crma12.org
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 14:a4:81:6a:55:dc:c7:76:0d:d4:5a:0a:1f:0a:b6:72 was issued on by Google Trust Services LLC.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=crma12.org
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 14:a4:81:6a:55:dc:c7:76:0d:d4:5a:0a:1f:0a:b6:72Serial Number (int): 27438721456095258210431578148912674418
Serial Number lenght: 125 bits, 16 octets
SubjectKeyId: 2a:1c:5a:11:ad:b7:cb:f9:c2:6d:5e:a2:0f:14:30:2f:3c:51:f0:3b
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): d4:83:43:bf:89:2b:5a:8b:37:16:34:69:68:69:1d:88:c6:6d:96:05
Fingerprint (sha256): ba:36:5f:1a:d8:91:b4:bd:f7:92:e5:6f:9b:4a:6c:d1:e7:b6:7c:d8:1d:1f:dd:ff:3b:71:3b:b2:57:ad:9e:52
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/JPF88sFB-94CRL Distribution Point: http://crls.pki.goog/gts1p5/l67p7vqJMw8.crl
Check the revocation status for certificate crma12.org
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for crma12.org
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
crma12.org
Other certificates including the domain name crma12.org
(limited to 100 certificates)
www.oahornets.org
www.burnet.txed.net
admin.ames.district96.org
68thstreetes.com
www.livingstonusd.org
www.risingstarisd.org
admin.aasdcat.com
edwhite.org
cp.livingstonusd.org
admin.ames.district96.org
eastwindsorregionalschools.com
admin.athlosbrooklynpark.org
admin.garvyschool.org
admin.ames.district96.org
hs.humphreyscountysd.org
6gc.mead354.org
68thstreetes.com
admin.aasdcat.com
admin.collegeachievegreaterasburyparkcharterschool.org
crma12.org
www.regentsas.org
wright-es.weatherfordisd.com
admin.chestnut.painesville-city.k12.oh.us
68thstreetes.com
68thstreetes.com
admin.ath.luling.txed.net
68thstreetes.com
admin.nes.davidson.k12.nc.us
www.fremontelementary.us
www.garvyschool.org
admin.athlosbrooklynpark.org
amjhs.mcisd.net
admin.ames.district96.org
www.186streetschool.com
admin.athlosbrooklynpark.org
wclark.k12.in.us
admin.kimmel.aasdcat.com
www.comfort.txed.net
admin.ames.district96.org
68thstreetes.com
turner.wisd.org
admin.athlosbrooklynpark.org
crockett-es.weatherfordisd.com
admin.wilkescountyschools.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
6gc.mead354.org
colonies.sunrisesd.ca
admin.athlosbrooklynpark.org
admin.crma12.org
www.wagnerwildcats.org
crma12.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
www.cat.mx
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
crma12.org
admin.athlosbrooklynpark.org
admin.ames.district96.org
68thstreetes.com
admin.athlosbrooklynpark.org
corinthschools.org
www.oahornets.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
admin.wagnerwildcats.org
admin.sac.gcsd.ms
second.exteraschools.org
www.burnet.txed.net
admin.ames.district96.org
68thstreetes.com
www.livingstonusd.org
www.risingstarisd.org
admin.aasdcat.com
edwhite.org
cp.livingstonusd.org
admin.ames.district96.org
eastwindsorregionalschools.com
admin.athlosbrooklynpark.org
admin.garvyschool.org
admin.ames.district96.org
hs.humphreyscountysd.org
6gc.mead354.org
68thstreetes.com
admin.aasdcat.com
admin.collegeachievegreaterasburyparkcharterschool.org
crma12.org
www.regentsas.org
wright-es.weatherfordisd.com
admin.chestnut.painesville-city.k12.oh.us
68thstreetes.com
68thstreetes.com
admin.ath.luling.txed.net
68thstreetes.com
admin.nes.davidson.k12.nc.us
www.fremontelementary.us
www.garvyschool.org
admin.athlosbrooklynpark.org
amjhs.mcisd.net
admin.ames.district96.org
www.186streetschool.com
admin.athlosbrooklynpark.org
wclark.k12.in.us
admin.kimmel.aasdcat.com
www.comfort.txed.net
admin.ames.district96.org
68thstreetes.com
turner.wisd.org
admin.athlosbrooklynpark.org
crockett-es.weatherfordisd.com
admin.wilkescountyschools.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
6gc.mead354.org
colonies.sunrisesd.ca
admin.athlosbrooklynpark.org
admin.crma12.org
www.wagnerwildcats.org
crma12.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
www.cat.mx
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
crma12.org
admin.athlosbrooklynpark.org
admin.ames.district96.org
68thstreetes.com
admin.athlosbrooklynpark.org
corinthschools.org
www.oahornets.org
admin.athlosbrooklynpark.org
admin.athlosbrooklynpark.org
admin.wagnerwildcats.org
admin.sac.gcsd.ms
