grandview.mvsd.ca

Issued by GTS CA 1P5

About this certificate

This digital certificate with serial number f7:d1:66:58:c8:b7:57:1f:11:8f:d8:02:d0:2e:89:26 was issued on by Google Trust Services LLC.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=grandview.mvsd.ca

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): f7:d1:66:58:c8:b7:57:1f:11:8f:d8:02:d0:2e:89:26
Serial Number (int): 329406580842284520115505202828516690214
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 7a:cc:e1:60:db:39:5d:f4:7e:a8:f4:e3:71:57:4f:0f:ec:57:64:be
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8

Fingerprint (sha1): 33:48:e3:a1:30:ca:9d:1d:96:68:45:52:71:9a:96:bf:e7:d0:97:1e
Fingerprint (sha256): be:05:da:6d:15:9c:b2:b5:92:55:fe:c5:af:8a:f6:87:b7:d5:f5:94:1c:44:cd:b7:74:c4:8c:08:b1:d7:e4:1f

Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1p5/LMIS-mJgSiA
CRL Distribution Point: http://crls.pki.goog/gts1p5/t_gxjQT0328.crl

Check the revocation status for certificate grandview.mvsd.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for grandview.mvsd.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

grandview.mvsd.ca

Other certificates including the domain name mvsd.ca

(limited to 100 certificates)
glacierview.comoxvalleyschools.ca
ethelbert.mvsd.ca
admin.bicschools.net
adfs.mvsd.ca
careerprograms.comoxvalleyschools.ca
gpes.mvsd.ca
admin.bicschools.net
admin.colegiogreenhills.com
www.mvsd.ca
whitmore.mvsd.ca
www.ranchitoelementary.org
mail.merlin.ca
www.nlsd113.ca
wes.mvsd.ca
okf.sd53.bc.ca
nelsondiocese.org
wes.mvsd.ca
printshop.comoxvalleyschools.ca
comoxvalleyschools.ca
elem.bicschools.net
smithjackson.mvsd.ca
isp.mvsd.ca
whitmore.mvsd.ca
drcss.mvsd.ca
stmary.htcsd.ca
secure.mvsd.ca
admin.colegiogreenhills.com
wci.mvsd.ca
sess.sd53.bc.ca
mail.merlin.ca
mms.mvsd.ca
sharepoint.mvsd.ca
youlearn.sd53.bc.ca
macneill.mvsd.ca
isp.mvsd.ca
glh.mvsd.ca
www.wexford.edu.mx
admin.wearedace.org
oss.sd53.bc.ca
www.sd53.bc.ca
mail.merlin.ca
soss.sd53.bc.ca
mail.mvsd.ca
indigenouseducation.comoxvalleyschools.ca
barker.mvsd.ca
ose.sd53.bc.ca
res.mvsd.ca
adss.sd70.bc.ca
isp.mvsd.ca
mail.merlin.ca
www.mvsd.ca
ochre.mvsd.ca
gpes.mvsd.ca
mail.merlin.ca
htcsd.ca
mail.merlin.ca
www.wearedace.org
glh.mvsd.ca
accessedge.merlin.ca
mail.merlin.ca
indigenoused.comoxvalleyschools.ca
mail.merlin.ca
robinsonelementary.org
secure.mvsd.ca
www.nelsondiocese.org
www.mvsd.ca
isp.mvsd.ca
wes.mvsd.ca
drcss.mvsd.ca
smithjackson.mvsd.ca
sharepoint.mvsd.ca
res.mvsd.ca
adfs.mvsd.ca
mail.merlin.ca
res.mvsd.ca
mail.merlin.ca
ochre.mvsd.ca
macneill.mvsd.ca
mail.merlin.ca
wci.mvsd.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
ochre.mvsd.ca
ochre.mvsd.ca
res.mvsd.ca
grandview.mvsd.ca
www.gpcsd.ca
barker.mvsd.ca
wes.mvsd.ca
secure.mvsd.ca
macneill.mvsd.ca
fatimaschoolwilton.com
gpes.mvsd.ca
grandview.mvsd.ca
www.mvsd.ca
Transfinder.mvsd.ca
hes.mvsd.ca
www.theratnerschool.org
ethelbert.mvsd.ca
ten.sd53.bc.ca

