ined.sd70.bc.ca

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:65:91:2e:46:4f:63:63:61:fc:54:44:aa:cb:88:9a:e2:29 was issued on by Let's Encrypt.

With 99 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ined.sd70.bc.ca

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:65:91:2e:46:4f:63:63:61:fc:54:44:aa:cb:88:9a:e2:29
Serial Number (int): 295898355185398286409910966151987123118633
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): 4b:11:93:fa:28:cf:dc:0c:97:97:02:80:32:82:26:cd:89:bf:ab:1e
Fingerprint (sha256): b7:0e:9b:08:f4:0b:35:5f:18:d9:13:85:9a:9d:d9:23:15:04:6b:c5:49:3a:c0:06:68:29:7a:35:78:ea:da:50

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate ined.sd70.bc.ca

99

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ined.sd70.bc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.colegiogreenhills.com
admin.ecscrusaders.com
admin.jackierobinsonelementary.org
airport.comoxvalleyschools.ca
allsaints.htcsd.ca
arden.comoxvalleyschools.ca
aspen.comoxvalleyschools.ca
awnes.sd70.bc.ca
barker.mvsd.ca
bcs.sd70.bc.ca
brooklyn.comoxvalleyschools.ca
christtheking.htcsd.ca
colegiogreenhills.com
courtenay.comoxvalleyschools.ca
cps.sd53.bc.ca
cumberland.comoxvalleyschools.ca
denman.comoxvalleyschools.ca
drcss.mvsd.ca
ecscrusaders.com
ejdes.sd70.bc.ca
ethelbert.mvsd.ca
fatimaschoolwilton.com
fatimaschoolwilton.org
glacierview.comoxvalleyschools.ca
glh.mvsd.ca
gpci.mvsd.ca
gpes.mvsd.ca
gpvanier.comoxvalleyschools.ca
graduatenorth.ca
grandview.mvsd.ca
hes.mvsd.ca
highland.comoxvalleyschools.ca
hornbyisland.comoxvalleyschools.ca
htcsd.ca
huband.comoxvalleyschools.ca
indigenoused.comoxvalleyschools.ca
indigenouseducation.comoxvalleyschools.ca
ined.comoxvalleyschools.ca
ined.sd70.bc.ca
isfeld.comoxvalleyschools.ca
isp.mvsd.ca
jackierobinsonelementary.org
jhes.sd70.bc.ca
laketrail.comoxvalleyschools.ca
macneill.mvsd.ca
mes.sd70.bc.ca
miraclebeach.comoxvalleyschools.ca
mms.mvsd.ca
nelsondiocese.org
ochre.mvsd.ca
oes.sd53.bc.ca
okf.sd53.bc.ca
ose.sd53.bc.ca
oss.sd53.bc.ca
phoenix.htcsd.ca
puntledge.comoxvalleyschools.ca
queneesh.comoxvalleyschools.ca
ranchitoelementary.org
res.mvsd.ca
robbroad.comoxvalleyschools.ca
robinsonelementary.org
royston.comoxvalleyschools.ca
sacredheart.htcsd.ca
sd70.bc.ca
sess.sd53.bc.ca
smithjackson.mvsd.ca
soss.sd53.bc.ca
stagnes.htcsd.ca
stmargaret.htcsd.ca
stmary.htcsd.ca
stmichael.htcsd.ca
ten.sd53.bc.ca
theratnerschool.org
ues.sd70.bc.ca
uss.sd70.bc.ca
valleyview.comoxvalleyschools.ca
vanier.htcsd.ca
vast.sd70.bc.ca
wci.mvsd.ca
wcs.sd70.bc.ca
wes.mvsd.ca
wes.sd70.bc.ca
whitmore.mvsd.ca
www.colegiogreenhills.com
www.comoxvalleyschools.ca
www.ecscrusaders.com
www.fatimaschoolwilton.com
www.fatimaschoolwilton.org
www.graduatenorth.ca
www.htcsd.ca
www.jackierobinsonelementary.org
www.mvsd.ca
www.nelsondiocese.org
www.nlsd113.ca
www.ranchitoelementary.org
www.robinsonelementary.org
www.sd53.bc.ca
www.theratnerschool.org
youlearn.sd53.bc.ca

