.santacruz.k12.ca.us
santacruzcoe.org
cypress.santacruzcoe.org
covid19test.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
santacruzcoe.org
dataportal.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
cypress.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
email.santacruz.k12.ca.us
santacruzcoe.org
santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
hwsclearningseries.santacruzcoe.org
cypress.santacruzcoe.org
cypress.santacruzcoe.org
leadership.santacruzcoe.org
cypress.santacruzcoe.org
www.santacruzcoe.org

Certificate

The complete raw certificate details for dataportal.santacruzcoe.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbTCCBVWgAwIBAgISAzLjZSA/Ug+3YgCLJK5g/kOxMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0yMDAzMDMwMDQzNDVaFw0y
MDA2MDEwMDQzNDVaMCYxJDAiBgNVBAMTG2RhdGFwb3J0YWwuc2FudGFjcnV6Y29l
Lm9yZzCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAKRgLkWiemXl/5DW
Tj0lln/AGMfh1RZkuudebOjk4XVK+Qe3M2isuXijJzIg6QkOurxzhsPSacqAzivC
AmONpeTrQPCN66Wr7xa65WQn88NUJoZbpJTn4fFRQaamI/2uFEXmAHBMNHlqjA9z
4/Q3OK3CZ1/E1ttuHM4r37wJmmy/8VruPuKON12OtjV6Pl/n3X0p78WS6AehjeSc
aZ7i17YSZ/+mz02HsM3EPmERaRNfU1AUMYsNX5x/f4n8AKeCSqZpq8CrN88i52si
xpUVxzBhYv4q1K4g485auGvz4l5qZ0zafsnoriqPUwXrIsQaqYRxiFEOMj+gmWml
pm93cwQ3Mc+Au1o3ONebovUyN9C8jkLrx2ieuruAiIs7/7+Z5BT9j2ehUUrKln0a
UPJF6irpiFL50GXWf/4Z7TYc7j6aFtdeE4IIuVZPxKM+X/zlN3FEilVp5S3rivhC
JVQ3m4juPJrwcw8HF7ne5Ur59bPF6XsarFouzSul2HUykwgfMUs1dKJNbfCIiKJF
3HMId/t7lyTS7VTILULaRo4RDaFMGkecGpLDxl2MOaRRZ3zML1RoeJ45RBFx54LN
8a1Rzh4TimwWgZiXhSgPglO46pIqHWS3ygmGRL4Do47gvZaf7SgiuKAgVLexfcQE
i5pyTGdcAHXUSPGwNMue8UP7y83lAgMBAAGjggJvMIICazAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFKYLpqlbLYeXrvbvpR5kGzMCblp9MB8GA1UdIwQYMBaAFKhKamME
fd265tE5t6ZFZe/zqOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0
cDovL29jc3AuaW50LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0
cDovL2NlcnQuaW50LXgzLmxldHNlbmNyeXB0Lm9yZy8wJgYDVR0RBB8wHYIbZGF0
YXBvcnRhbC5zYW50YWNydXpjb2Uub3JnMEwGA1UdIARFMEMwCAYGZ4EMAQIBMDcG
CysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly9jcHMubGV0c2VuY3J5
cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA8JWkWfIA0YJAEC0vk4iO
rUv+HUfjmeHQNKawqKqOsnMAAAFwnhAwGAAABAMARzBFAiATMmW6HrzcUtHZJxUy
CGemuTNfJqegXgzfA5iTmqLVSQIhAIBjdqPdUaUF09UpimNQnw7gaQR/QwLb1Q3u
qbcJiVWZAHUAsh4FzIuizYogTodm+Su5iiUgZ2va+nDnsklTLe+LkF4AAAFwnhAw
DAAABAMARjBEAiAnfKSh/vJJddOulN4+Qv9+6+dLR40X+nsqloI+c2FV8wIgQ/jb
H7JCKB474Ry4NYSj6O5HooQHSpSg1tEcbLhjM3MwDQYJKoZIhvcNAQELBQADggEB
AEkayBpQnuOAk0jAC8fvYB7BUbG+4nD5oWPeRyR1QhBjNt1l3vU9ITKsLt7nmoUC
NDbneWdrfLSami8AZdrzXZnpz8FeQWTeH4iil6PCFBe41wksT4KUrJGv/kVx9ic4
908RizdJvJw/ZIER4QSimJ8k74KF1u5Q7Jt4QY5bchDsaohNKHZyQTzgP3hmZL3J
oed/uQCbHnTSSf3hj/HAGBhf2CPxDvs6o44/h6xCOpyqxsqWa+S/IbUo6cRt091X
ivZm2sPOth1BQt4xHTrypNDb+QjZvBPDPDb0wI9QxKhcewt0gvz4v/pFQKJpccwh
Ner8dKcNRf7tDNFfIS5HkNE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 278653235972407429359725712461499392213937
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-03 00:43:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-01 00:43:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dataportal.santacruzcoe.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 670594374133277649041555182743950672545689696608227308085794487443179850293803268873135801912299280976467797361436226491158789098823126845932409986469903457792377645416189053619398597273156511528440586620226046663914564453544894001083027842932995929026952805701575775205492155135007464617192743559343422430103732942762069298205688394389416805535460987754291869565816188700445962618362774976054463843142579808264612285219189076163210188993670755393598085883631641049160034619881609625398038165404765302270393359860912626491965546331556332470578050949642329799445913457067064583667977498068343152539831762170953222577389804330624367980788794690170835065287235432578287873080356050611773159046236696927971166286743986239929333847582663691178106221354406723947906968756034081139011993490215548124170032358330111650651296758203206082697465741476243558688183732635174851994000437422021872385464012470123295471365136632497819324320571117838663949756905050174743092839626746085557533197405838840428635813771244127349905242126256828105633933890522765166356739408470677184819293079492403141287046511786492084602063843174687786948558596879299157465516943039818911715572587122340211660909287721773145803111313552773587564843988407743115130818021
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a60ba6a95b2d8797aef6efa51e641b33026e5a7d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dataportal.santacruzcoe.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600f095a459f200d18240102d2f93888ead4bfe1d47e399e1d034a6b0a8aa8eb273000001709e10301800000403004730450220133265ba1ebcdc52d1d92715320867a6b9335f26a7a05e0cdf0398939aa2d549022100806376a3dd51a505d3d5298a63509f0ee069047f4302dbd50deea9b709895599007500b21e05cc8ba2cd8a204e8766f92bb98a2520676bdafa70e7b249532def8b905e000001709e10300c00000403004630440220277ca4a1fef24975d3ae94de3e42ff7eebe74b478d17fa7b2a96823e736155f3022043f8db1fb242281e3be11cb83584a3e8ee47a284074a94a0d6d11c6cb8633373
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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