ashlandcityccs.net
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number bd:cf:a5:53:7a:dd:5d:3c:0d:7c:65:b8:f2:ac:d5:c2 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=ashlandcityccs.net
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): bd:cf:a5:53:7a:dd:5d:3c:0d:7c:65:b8:f2:ac:d5:c2Serial Number (int): 252302249864612684599683564889980065218
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: a3:fa:d6:6c:b5:75:83:fa:e2:99:66:15:cc:00:99:44:bc:fc:cc:4b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): 86:50:ff:ae:ab:32:23:7f:c9:bd:2f:56:2e:f4:33:18:cd:0f:9e:43
Fingerprint (sha256): b7:6c:0f:00:fa:47:b6:25:2f:72:53:91:93:13:18:30:65:4e:bf:0f:c4:5b:9f:81:4e:9d:86:08:aa:0a:29:10
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/jvMFlxn11uECRL Distribution Point: http://crls.pki.goog/gts1p5/-UJLLl0QCdc.crl
Check the revocation status for certificate ashlandcityccs.net
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for ashlandcityccs.net
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
ashlandcityccs.net
Other certificates including the domain name ashlandcityccs.net
(limited to 100 certificates)
ms.bsd29j.com
www.cranburyschool.org
admin.bonnerprendie.com
www.ashlandcityccs.net
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
debusk.greenek12.org
ashlandcityccs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
admin.ashlandcityccs.net
summer.materdeicatholic.org
gageparkhs.org
www.grandcenterartsacademy.org
www.sttheresaschoolpalmsprings.org
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.jh.iasd.cc
www.tjs.org
2.southampton.k12.nj.us
msdurham.org
admin.arcataschooldistrict.org
healthystartacademy.com
admin.ps17queens.com
admin.arcataschooldistrict.org
harpethhighccs.net
www.ourladyofgrace.co
sainte-school.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
ashlandcityccs.net
bronxdalehs.org
flacsms.flacsnyc.com
www.afsenyc.org
2.southampton.k12.nj.us
westcheathamccs.net
sh.iasd.cc
www.lacountycharterselpa.org
grandcenterartsacademy.org
admin.mhs.molineschools.org
www.lincolncharter.org
admin.bbel.bbrook.org
2.southampton.k12.nj.us
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net
www.cranburyschool.org
admin.bonnerprendie.com
www.ashlandcityccs.net
admin.estrellitahigh.com
admin.aes.lammersvilleschooldistrict.net
ashlandcityccs.net
www.bronxdalehs.org
www.healthystartacademy.com
admin.cheathamhighccs.net
admin.aes.lammersvilleschooldistrict.net
debusk.greenek12.org
ashlandcityccs.net
hhs.hattiesburgpsd.com
woodsboro.pylusd.org
admin.ashlandcityccs.net
summer.materdeicatholic.org
gageparkhs.org
www.grandcenterartsacademy.org
www.sttheresaschoolpalmsprings.org
balloustay.com
nphs.bpusd.net
lacountycharterselpa.org
www.colegioangloamericanohgo.edu.mx
admin.aes.lammersvilleschooldistrict.net
admin.glenknoll.org
admin.jh.iasd.cc
www.tjs.org
2.southampton.k12.nj.us
msdurham.org
admin.arcataschooldistrict.org
healthystartacademy.com
admin.ps17queens.com
admin.arcataschooldistrict.org
harpethhighccs.net
www.ourladyofgrace.co
sainte-school.org
admin.arcataschooldistrict.org
colegioangloamericanohgo.edu.mx
admin.arcataschooldistrict.org
admin.denver.lincolncharter.org
ashlandcityccs.net
bronxdalehs.org
flacsms.flacsnyc.com
www.afsenyc.org
2.southampton.k12.nj.us
westcheathamccs.net
sh.iasd.cc
www.lacountycharterselpa.org
grandcenterartsacademy.org
admin.mhs.molineschools.org
www.lincolncharter.org
admin.bbel.bbrook.org
2.southampton.k12.nj.us
admin.lincolnton.lincolncharter.org
southbayadult.org
www.annaleeelementaryandsteammagnet.org
lincolnton.lincolncharter.org
mhs.molineschools.org
admin.sainte-school.org
admin.aes.lammersvilleschooldistrict.net
admin.afsenyc.org
bbcms.bbrook.org
cm.dekalbcentral.net
admin.bpusd.net
admin.houstonelem.net
admin.afsenyc.org
admin.annaleeelementaryandsteammagnet.org
admin.bereanchristian.com
admin.afsenyc.org
admin.aes.lammersvilleschooldistrict.net
Certificate