Other certificates including the domain name sd70.bc.ca

(limited to 100 certificates)
admin-portal.lafmty.edu.mx
www.hardesty.k12.ok.us
admin-portal.lafmty.edu.mx
*.sd70.bc.ca
bcs.sd70.bc.ca
admin.aechs.mcallenisd.org
adss.sd70.bc.ca
www.sd70.bc.ca
mail.sd70.bc.ca
aes.sd70.bc.ca
mail.sd70.bc.ca
sdsweb.sd70.bc.ca
*.sd70.bc.ca
adss.sd70.bc.ca
*.sd70.bc.ca
mail.sd70.bc.ca
admin-portal.lafmty.edu.mx
www.aspenridgeprepschool.org
admin.aechs.mcallenisd.org
admin-portal.lafmty.edu.mx
*.sd70.bc.ca
mail.sd70.bc.ca
mail.sd70.bc.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
admin-portal.lafmty.edu.mx
sdsweb.sd70.bc.ca
sdsweb.sd70.bc.ca
admin-portal.lafmty.edu.mx
www.enterprisecharter.org
mail.sd70.bc.ca
admin-portal.lafmty.edu.mx
*.sd70.bc.ca

Certificate

The complete raw certificate details for ined.sd70.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIO7DCCDdSgAwIBAgISA2WRLkZPY2Nh/FREqsuImuIpMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xOTA4MjMwMTUzNTNaFw0x
OTExMjEwMTUzNTNaMBoxGDAWBgNVBAMTD2luZWQuc2Q3MC5iYy5jYTCCAiIwDQYJ
KoZIhvcNAQEBBQADggIPADCCAgoCggIBAK2shenuZt6MUG0x2/ts+632FQpfqYeZ
vBSSThIBLbBZ4fODBV4SJe7hDrakpTCrEdtnc3DQLStRuaVd0eEQYJ9fEUx50w/X
0tuyccnsn5V33VF+1cOGhq8jH/DBPmRoaGkD9F2Ad1wxq5kBd2f4dnukrWoLmzvq
VcBcxvFQwHZ2obFK2x66Unn4ms4soYXj5C980IPzpmkJCu8AISTvHpds9++Sw3dl
SMK3VkD9iY1fPdmHfrSGTpwJNo8g5b9zGFylxopQcq0JVmdQHYzin0YmNHJBbrvw
2JLr5DSptn981Gr8N7JQro2Vh5CB2TaWjbcX7K6SLVCKuU7u823pPzEfyTEfZ3Hl
smdjLp3fkm4Hy3/esD4VQWq67KdRzUfiJKMra+TzDUQc8Fswb0w/Be6unJFGyIKX
qO7LZ+29CDVz2IDU+8xV/1DQnFo/mmifirvDCleBBBLmor41vz/k5uuF41zYz/Rd
VvPubZXCYCYRlMhMpQlLQEaoT6I1M0J64dYlEjETSNpYieCLncf6N0OBNsOgLnfT
2MldOaRYDHUi2DURkE8kEUmkm0Nx5n2Yv6UIxclKIYgO/4dKJlJgiA4kFRt9Hh4W
9ziD92yYrF2SuKhK5+WQ5inVIDQtxkvssK0wAWI9DfhFJ6IZFIuopA+JnuqOfLKv
yEFZsnptTPxNAgMBAAGjggr6MIIK9jAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFC9r
yE1sLC4y8gAg/y1NbFr8brq7MB8GA1UdIwQYMBaAFKhKamMEfd265tE5t6ZFZe/z
qOyhMG8GCCsGAQUFBwEBBGMwYTAuBggrBgEFBQcwAYYiaHR0cDovL29jc3AuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZzAvBggrBgEFBQcwAoYjaHR0cDovL2NlcnQuaW50
LXgzLmxldHNlbmNyeXB0Lm9yZy8wggivBgNVHREEggimMIIIooIbYWRtaW4uY29s
ZWdpb2dyZWVuaGlsbHMuY29tghZhZG1pbi5lY3NjcnVzYWRlcnMuY29tgiJhZG1p
bi5qYWNraWVyb2JpbnNvbmVsZW1lbnRhcnkub3Jngh1haXJwb3J0LmNvbW94dmFs
bGV5c2Nob29scy5jYYISYWxsc2FpbnRzLmh0Y3NkLmNhghthcmRlbi5jb21veHZh
bGxleXNjaG9vbHMuY2GCG2FzcGVuLmNvbW94dmFsbGV5c2Nob29scy5jYYIQYXdu
ZXMuc2Q3MC5iYy5jYYIOYmFya2VyLm12c2QuY2GCDmJjcy5zZDcwLmJjLmNhgh5i
cm9va2x5bi5jb21veHZhbGxleXNjaG9vbHMuY2GCFmNocmlzdHRoZWtpbmcuaHRj
c2QuY2GCFWNvbGVnaW9ncmVlbmhpbGxzLmNvbYIfY291cnRlbmF5LmNvbW94dmFs
bGV5c2Nob29scy5jYYIOY3BzLnNkNTMuYmMuY2GCIGN1bWJlcmxhbmQuY29tb3h2
YWxsZXlzY2hvb2xzLmNhghxkZW5tYW4uY29tb3h2YWxsZXlzY2hvb2xzLmNhgg1k
cmNzcy5tdnNkLmNhghBlY3NjcnVzYWRlcnMuY29tghBlamRlcy5zZDcwLmJjLmNh
ghFldGhlbGJlcnQubXZzZC5jYYIWZmF0aW1hc2Nob29sd2lsdG9uLmNvbYIWZmF0
aW1hc2Nob29sd2lsdG9uLm9yZ4IhZ2xhY2llcnZpZXcuY29tb3h2YWxsZXlzY2hv
b2xzLmNhggtnbGgubXZzZC5jYYIMZ3BjaS5tdnNkLmNhggxncGVzLm12c2QuY2GC
HmdwdmFuaWVyLmNvbW94dmFsbGV5c2Nob29scy5jYYIQZ3JhZHVhdGVub3J0aC5j
YYIRZ3JhbmR2aWV3Lm12c2QuY2GCC2hlcy5tdnNkLmNhgh5oaWdobGFuZC5jb21v
eHZhbGxleXNjaG9vbHMuY2GCImhvcm5ieWlzbGFuZC5jb21veHZhbGxleXNjaG9v
bHMuY2GCCGh0Y3NkLmNhghxodWJhbmQuY29tb3h2YWxsZXlzY2hvb2xzLmNhgiJp
