cis.gobearsgo.net

Issued by Let's Encrypt Authority X3

About this certificate

This digital certificate with serial number 03:1e:ce:f6:82:52:be:05:7a:b3:06:f2:41:25:b9:1c:a7:09 was issued on by Let's Encrypt.

With 100 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=cis.gobearsgo.net

Let's Encrypt

Organization: Let's Encrypt
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:1e:ce:f6:82:52:be:05:7a:b3:06:f2:41:25:b9:1c:a7:09
Serial Number (int): 271820429718336552658000902552512217523977
Serial Number lenght: 138 bits, 18 octets

SubjectKeyId: 2f:6b:c8:4d:6c:2c:2e:32:f2:00:20:ff:2d:4d:6c:5a:fc:6e:ba:bb
AuthorityKeyId: a8:4a:6a:63:04:7d:dd:ba:e6:d1:39:b7:a6:45:65:ef:f3:a8:ec:a1

Fingerprint (sha1): f5:5b:e8:38:87:86:28:b2:df:ee:c8:1e:84:5c:a1:e8:09:18:73:8d
Fingerprint (sha256): c1:30:1c:2a:47:34:c7:8d:08:76:5a:e2:19:4d:5b:f8:ff:13:e4:c2:2e:c9:91:6c:a8:41:7a:1b:08:b4:88:c9

Issuing Certificate URL: http://cert.int-x3.letsencrypt.org/

Revocation information

OCSP Server: http://ocsp.int-x3.letsencrypt.org

Check the revocation status for certificate cis.gobearsgo.net

100

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cis.gobearsgo.net

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

admin.breed.exteraschools.org
admin.es.elkhartisd.org
admin.holyfamilyhs.com
admin.hs.elkhartisd.org
admin.is.elkhartisd.org
admin.kahukuhigh.org
admin.monroe.k12.tn.us
admin.ms.elkhartisd.org
admin.orcaeagles.org
admin.res.davidson.k12.nc.us
admin.sbdiocesecef.org
admin.sdhs.davidson.k12.nc.us
admin.sme.davidson.k12.nc.us
admin.sms.davidson.k12.nc.us
admin.sts.davidson.k12.nc.us
admin.sves.davidson.k12.nc.us
admin.tes.davidson.k12.nc.us
admin.tms.davidson.k12.nc.us
admin.upshurschools.com
admin.va.davidson.k12.nc.us
admin.vciseagles.org
bes.gobearsgo.net
bhs.gobearsgo.net
bis.gobearsgo.net
bjh.gobearsgo.net
bl.parkerusd.org
bradley.usd207.org
ces.gobearsgo.net
ces35.cliftonisd.org
cfh.chesterfieldschools.org
chs.chesterfieldschools.org
chs.cliftonisd.org
cis.chesterfieldschools.org
cis.gobearsgo.net
cms.cliftonisd.org
cnh.chesterfieldschools.org
colehs.fshisd.net
colems.fshisd.net
coop.fshisd.net
cps.chesterfieldschools.org
crms.chesterfieldschools.org
cte.chesterfieldschools.org
dz.aceroschools.org
ees.chesterfieldschools.org
eisenhower.usd207.org
es.elkhartisd.org
es.roosevelt.k12.tx.us
fa.arrowacademy.org
fshelem.fshisd.net
hs.elkhartisd.org
hs.roosevelt.k12.tx.us
is.elkhartisd.org
jes.chesterfieldschools.org
jh.roosevelt.k12.tx.us
kahukuhigh.org
lms.chesterfieldschools.org
lp.parkerusd.org
macarthur.usd207.org
mes.chesterfieldschools.org
mhs.chesterfieldschools.org
ms.elkhartisd.org
nhms.chesterfieldschools.org
patton.usd207.org
pes.chesterfieldschools.org
phs.parkerusd.org
pps.chesterfieldschools.org
pve.chesterfieldschools.org
res.chesterfieldschools.org
sbdiocesecef.org
south.fisd.us
triviumcharter.org
upshurschools.com
vciseagles.org
webster.usd465.com
wes.parkerusd.org
www.chesterfieldschools.org
www.cliftonisd.org
www.elkhartisd.org
www.fshisd.net
www.fuchsmizrachi.org
www.gobearsgo.net
www.hbuhsd.edu
www.hemetusd.k12.ca.us
www.hemetusd.org
www.jecc.org
www.kahukuhigh.org
www.magnoliaisd.org
www.monroe.k12.tn.us
www.parkerusd.org
www.phillips.k12.wi.us
www.reaganacademy.org
www.rebsamen.mx
www.roosevelt.k12.tx.us
www.sbdiocesecef.org
www.smcjuhsd.org
www.tahquitzhs.org
www.upshurschools.com
www.usd207.org
www.vciseagles.org
www2.smcjuhsd.org