second.exteraschools.org
Certificate
The complete raw certificate details for crma12.org in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFWTCCBEGgAwIBAgIQFKSBalXcx3YN1FoKHwq2cjANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDA0MDEwODUzMjVaFw0yNDA2MzAw ODUzMjRaMBUxEzARBgNVBAMTCmNybWExMi5vcmcwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDEhzlBtvs6wXme2ljt4/NpcC2Z3mZOh3OJsKdOWkc+FrU4 yAOCu9jzStpCeVzBmiVsstADBHpc/h9n3cKRLvQJ0IC9yuKvyjZFslPZ1CZKL1VJ 56f5nxP3ETdgQGCRYw1mMTLuLwnaJqzUpoNSPzWCjwVEIxc0d27F6ljdcSxzatsI 3Oio8YQEO155aGokdSsIfiS5RqQWbfStrc1ez+SoTRP9iXwkL7AGDDZCsWLfMTR4 iFIzJpPc77t7u8gmULRohLEhbHV84KlSb3xd1O1PzkNkvAl+NGDRZROOOZih9QgR LQQl+A1QvBI8c3oxfmxTgc9QkmlWPbu2Ix1fEk73AgMBAAGjggJyMIICbjAOBgNV HQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIwADAd BgNVHQ4EFgQUKhxaEa23y/nCbV6iDxQwLzxR8DswHwYDVR0jBBgwFoAU1fyeDd8e yt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilodHRw Oi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9KUEY4OHNGQi05NDAxBggrBgEFBQcw AoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAVBgNVHREE DjAMggpjcm1hMTIub3JnMCEGA1UdIAQaMBgwCAYGZ4EMAQIBMAwGCisGAQQB1nkC BQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMucGtpLmdvb2cvZ3RzMXA1 L2w2N3A3dnFKTXc4LmNybDCCAQUGCisGAQQB1nkCBAIEgfYEgfMA8QB3ANq2v2s/ tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABjpkT97wAAAQDAEgwRgIhALA8 /c9TkLe2J/Dkpv/B2SWWBvzn59iSIRhUNHEx9MPMAiEA6CilzQxfagqBDbBqnpAK Bv107VuR1eMhLNL9xdjIXhQAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlG cR+1mwAAAY6ZE/d4AAAEAwBHMEUCIFpYVG1JMIWAe8Ys1f1qrhAAeQxB6h6oMcgB d3GRzMFsAiEAkqbiiXQEtMNIXKmWOi/AeG99FbQ1LtHisWQauV3k1rswDQYJKoZI hvcNAQELBQADggEBAKTtt4klTLu9FWL3G4u0RUf8uEbcS1c9LOFB7UqkXvxvhit8 ORuGlbiFJ4uZ7M1FWX8lKb/rpcbhK7oss7PhptRdsp1G4t38lkkEm3UqBQIL84Ud /DXlMaYWcWO/IMT+h/60xn3qRuolUTHdXGT7+TTidmBqWEnmjg8xW9bXeq8BZgWB wBVrx+CzY2v/vgR5/xwX6Ged3A28bolsoNDXxuDO3w1goHfwL+HpSwWKEL+yq15n B9lVi+WPE3lJc/umCmxftRuOUkMU33WA9Qq9B2m15mSRyP4zl/j41n5WnHDGCNxe QXVUfv+QHvqZtB08a+Cu0rQ9lys0hFXpGb6fcs4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIc5Qbb7OsF5ntpY7ePz aXAtmd5mTodzibCnTlpHPha1OMgDgrvY80raQnlcwZolbLLQAwR6XP4fZ93CkS70 CdCAvcrir8o2RbJT2dQmSi9VSeen+Z8T9xE3YEBgkWMNZjEy7i8J2ias1KaDUj81 go8FRCMXNHduxepY3XEsc2rbCNzoqPGEBDteeWhqJHUrCH4kuUakFm30ra3NXs/k qE0T/Yl8JC+wBgw2QrFi3zE0eIhSMyaT3O+7e7vIJlC0aISxIWx1fOCpUm98XdTt T85DZLwJfjRg0WUTjjmYofUIES0EJfgNULwSPHN6MX5sU4HPUJJpVj27tiMdXxJO 9wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 27438721456095258210431578148912674418 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 08:53:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 08:53:24 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'crma12.org' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24809389044834479828244737310611895710629010436960857544710203608627386821266828480663153735486006218623708578561491393598601256699436495799757541375903321467330520223627908055818023007525311599960327585913850350824269403581956776361708647987019213787684801756490551661362768023656182345571301988555066201897033114367519765036466701294302301871295410868576693259579841521203392033425995235901700628029603841118243422309192238280067827427925668398497894713013728264716159547861183477261724159856716051612737668816223034044282229205164764660851532886181230066400092961149073606531839701116546197019147864398701408702199 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2a1c5a11adb7cbf9c26d5ea20f14302f3c51f03b . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/JPF88sFB-94' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crma12.org' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/l67p7vqJMw8.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007700dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e9913f7bc0000040300483046022100b03cfdcf5390b7b627f0e4a6ffc1d9259606fce7e7d892211854347131f4c3cc022100e828a5cd0c5f6a0a810db06a9e900a06fd74ed5b91d5e3212cd2fdc5d8c85e14007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018e9913f778000004030047304502205a58546d493085807bc62cd5fd6aae1000790c41ea1ea831c801777191ccc16c02210092a6e2897404b4c3485ca9963a2fc0786f7d15b4352ed1e2b1641ab95de4d6bb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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