holmeselem.flintschools.org

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number 80:db:8a:66:bb:1e:c0:9d:0e:47:3b:1d:af:c6:1a:6d was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=holmeselem.flintschools.org

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 80:db:8a:66:bb:1e:c0:9d:0e:47:3b:1d:af:c6:1a:6d
Serial Number (int): 171281103584197113570528774983766121069
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: b5:3a:c8:c9:ad:b3:42:02:af:ce:39:4a:0d:20:75:85:b7:27:5b:89
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 11:d6:98:64:0e:3c:f1:4d:2c:21:f0:51:80:6d:c8:74:98:c8:e3:20
Fingerprint (sha256): bc:96:64:6b:04:ef:ed:2e:c3:36:e3:bf:3b:be:83:32:9f:ea:b7:25:bc:65:cf:49:1d:c7:b9:5f:23:b9:8e:8a

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/VH6tgdO7OgY
CRL Distribution Point: http://crls.pki.goog/gts1p5/WEFsPjcQQgI.crl

Check the revocation status for certificate holmeselem.flintschools.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for holmeselem.flintschools.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

holmeselem.flintschools.org

Other certificates including the domain name flintschools.org

(limited to 100 certificates)
admin.brownell.flintschools.org
sequoiasamurai.com
admin.brownell.flintschools.org
www.ndisd.net
admin.eqaschools.org
bps.bayfield.k12.co.us
eisenhower.flintschools.org
admin.amschool.edu.sv
admin.belmonthighschool.org
admin.amschool.edu.sv
bell.robla.k12.ca.us
flintschools.org
admin.potter.flintschools.org
admin.church.ihom.org
flintschools.org
admin.brownell.flintschools.org
admin.amschool.edu.sv
admin.belmonthighschool.org
admin.brownell.flintschools.org
admin.brownell.flintschools.org
admin.aloe.visd.net
admin.amschool.edu.sv
admin.belmonthighschool.org
www.es.bellevue-schools.com
admin.arete.prsd.us
admin.belmonthighschool.org
admin.amschool.edu.sv
www.freeman.flintschools.org
www.lbischools.org
flintschools.org
www.bhswca.com
admin.belmonthighschool.org
remote.flintschools.org
admin.amschool.edu.sv
admin.belmonthighschool.org
admin.belmonthighschool.org
freeman.flintschools.org
eqaschools.org
lvmhs.lucernevalleyunified.org
www.olsorrows.com
flintschools.org
admin.brownell.flintschools.org
admin.amschool.edu.sv
admin.aloe.visd.net
freeman.flintschools.org
admin.amschool.edu.sv
admin.ps33.jcboe.org
flintschools.org
admin.belmonthighschool.org
www.jrsr.bellevue-schools.com
flintschools.org
ninth.frenship.us
admin.bell.robla.k12.ca.us
admin.corey.bpsd.k12.ca.us
*.flintschools.org
admin.jewishacademyorlando.org
es.notredameacademy.org
admin.dtm.flintschools.org
www.bellevue-schools.com
www.somonauk.net
bhs.bayfield.k12.co.us
admin.brownell.flintschools.org
admin.cove.prioritycharterschools.org
flintschools.org
admin.amschool.edu.sv
swa.flintschools.org
admin.aloe.visd.net
admin.sfxcatholicschool.org
mahs.flintschools.org
admin.flintschools.org
admin.brownell.flintschools.org
admin.bell.robla.k12.ca.us
admin.aloe.visd.net
bis.bayfield.k12.co.us
admin.bell.robla.k12.ca.us
admin.belmonthighschool.org
admin.brownell.flintschools.org
admin.williamwood.visd.net
www.frenship.us
www.kippokc.org
admin.aloe.visd.net
admin.belmonthighschool.org
admin.flintschools.org
admin.aloe.visd.net
doyleryder.flintschools.org
www.ibipanama.edu.pa
admin.glenwood.robla.k12.ca.us
admin.bell.robla.k12.ca.us
admin.brownell.flintschools.org
admin.eagles.lucernevalleyunified.org
flintschools.org
holmeselem.flintschools.org
admin.brownell.flintschools.org
admin.amschool.edu.sv
admin.bell.robla.k12.ca.us
usf.com.mx
admin.amschool.edu.sv
www.brownell.flintschools.org
admin.family.mypagosaschools.com
admin.amschool.edu.sv