Other certificates including the domain name gobearsgo.net

(limited to 100 certificates)
gutierrez.hcisd.org
admin.rap48.richardallenschools.com
admin.sallasmahone.gocats.org
admin.eceap.gsd.wednet.edu
bes.gobearsgo.net
0-3.texasdhhresources.org
lp.parkerusd.org
gfes.comalisd.org
admin.bowie.hcisd.org
fremont.bcsd.com
0-3.texasdhhresources.org
admin.va.davidson.k12.nc.us
www.ausdlift.org
admin.cv.k12.ca.us
bhs.ballingerisd.net
dz.aceroschools.org
*.gobearsgo.net
www.rebsamen.mx
admin.breed.exteraschools.org
svms.comalisd.org
admin.austin.hcisd.org
admin.cano.hcisd.org
admin.crma5.org
admin.clarendon.sboe.org
horizon.gobearsgo.net
0-3.texasdhhresources.org
admin.milam.hcisd.org
bis.gobearsgo.net
0-3.texasdhhresources.org
admin.cve.cv.k12.ca.us
admin.lincoln.anacondaschools.org
*.gobearsgo.net
www.mpsdnow.org
*.gobearsgo.net
www.grandville.k12.mi.us
crockett.hcisd.org
admin.bonham.hcisd.org
sle.slvusd.org
ballingerisd.net
chs.comalisd.org
admin.cornerstone.pvpusd.net
kpe.mpsdnow.org
0-3.texasdhhresources.org
bhs.gobearsgo.net
compass.gobearsgo.net
admin.es.elkhartisd.org
admin.lunadabay.pvpusd.net
cses.comalisd.org
acrma5.org
0-3.texasdhhresources.org
admin.es.elkhartisd.org
preescolar.semperaltius.edu.mx
*.gobearsgo.net
admin.breed.exteraschools.org
academy.comalisd.org
cdc.comalisd.org
www.gobearsgo.net
svhs.comalisd.org
bjh.gobearsgo.net
echs.hcisd.org
admin.gutierrez.hcisd.org
*.gobearsgo.net
admin.austin.hcisd.org
admin.austin.hcisd.org
admin.newpathways.hcisd.org
admin.breed.exteraschools.org
bhs.gobearsgo.net
0-3.texasdhhresources.org
0-3.texasdhhresources.org
ajshs.anacondaschools.org
0-3.texasdhhresources.org
acrma5.org
admin.chabot.cv.k12.ca.us
admin.echs.hcisd.org
triviumcharter.org
www.montrosechristiancdc.org
breed.exteraschools.org
admin.breed.exteraschools.org
admin.leonardeulerd.edu.mx
cis.gobearsgo.net
elementary.msd120.org
admin.breed.exteraschools.org
admin.cte.mpsdnow.org
admin.williampenn.bcsd.com
0-3.texasdhhresources.org
admin.parkmanorelementary.org
upperallen.mbgsd.org
gobearsgo.net
hhs.hcisd.org
admin.bhs.ballingerisd.net
southeast.varnett.org
www.uachs.org
*.gobearsgo.net
www.monroe.k12.tn.us
gobearsgo.net
admin.mpsdnow.org
admin.desoto.goldenruledallas.org
mps.monroe.k12.tn.us
admin.elkridge.whiteriver.wednet.edu
admin.milam.hcisd.org