bmRpZ2Vub3VzZWQuY29tb3h2YWxsZXlzY2hvb2xzLmNhgilpbmRpZ2Vub3VzZWR1
Y2F0aW9uLmNvbW94dmFsbGV5c2Nob29scy5jYYIaaW5lZC5jb21veHZhbGxleXNj
aG9vbHMuY2GCD2luZWQuc2Q3MC5iYy5jYYIcaXNmZWxkLmNvbW94dmFsbGV5c2No
b29scy5jYYILaXNwLm12c2QuY2GCHGphY2tpZXJvYmluc29uZWxlbWVudGFyeS5v
cmeCD2poZXMuc2Q3MC5iYy5jYYIfbGFrZXRyYWlsLmNvbW94dmFsbGV5c2Nob29s
cy5jYYIQbWFjbmVpbGwubXZzZC5jYYIObWVzLnNkNzAuYmMuY2GCIm1pcmFjbGVi
ZWFjaC5jb21veHZhbGxleXNjaG9vbHMuY2GCC21tcy5tdnNkLmNhghFuZWxzb25k
aW9jZXNlLm9yZ4INb2NocmUubXZzZC5jYYIOb2VzLnNkNTMuYmMuY2GCDm9rZi5z
ZDUzLmJjLmNhgg5vc2Uuc2Q1My5iYy5jYYIOb3NzLnNkNTMuYmMuY2GCEHBob2Vu
aXguaHRjc2QuY2GCH3B1bnRsZWRnZS5jb21veHZhbGxleXNjaG9vbHMuY2GCHnF1
ZW5lZXNoLmNvbW94dmFsbGV5c2Nob29scy5jYYIWcmFuY2hpdG9lbGVtZW50YXJ5
Lm9yZ4ILcmVzLm12c2QuY2GCHnJvYmJyb2FkLmNvbW94dmFsbGV5c2Nob29scy5j
YYIWcm9iaW5zb25lbGVtZW50YXJ5Lm9yZ4Idcm95c3Rvbi5jb21veHZhbGxleXNj
aG9vbHMuY2GCFHNhY3JlZGhlYXJ0Lmh0Y3NkLmNhggpzZDcwLmJjLmNhgg9zZXNz
LnNkNTMuYmMuY2GCFHNtaXRoamFja3Nvbi5tdnNkLmNhgg9zb3NzLnNkNTMuYmMu
Y2GCEHN0YWduZXMuaHRjc2QuY2GCE3N0bWFyZ2FyZXQuaHRjc2QuY2GCD3N0bWFy
eS5odGNzZC5jYYISc3RtaWNoYWVsLmh0Y3NkLmNhgg50ZW4uc2Q1My5iYy5jYYIT
dGhlcmF0bmVyc2Nob29sLm9yZ4IOdWVzLnNkNzAuYmMuY2GCDnVzcy5zZDcwLmJj
LmNhgiB2YWxsZXl2aWV3LmNvbW94dmFsbGV5c2Nob29scy5jYYIPdmFuaWVyLmh0
Y3NkLmNhgg92YXN0LnNkNzAuYmMuY2GCC3djaS5tdnNkLmNhgg53Y3Muc2Q3MC5i
Yy5jYYILd2VzLm12c2QuY2GCDndlcy5zZDcwLmJjLmNhghB3aGl0bW9yZS5tdnNk
LmNhghl3d3cuY29sZWdpb2dyZWVuaGlsbHMuY29tghl3d3cuY29tb3h2YWxsZXlz
Y2hvb2xzLmNhghR3d3cuZWNzY3J1c2FkZXJzLmNvbYIad3d3LmZhdGltYXNjaG9v
bHdpbHRvbi5jb22CGnd3dy5mYXRpbWFzY2hvb2x3aWx0b24ub3JnghR3d3cuZ3Jh
ZHVhdGVub3J0aC5jYYIMd3d3Lmh0Y3NkLmNhgiB3d3cuamFja2llcm9iaW5zb25l
bGVtZW50YXJ5Lm9yZ4ILd3d3Lm12c2QuY2GCFXd3dy5uZWxzb25kaW9jZXNlLm9y
Z4IOd3d3Lm5sc2QxMTMuY2GCGnd3dy5yYW5jaGl0b2VsZW1lbnRhcnkub3Jnghp3
d3cucm9iaW5zb25lbGVtZW50YXJ5Lm9yZ4IOd3d3LnNkNTMuYmMuY2GCF3d3dy50
aGVyYXRuZXJzY2hvb2wub3JnghN5b3VsZWFybi5zZDUzLmJjLmNhMEwGA1UdIARF
MEMwCAYGZ4EMAQIBMDcGCysGAQQBgt8TAQEBMCgwJgYIKwYBBQUHAgEWGmh0dHA6
Ly9jcHMubGV0c2VuY3J5cHQub3JnMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHYA
4mlLribo6UAJ6IYbtjuD1D7n/nSI+6SPKJMBnd3x2/4AAAFsvGUIKAAABAMARzBF
AiA+XlIDtLKNKnJ/vpgOzjS/B3aVineKA2WHFCxoWgW+XQIhAJNdTxifFrfJXBtX
jQzTXRM8QOoKeyF5Nw09vD/v/J43AHUAY/Lbzeg7zCzPC3KEJ1drM6SNYXePvXWm
OLHHaFRL2I0AAAFsvGUISQAABAMARjBEAiAB5Pch9yZc2MuKsR+AclaubZs8FBOt
bzYz7umpL9azGwIgGBvJ6WXpCi7VxdS2198fSmrt1rRA9lyPEAUDH+AWAf8wDQYJ
KoZIhvcNAQELBQADggEBAEL9/st3mO4+NXEz13Jo6nV5Rx5ZzU6cagFTETmrextv
ESSOyKcptKIuMLfd9YVO6DKSQAnxWUkiN0GVpiFjja8NwNVFRA73SolKiylIV7bC
bFj4OYLajelye7tfYpP52okbm+iTB7F/9U0rDIYHKevMb20x4z0wkAHEeUHFpSlM
bzCJaPuDQVz2Wqj8I/7KyZm5JP3BNVGUxp532LUweluyZ6S7ul19PoFBQIYUjtIw
j7RqowFWAIvTk13VK1dwBTGq+Ft21mmqQtR/Ld1T8jz5jl1/lJrrjt1iMa/1v7Dz
A77BB8+zn+DzcaDMyw4hG5qeRSa8yFb65y/1v0+/lRQ=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7
rfYVCl+ph5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBg
n18RTHnTD9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2
e6StagubO+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8e
l2z375LDd2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKf
RiY0ckFuu/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/
MR/JMR9nceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F