Certificate

The complete raw certificate details for grandview.mvsd.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZzCCBE+gAwIBAgIRAPfRZljIt1cfEY/YAtAuiSYwDQYJKoZIhvcNAQELBQAw
RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM
TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNDAxMjMyMzI4WhcNMjQwNjMw
MjMyMzI3WjAcMRowGAYDVQQDExFncmFuZHZpZXcubXZzZC5jYTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBAN2o4bivT3GkafBDKHC/h5+xXu+uzQ/6bU+L
kJg/mf/UBXE4w7q61CFBfOZi8P4IJ+bM8VMfgbRjGs1/ExCUbVzlAmKqjA2MHu2k
oS5d2Z9fnp47F3q2YY0F6orJJn+mZDsEqOPTskxvVCbNH8H9rg4EnYasN48LWdIL
WniwDxaED4R7DtkjJrhaett+JkaOuKKuk/7TX5Tfdw+HM9GdqXerDpp2gmK9X37J
fj7JiBapjUlwWja00OIhfcYcwz0mULNPJtNwfM1B5CaxubvLmp6kpeC2VmzfIxrQ
iZKOQMpPl5RC/I2svG48VPxKQEMlOoMbEjjhLVqtEWoswaIsoJECAwEAAaOCAngw
ggJ0MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAMBgNVHRMB
Af8EAjAAMB0GA1UdDgQWBBR6zOFg2zld9H6o9ONxV08P7FdkvjAfBgNVHSMEGDAW
gBTV/J4N3x7K3QiXl24rxV/FK/XsuDB4BggrBgEFBQcBAQRsMGowNQYIKwYBBQUH
MAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3RzMXA1L0xNSVMtbUpnU2lBMDEG
CCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVwby9jZXJ0cy9ndHMxcDUuZGVy
MBwGA1UdEQQVMBOCEWdyYW5kdmlldy5tdnNkLmNhMCEGA1UdIAQaMBgwCAYGZ4EM
AQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDovL2NybHMu
cGtpLmdvb2cvZ3RzMXA1L3RfZ3hqUVQwMzI4LmNybDCCAQQGCisGAQQB1nkCBAIE
gfUEgfIA8AB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABjpww
hBkAAAQDAEcwRQIhAPNE4zQU/ZV7jwjew6nWawNrfkHRwQgKrKjT63yJ0g37AiAB
8ZsRHQ7JXxAGO6XtNroqPvzlQWO6uxXr2j6ARmpviQB2ANq2v2s/tbYin5vCu1xr
6HCRcWy7UYSFNL2kPTBI1/urAAABjpwwhBkAAAQDAEcwRQIgaB81Z/BcKQrPg95N
2/VItl0LrZPa79TSVLuUPXRGNy4CIQCZFOArxI3EsUvFbutWHUKc4USxqgVK221r
tyTn1Ted3zANBgkqhkiG9w0BAQsFAAOCAQEAMwjQy7QiW7jgLycyFSjPIYp+Rv8X
DwxrZscnjcuGFHwbX14SyoYZFrqm2GxWKP3Aa+fSdTSyWqdIVNxuvfceXtrVfAEY
Yn4pt7bncSL9saN+EISbCGT82IR7MruBmU1Fp41198EtdxVOhCdQY55Sapu8XwG8
dsgbuV+0IppK0l/RZbj1RLt0FsmBPjiEwxQDn6PxLkwD+5O1YkrLFKDmi3Iz9oiT
78O/gLTuiaqZCJLblwF9BqK4Jcem2A5hazTjoPq0spQK42G1YnhWG9EW2FLu1fSY
rmQfNfHtEHREKKLDRNnAn5q92kGNR5g2q7D+CfKIBjEAk0QZAmFXXtafCg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ajhuK9PcaRp8EMocL+H
n7Fe767ND/ptT4uQmD+Z/9QFcTjDurrUIUF85mLw/ggn5szxUx+BtGMazX8TEJRt
XOUCYqqMDYwe7aShLl3Zn1+enjsXerZhjQXqiskmf6ZkOwSo49OyTG9UJs0fwf2u
DgSdhqw3jwtZ0gtaeLAPFoQPhHsO2SMmuFp6234mRo64oq6T/tNflN93D4cz0Z2p
d6sOmnaCYr1ffsl+PsmIFqmNSXBaNrTQ4iF9xhzDPSZQs08m03B8zUHkJrG5u8ua
nqSl4LZWbN8jGtCJko5Ayk+XlEL8jay8bjxU/EpAQyU6gxsSOOEtWq0RaizBoiyg
kQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 329406580842284520115505202828516690214
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-01 23:23:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-30 23:23:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'grandview.mvsd.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27981944079598407966647209137876730724706313698081612414482232610603094810807294545301525518026684050835811864328493032869751843139668659390346221183849011680664271918261494069482902734297799192523864437122637201696586964673026452494748776779921636148244466988962765949635488272781977412291103215752975758820927580904493246435623103252023358105464609492767236318288270839436124079586426319898340733607498149159706945419919867559954364031849505364589569989136194040464936340152607467076665156968184316452094112889912610295936043232214156720361916802164144484553704033794669706233177415070658242928520118375125221154961
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7acce160db395df47ea8f4e371574f0fec5764be
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/LMIS-mJgSiA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'grandview.mvsd.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/t_gxjQT0328.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f000760076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a740000018e9c3084190000040300473045022100f344e33414fd957b8f08dec3a9d66b036b7e41d1c1080aaca8d3eb7c89d20dfb022001f19b111d0ec95f10063ba5ed36ba2a3efce54163babb15ebda3e80466a6f89007600dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018e9c30841900000403004730450220681f3567f05c290acf83de4ddbf548b65d0bad93daefd4d254bb943d7446372e0221009914e02bc48dc4b14bc56eeb561d429ce144b1aa054adb6d6bb724e7d5379ddf
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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