Certificate

The complete raw certificate details for cis.gobearsgo.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPQTCCDimgAwIBAgISAx7O9oJSvgV6swbyQSW5HKcJMA0GCSqGSIb3DQEBCwUA
MEoxCzAJBgNVBAYTAlVTMRYwFAYDVQQKEw1MZXQncyBFbmNyeXB0MSMwIQYDVQQD
ExpMZXQncyBFbmNyeXB0IEF1dGhvcml0eSBYMzAeFw0xODEyMDYyMTEyMzhaFw0x
OTAzMDYyMTEyMzhaMBwxGjAYBgNVBAMTEWNpcy5nb2JlYXJzZ28ubmV0MIICIjAN
BgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEArayF6e5m3oxQbTHb+2z7rfYVCl+p
h5m8FJJOEgEtsFnh84MFXhIl7uEOtqSlMKsR22dzcNAtK1G5pV3R4RBgn18RTHnT
D9fS27JxyeyflXfdUX7Vw4aGryMf8ME+ZGhoaQP0XYB3XDGrmQF3Z/h2e6Stagub
O+pVwFzG8VDAdnahsUrbHrpSefiaziyhhePkL3zQg/OmaQkK7wAhJO8el2z375LD
d2VIwrdWQP2JjV892Yd+tIZOnAk2jyDlv3MYXKXGilByrQlWZ1AdjOKfRiY0ckFu
u/DYkuvkNKm2f3zUavw3slCujZWHkIHZNpaNtxfsrpItUIq5Tu7zbek/MR/JMR9n
ceWyZ2Mund+SbgfLf96wPhVBarrsp1HNR+Ikoytr5PMNRBzwWzBvTD8F7q6ckUbI
gpeo7stn7b0INXPYgNT7zFX/UNCcWj+aaJ+Ku8MKV4EEEuaivjW/P+Tm64XjXNjP
9F1W8+5tlcJgJhGUyEylCUtARqhPojUzQnrh1iUSMRNI2liJ4Iudx/o3Q4E2w6Au
d9PYyV05pFgMdSLYNRGQTyQRSaSbQ3HmfZi/pQjFyUohiA7/h0omUmCIDiQVG30e
Hhb3OIP3bJisXZK4qErn5ZDmKdUgNC3GS+ywrTABYj0N+EUnohkUi6ikD4me6o58
sq/IQVmyem1M/E0CAwEAAaOCC00wggtJMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQU
L2vITWwsLjLyACD/LU1sWvxuurswHwYDVR0jBBgwFoAUqEpqYwR93brm0Tm3pkVl
7/Oo7KEwbwYIKwYBBQUHAQEEYzBhMC4GCCsGAQUFBzABhiJodHRwOi8vb2NzcC5p
bnQteDMubGV0c2VuY3J5cHQub3JnMC8GCCsGAQUFBzAChiNodHRwOi8vY2VydC5p
bnQteDMubGV0c2VuY3J5cHQub3JnLzCCCQAGA1UdEQSCCPcwggjzgh1hZG1pbi5i
cmVlZC5leHRlcmFzY2hvb2xzLm9yZ4IXYWRtaW4uZXMuZWxraGFydGlzZC5vcmeC
FmFkbWluLmhvbHlmYW1pbHlocy5jb22CF2FkbWluLmhzLmVsa2hhcnRpc2Qub3Jn
ghdhZG1pbi5pcy5lbGtoYXJ0aXNkLm9yZ4IUYWRtaW4ua2FodWt1aGlnaC5vcmeC