7q6ckUbIgpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm
64XjXNjP9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3
Q4E2w6Aud9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCI
DiQVG30eHhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ik
D4me6o58sq/IQVmyem1M/E0CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 295898355185398286409910966151987123118633
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-23 01:53:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-21 01:53:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ined.sd70.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2214 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'airport.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'allsaints.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'arden.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspen.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'awnes.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'barker.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brooklyn.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'christtheking.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'courtenay.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cumberland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'denman.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'drcss.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ejdes.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ethelbert.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolwilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glacierview.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glh.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gpvanier.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandview.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'highland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hornbyisland.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'huband.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenoused.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'indigenouseducation.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ined.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ined.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isfeld.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'isp.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jhes.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'laketrail.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macneill.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'miraclebeach.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mms.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ochre.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oes.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'okf.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ose.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oss.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phoenix.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'puntledge.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queneesh.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robbroad.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royston.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sacredheart.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sess.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'smithjackson.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'soss.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stagnes.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmargaret.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmary.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stmichael.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ten.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'theratnerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ues.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uss.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valleyview.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vanier.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vast.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wci.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wcs.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.sd70.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whitmore.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.colegiogreenhills.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.comoxvalleyschools.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecscrusaders.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fatimaschoolwilton.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduatenorth.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.htcsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jackierobinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mvsd.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nelsondiocese.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nlsd113.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ranchitoelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robinsonelementary.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sd53.bc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.theratnerschool.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'youlearn.sd53.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600e2694bae26e8e94009e8861bb63b83d43ee7fe7488fba48f2893019dddf1dbfe0000016cbc650828000004030047304502203e5e5203b4b28d2a727fbe980ece34bf0776958a778a036587142c685a05be5d022100935d4f189f16b7c95c1b578d0cd35d133c40ea0a7b2179370d3dbc3feffc9e3700750063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d0000016cbc6508490000040300463044022001e4f721f7265cd8cb8ab11f807256ae6d9b3c1413ad6f3633eee9a92fd6b31b0220181bc9e965e90a2ed5c5d4b6d7df1f4a6aedd6b440f65c8f1005031fe01601ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0042fdfecb7798ee3e357133d77268ea7579471e59cd4e9c6a01531139ab7b1b6f11248ec8a729b4a22e30b7ddf5854ee832924009f1594922374195a621638daf0dc0d545440ef74a894a8b294857b6c26c58f83982da8de9727bbb5f6293f9da891b9be89307b17ff54d2b0c860729ebcc6f6d31e33d309001c47941c5a5294c6f308968fb83415cf65aa8fc23fecac999b924fdc1355194c69e77d8b5307a5bb267a4bbba5d7d3e81414086148ed2308fb46aa30156008bd3935dd52b57700531aaf85b76d669aa42d47f2ddd53f23cf98e5d7f949aeb8edd6231aff5bfb0f303bec107cfb39fe0f371a0cccb0e211b9a9e4526bcc856fae72ff5bf4fbf9514