The complete raw certificate details for ashlandcityccs.net in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFaTCCBFGgAwIBAgIRAL3PpVN63V08DXxluPKs1cIwDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwNzI4MDMwNTAyWhcNMjMxMDI2 MDMwNTAxWjAdMRswGQYDVQQDExJhc2hsYW5kY2l0eWNjcy5uZXQwggEiMA0GCSqG SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPrAbZDPpnFf7UJWsMDF50wDXAGwiqbCvk Y4K74U2ZYixHuPIbbuMD1MO7j9yHdnr/yVbiGxMb+YXH19t2qMwGjQ8xS/T9ZMYd 1uzCy2keEQgdUP7wcO8q8KeZ0WQVhSf7JayCnlnWt3fegumye+BiWGw6LbrageYI 90MLRTtJvPm1dNaC47WjM8YppABNEq32P/G5nImybIHwP8FQrA/McFhIsyW9y7ul QcmMRS1zGka++SAKHn1dASP2EApqpcOSFO2U6OI/FL0uvFTAQiJxksCH/6QZtUlk 2Orno1skbWldwarfpeMuFy1vR4x9Tk+jpsCSa1tcr8NeMkHknUiTAgMBAAGjggJ5 MIICdTAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0T AQH/BAIwADAdBgNVHQ4EFgQUo/rWbLV1g/rimWYVzACZRLz8zEswHwYDVR0jBBgw FoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUF BzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9qdk1GbHhuMTF1RTAx BggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRl cjAdBgNVHREEFjAUghJhc2hsYW5kY2l0eWNjcy5uZXQwIQYDVR0gBBowGDAIBgZn gQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Js cy5wa2kuZ29vZy9ndHMxcDUvLVVKTExsMFFDZGMuY3JsMIIBBAYKKwYBBAHWeQIE AgSB9QSB8gDwAHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGJ mqvimgAABAMARzBFAiAAsfE5kfJ6r6744XWpRgb2j6ATD90hcprNegflXSN3xgIh AP8dg1jKLI+IBt3f1WMVHaypE7lthA/KMPmvc0ow04kjAHYArfe++nz/EMiLnT2c Hj4YarRnKV3PsQwkyoWGNOvcgooAAAGJmqvivAAABAMARzBFAiEAzRHENZ94k6IK PhVsbxX0oQsSwlSSWNg8LJl3ZLzmbsUCIGCsS6ADB1SGYWnd4NSk0YnINgA+doBC 25zOA1hA1icAMA0GCSqGSIb3DQEBCwUAA4IBAQCIKATKE4QCuQx46ij6AVyu3iSB xynEOGaKaI9q+chehXwQx4H3TTr8sYstXh/4DMMOLGmc2ZvvN0/PQEstEx7dyKH3 heuaZ7TtVsTRe2T8F5Kd/yh+a1QhGIloDbc5uZCWuLf7sHZ7wFi2EulVn0NaW7KQ IEJFTpdzB2uX4q2PB4WmclFqWsEoFVWjCvzuBbIRoFa7aL3Yb4oBiLWkgfNF1/NU X/3joIPFbUAkLoV8v6TjquAkV0Swl1toDiC627Ynzp4dhNh6oRdZ+W4nhfCaE52z 9bEAlDOF5wDtSXC9EMU4/n+yW6p5DyjNwT+YBM8TXdfMuZ7P5Sot/55NnHJz -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6wG2Qz6ZxX+1CVrDAxe dMA1wBsIqmwr5GOCu+FNmWIsR7jyG27jA9TDu4/ch3Z6/8lW4hsTG/mFx9fbdqjM Bo0PMUv0/WTGHdbswstpHhEIHVD+8HDvKvCnmdFkFYUn+yWsgp5Z1rd33oLpsnvg YlhsOi262oHmCPdDC0U7Sbz5tXTWguO1ozPGKaQATRKt9j/xuZyJsmyB8D/BUKwP zHBYSLMlvcu7pUHJjEUtcxpGvvkgCh59XQEj9hAKaqXDkhTtlOjiPxS9LrxUwEIi cZLAh/+kGbVJZNjq56NbJG1pXcGq36XjLhctb0eMfU5Po6bAkmtbXK/DXjJB5J1I kwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 252302249864612684599683564889980065218 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-28 03:05:02 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-26 03:05:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ashlandcityccs.net' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26216158679759146631242383038017210565675554019834701048887591850247228080070804024649816889529824013357697467357313420061219237999208308938575203426502756757009312461521058109579010937676761997161666274980604575692178854320971986252330754738400797406184606238399827648579911116565391088253261222326112802888781043394318210325932396798882858287716409470440952857492174543447462883695082193955864464880398928526629398890702702708031989452101123780661023475130671095951880540923854263511046959177302223213039929667049342896117394571443120036864141078193260279236162450819231598527331024831546156911898370705511352715411 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) a3fad66cb57583fae2996615cc009944bcfccc4b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/jvMFlxn11uE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ashlandcityccs.net' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/-UJLLl0QCdc.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007600b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001899aabe29a0000040300473045022000b1f13991f27aafaef8e175a94606f68fa0130fdd21729acd7a07e55d2377c6022100ff1d8358ca2c8f8806dddfd563151daca913b96d840fca30f9af734a30d38923007600adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001899aabe2bc0000040300473045022100cd11c4359f7893a20a3e156c6f15f4a10b12c2549258d83c2c997764bce66ec5022060ac4ba0030754866169dde0d4a4d189c836003e768042db9cce035840d62700 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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