FmFkbWluLm1vbnJvZS5rMTIudG4udXOCF2FkbWluLm1zLmVsa2hhcnRpc2Qub3Jn
ghRhZG1pbi5vcmNhZWFnbGVzLm9yZ4IcYWRtaW4ucmVzLmRhdmlkc29uLmsxMi5u
Yy51c4IWYWRtaW4uc2JkaW9jZXNlY2VmLm9yZ4IdYWRtaW4uc2Rocy5kYXZpZHNv
bi5rMTIubmMudXOCHGFkbWluLnNtZS5kYXZpZHNvbi5rMTIubmMudXOCHGFkbWlu
LnNtcy5kYXZpZHNvbi5rMTIubmMudXOCHGFkbWluLnN0cy5kYXZpZHNvbi5rMTIu
bmMudXOCHWFkbWluLnN2ZXMuZGF2aWRzb24uazEyLm5jLnVzghxhZG1pbi50ZXMu
ZGF2aWRzb24uazEyLm5jLnVzghxhZG1pbi50bXMuZGF2aWRzb24uazEyLm5jLnVz
ghdhZG1pbi51cHNodXJzY2hvb2xzLmNvbYIbYWRtaW4udmEuZGF2aWRzb24uazEy
Lm5jLnVzghRhZG1pbi52Y2lzZWFnbGVzLm9yZ4IRYmVzLmdvYmVhcnNnby5uZXSC
EWJocy5nb2JlYXJzZ28ubmV0ghFiaXMuZ29iZWFyc2dvLm5ldIIRYmpoLmdvYmVh
cnNnby5uZXSCEGJsLnBhcmtlcnVzZC5vcmeCEmJyYWRsZXkudXNkMjA3Lm9yZ4IR
Y2VzLmdvYmVhcnNnby5uZXSCFGNlczM1LmNsaWZ0b25pc2Qub3JnghtjZmguY2hl
c3RlcmZpZWxkc2Nob29scy5vcmeCG2Nocy5jaGVzdGVyZmllbGRzY2hvb2xzLm9y
Z4ISY2hzLmNsaWZ0b25pc2Qub3JnghtjaXMuY2hlc3RlcmZpZWxkc2Nob29scy5v
cmeCEWNpcy5nb2JlYXJzZ28ubmV0ghJjbXMuY2xpZnRvbmlzZC5vcmeCG2NuaC5j
aGVzdGVyZmllbGRzY2hvb2xzLm9yZ4IRY29sZWhzLmZzaGlzZC5uZXSCEWNvbGVt
cy5mc2hpc2QubmV0gg9jb29wLmZzaGlzZC5uZXSCG2Nwcy5jaGVzdGVyZmllbGRz
Y2hvb2xzLm9yZ4IcY3Jtcy5jaGVzdGVyZmllbGRzY2hvb2xzLm9yZ4IbY3RlLmNo
ZXN0ZXJmaWVsZHNjaG9vbHMub3JnghNkei5hY2Vyb3NjaG9vbHMub3JnghtlZXMu
Y2hlc3RlcmZpZWxkc2Nob29scy5vcmeCFWVpc2VuaG93ZXIudXNkMjA3Lm9yZ4IR
ZXMuZWxraGFydGlzZC5vcmeCFmVzLnJvb3NldmVsdC5rMTIudHgudXOCE2ZhLmFy
cm93YWNhZGVteS5vcmeCEmZzaGVsZW0uZnNoaXNkLm5ldIIRaHMuZWxraGFydGlz
ZC5vcmeCFmhzLnJvb3NldmVsdC5rMTIudHgudXOCEWlzLmVsa2hhcnRpc2Qub3Jn
ghtqZXMuY2hlc3RlcmZpZWxkc2Nob29scy5vcmeCFmpoLnJvb3NldmVsdC5rMTIu
dHgudXOCDmthaHVrdWhpZ2gub3JnghtsbXMuY2hlc3RlcmZpZWxkc2Nob29scy5v
cmeCEGxwLnBhcmtlcnVzZC5vcmeCFG1hY2FydGh1ci51c2QyMDcub3JnghttZXMu