Certificate

The complete raw certificate details for holmeselem.flintschools.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFfDCCBGSgAwIBAgIRAIDbima7HsCdDkc7Ha/GGm0wDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjMwODA0MDQwNDI5WhcNMjMxMTAy
MDQwNDI4WjAmMSQwIgYDVQQDExtob2xtZXNlbGVtLmZsaW50c2Nob29scy5vcmcw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjRID2C2zAJhRTDujBDrnO
lEQznO+hQcHmc53suIE4/W54x0sGj6gT8B04cCATppyUGtBrv4OAFEbr0GK/lElk
1TAA6RTwst7r+IyKbgIXsm6dfSyINFNYJgcaJbefDb/0ubXPit0hmDVJ0m81Hytv
8As3ncTZ/txtSc7+xMlfX2dteM4nT/KeeyuWmiuzAyOBGQREN2jsv1ltb1Wjy8Mu
LtJEBxoh/tZb56qNCg5y9u+UjVzH6mSPtbyBKa6VTSIVkFqfptH2cLjD1PML7JIl
rpCRSGih5i86l4BWyz9CjDJPnEEY1rYZNAd3+FsMZvFFP7qHAucX8MK+MCczW9fn
AgMBAAGjggKDMIICfzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUH
AwEwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUtTrIya2zQgKvzjlKDSB1hbcnW4kw
HwYDVR0jBBgwFoAU1fyeDd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBq
MDUGCCsGAQUFBzABhilodHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9WSDZ0
Z2RPN09nWTAxBggrBgEFBQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMv
Z3RzMXA1LmRlcjAmBgNVHREEHzAdghtob2xtZXNlbGVtLmZsaW50c2Nob29scy5v
cmcwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8BgNVHR8ENTAz
MDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvV0VGc1BqY1FRZ0ku
Y3JsMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYA6D7Q2j71BjUy51covIlryQPT
y9ERa+zraeF3fW0GvW4AAAGJvu7SDwAABAMARzBFAiEAuw1pfFSn63qUt+p4lHvD
2AGze2krMTZbNhfO9oLiQN0CIBbh/Ypl4np8HmTZG2LeRfcGbSMnbh/0B9gDj0nB
EgqyAHcAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGJvu7WMQAA
BAMASDBGAiEA6MgMpCA4jwjaoMHNZkfjmllfYxIo3pF/HW1qpYo2i3kCIQCzuAIJ
aUjSxzAC9twqeMDQ785fi5fBOGjlaOyhwd+rNjANBgkqhkiG9w0BAQsFAAOCAQEA
LVmliy0WhAmHvG/oLLjLSIyyhuctmEOkwCp9ifFNQhIk+WMJprbO40wKTAkaEZfg
VAqFUIDZKbsWCwFJSmDRvvKKIDR2AiCl5NJrZj3IRNOhN4wlUhvns3EdRQqSJ4ji
cFoPB3N8dOplvwI3JSwjUd0n1erzpbBKpyPsWc2WawdxRXu7a6LUevkRDc0wFZX6
dh3lBDn+gu9kBlgYdmRou7gHas34+uv3Ki5FTqz0afIpj8zB3zJc3LXjxgEK8HCr
/IEfpEOaAsK2uIx9fn/0ACAsyuhtrcpmpfCLbrzvVbSbxoi/UmFROMPYgDAEb89m
UK6JgDrrkUH8M4n2gCeVGA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo0SA9gtswCYUUw7owQ65
zpREM5zvoUHB5nOd7LiBOP1ueMdLBo+oE/AdOHAgE6aclBrQa7+DgBRG69Biv5RJ
ZNUwAOkU8LLe6/iMim4CF7JunX0siDRTWCYHGiW3nw2/9Lm1z4rdIZg1SdJvNR8r
b/ALN53E2f7cbUnO/sTJX19nbXjOJ0/ynnsrlporswMjgRkERDdo7L9ZbW9Vo8vD
Li7SRAcaIf7WW+eqjQoOcvbvlI1cx+pkj7W8gSmulU0iFZBan6bR9nC4w9TzC+yS
Ja6QkUhooeYvOpeAVss/QowyT5xBGNa2GTQHd/hbDGbxRT+6hwLnF/DCvjAnM1vX
5wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 171281103584197113570528774983766121069
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-04 04:04:29 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-02 04:04:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'holmeselem.flintschools.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20610624169749125015491856804345088995147020749254413850644008418971261776748810835876915545789147611279998910727709067003094732473167195161396166438884370804671571233865516343899240605208805028333692860074921135167136223220182609520336962500131373451659304990597246549886196001712134865201931482355588175489102338432068599456825470050399549304881675133950601712693017600401702602349775574642026883870152190296629058113840890000942367893940044811658816785113997445781210588101701345836616306386791737858479354939991366859369530200099701434977071916943870389909258601704269790456977724925400688375776105479647627302887
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b53ac8c9adb34202afce394a0d207585b7275b89
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/VH6tgdO7OgY'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'holmeselem.flintschools.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/WEFsPjcQQgI.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000189beeed20f0000040300473045022100bb0d697c54a7eb7a94b7ea78947bc3d801b37b692b31365b3617cef682e240dd022016e1fd8a65e27a7c1e64d91b62de45f7066d23276e1ff407d8038f49c1120ab20077007a328c54d8b72db620ea38e0521ee98416703213854d3bd22bc13a57a352eb5200000189beeed6310000040300483046022100e8c80ca420388f08daa0c1cd6647e39a595f631228de917f1d6d6aa58a368b79022100b3b802096948d2c73002f6dc2a78c0d0efce5f8b97c13868e568eca1c1dfab36
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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