mail.pycsd.org

- Wayne-Finger Lakes BOCES -

Issued by GeoTrust EV SSL CA - G4

About this certificate

This digital certificate with serial number 01:1c:f1:15:e6:61:44:9b:e4:e5:8d:9e:ec:43:51:22 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Wayne-Finger Lakes BOCES

Company registration number: Government Entity
Organization: Wayne-Finger Lakes BOCES
Organization unit: Wayne-Finger Lakes BOCES
State / Province: New York
Locality: Newark
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:1c:f1:15:e6:61:44:9b:e4:e5:8d:9e:ec:43:51:22
Serial Number (int): 1479502103628925958697818031005061410
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: de:cf:5c:50:b7:ae:02:1f:15:17:aa:16:e8:0d:b5:28:9d:6a:5a:f3

Fingerprint (sha1): af:4e:35:bb:02:53:2b:24:30:50:3c:97:40:b2:cc:f2:d3:ee:98:57
Fingerprint (sha256): c0:9f:48:95:03:1c:ba:1a:63:d2:ba:1e:49:21:96:1a:6b:39:7f:46:db:c7:85:fb:d1:02:9d:a6:eb:bc:e9:1f

Issuing Certificate URL: http://gm.symcb.com/gm.crt

Revocation information

OCSP Server: http://gm.symcd.com
CRL Distribution Point: http://gm.symcb.com/gm.crl

Check the revocation status for certificate mail.pycsd.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.pycsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.pycsd.org

Other certificates including the domain name pycsd.org

(limited to 100 certificates)
www.fra.edu
academy.pycsd.org
pycsd.org
academy.pycsd.org
marvin.wisd.org
portal.pycsd.org
admin.southeast.varnett.org
www.tricityselpa.org
fhclergue.adsb.on.ca
3rcs.org
academy.pycsd.org
schooltool.pycsd.org
admin.preescolar.semperaltius.edu.mx
pycsd.org
cce.leusd.k12.ca.us
pycsd.org
mail.pycsd.org
www.tricityselpa.org
academy.pycsd.org
3rcs.org
ros.ldcsb.ca
mta-sts.pycsd.org
es.pycsd.org
gradebook.pycsd.org
admin.3rcs.org
schooltool.pycsd.org
smclassroom.pycsd.org
formit.pycsd.org
schooltool.pycsd.org
schooltool.pycsd.org
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
admin.tricityselpa.org
nhstitans.org
schooltool.pycsd.org
admin.ecacademy.scrsd.org
mail.pycsd.org
wes.bibbed.org
admin.keillerleaders.org
poecenter246.com
3rcs.org
admin.crumpton.mpusd.net
admin.ecacademy.scrsd.org
www.cairoschooldistrict1.com
pycsd.org
rsu14.org
admin.pycsd.org
es.glendaleacademy.org
3rcs.org
3rcs.org
3rcs.org
academy.pycsd.org
3rcs.org
admin.ecacademy.scrsd.org
www.hscnewhaven.org
www.boyslatinms.org
steam.erusd.org
bradleyschools.org
admin.elc.aacs.net
admin.mas.mpusd.net
academy.pycsd.org
pycsd.org
admin.ecacademy.scrsd.org
3rcs.org
admin.delreywoods.mpusd.net
jla.jubileeacademies.org
www.rebsamen.mx
www.calvaryschools.org
academy.pycsd.org
3rcs.org
admin.pennekampschool.org
kailuaintermediate.org
admin.ecacademy.scrsd.org
schooltool.pycsd.org
*.pycsd.org
admin.es.glendaleacademy.org
mail.pycsd.org
3rcs.org
pycsd.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.athletics.rsu14.org
admin.vapa.mvusd.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
3rcs.org
3rcs.org
admin.cchs.mpusd.net
ms.pycsd.org
admin.poecenter246.com
schooltool.pycsd.org
academy.pycsd.org
cch.ldcsb.ca
www.salisburycatholicschool.org
schooltool.pycsd.org
mail.pycsd.org
cat.ldcsb.ca
jd.jubileeacademies.org

Certificate

The complete raw certificate details for mail.pycsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqH79qwMbU6KRcRrab5y9
zymDS104sa9MPBidLP6K0DNEkwB0ic1gxIueRYlP4mnSx938K1vz2jU7Q5vUKUyY
oTKT2HhRTH4THFp+yzoY2ka8zuZu1z1UNZgpJ0z8stlfz2YOsbWfPtfM25DXG7Wc
Llfvb32iethW/FigfcUIWTmeQ9GciMpRraKkw4vyluhluSrtGaFjb3yw9yfv+3YF
xCkT8N0Uxuy1HgRNLnk/wZU7SynQDRBPVpfy8R+gE7TVTohJ2ET3Z536ImyoHzNo
EvPGGhgW2FI5G51TR6UCx+sVdFlLfbStKo9XBHjYfNfF/GFT7vDu7VU7eQP4eTxA
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1479502103628925958697818031005061410
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV SSL CA - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-06-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Newark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.pycsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21270656776432991329399170724742606652752622892466489761868912456160688443207069433198742462937592864125387350384460295114178618344719081024777370111897105218876169872687737453344888133480937322519787796142888078999555384308075089391148528300077653033391385384174720931065126410577861918019553383020655811515959069532994179812611336894579557247943598608788476552544288851672819488448958339936371234265925772373214071698360906768490716236875727812216044034304560654304074969335239886500346999352117041363242206326128007648002319996460452714268244640010609663787645509428257905838475135921985070159559203735930182320341
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pycsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (161 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName decf5c50b7ae021f1517aa16e80db5289d6a5af3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gm.symcb.com/gm.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN asn1: syntax error: invalid boolean
false
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:16|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:7|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:1|t:5|false]  
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 87011305380521891046898838834127691138797451013945884204173222745818237050773
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 52070517500295359012618424430823478242272906455392030194104856539808820616905
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001c2ab73f3489d99f654679cf0f65626aaa5fc275428f2ef4a0bf4030fe8c2ae8f14d35934b33d2db9e817e92e8c1fdf017d736467fa27901287b83b163a109be273624e7d581d5868c51c578ad08ba88e4f3f0f39eba801823b09584af585460a0a9ba9d0f9bc5c1efb0d2cf87b53e21a8316fddec74eea5f659c3597f73682307ec38d47fb6f16451125b834459e1f4e48a2b3e8c4b3052755868ca5770761ad077f7fc9e9f882fb07757a65d2537d00ee29c440af8d2e7c8c9040154e3a8729eb9c600d05f462afc1dbe201fb8f9542349d1f99b37bda5fb11b3c82930e91391d2981bdfff3133928d4b87b97c8655870225ee60af1fece8adb860f182c75c