Y2hlc3RlcmZpZWxkc2Nob29scy5vcmeCG21ocy5jaGVzdGVyZmllbGRzY2hvb2xz
Lm9yZ4IRbXMuZWxraGFydGlzZC5vcmeCHG5obXMuY2hlc3RlcmZpZWxkc2Nob29s
cy5vcmeCEXBhdHRvbi51c2QyMDcub3JnghtwZXMuY2hlc3RlcmZpZWxkc2Nob29s
cy5vcmeCEXBocy5wYXJrZXJ1c2Qub3JnghtwcHMuY2hlc3RlcmZpZWxkc2Nob29s
cy5vcmeCG3B2ZS5jaGVzdGVyZmllbGRzY2hvb2xzLm9yZ4IbcmVzLmNoZXN0ZXJm
aWVsZHNjaG9vbHMub3JnghBzYmRpb2Nlc2VjZWYub3Jngg1zb3V0aC5maXNkLnVz
ghJ0cml2aXVtY2hhcnRlci5vcmeCEXVwc2h1cnNjaG9vbHMuY29tgg52Y2lzZWFn
bGVzLm9yZ4ISd2Vic3Rlci51c2Q0NjUuY29tghF3ZXMucGFya2VydXNkLm9yZ4Ib
d3d3LmNoZXN0ZXJmaWVsZHNjaG9vbHMub3JnghJ3d3cuY2xpZnRvbmlzZC5vcmeC
End3dy5lbGtoYXJ0aXNkLm9yZ4IOd3d3LmZzaGlzZC5uZXSCFXd3dy5mdWNoc21p
enJhY2hpLm9yZ4IRd3d3LmdvYmVhcnNnby5uZXSCDnd3dy5oYnVoc2QuZWR1ghZ3
d3cuaGVtZXR1c2QuazEyLmNhLnVzghB3d3cuaGVtZXR1c2Qub3Jnggx3d3cuamVj
Yy5vcmeCEnd3dy5rYWh1a3VoaWdoLm9yZ4ITd3d3Lm1hZ25vbGlhaXNkLm9yZ4IU
d3d3Lm1vbnJvZS5rMTIudG4udXOCEXd3dy5wYXJrZXJ1c2Qub3JnghZ3d3cucGhp
bGxpcHMuazEyLndpLnVzghV3d3cucmVhZ2FuYWNhZGVteS5vcmeCD3d3dy5yZWJz
YW1lbi5teIIXd3d3LnJvb3NldmVsdC5rMTIudHgudXOCFHd3dy5zYmRpb2Nlc2Vj
ZWYub3JnghB3d3cuc21janVoc2Qub3JnghJ3d3cudGFocXVpdHpocy5vcmeCFXd3
dy51cHNodXJzY2hvb2xzLmNvbYIOd3d3LnVzZDIwNy5vcmeCEnd3dy52Y2lzZWFn
bGVzLm9yZ4IRd3d3Mi5zbWNqdWhzZC5vcmcwTAYDVR0gBEUwQzAIBgZngQwBAgEw
NwYLKwYBBAGC3xMBAQEwKDAmBggrBgEFBQcCARYaaHR0cDovL2Nwcy5sZXRzZW5j
cnlwdC5vcmcwggEFBgorBgEEAdZ5AgQCBIH2BIHzAPEAdgBVgdTCFpA2AUrqC5tX
PFPwwOQ4eHAlCBcvo6odBxPTDAAAAWeFlHbxAAAEAwBHMEUCIH8pqhZRJhcKf/9h
sIL5ahVaTrLGJB8V/C+xg9m+LUNlAiEA2ch9us3qb46InY0Y0wP4DNItLPUZ2xcA
1ff9vWIDqx0AdwBj8tvN6DvMLM8LcoQnV2szpI1hd4+9daY4scdoVEvYjQAAAWeF
lHdUAAAEAwBIMEYCIQD2dCaKHNuKvO1KwmFCHYjTLDzKQw7m22w4Oz7Byy2QjQIh
AO+a7K3FEbADOpbiYXIWNX6OvJmD+vBPHFOCHPtUtxH+MA0GCSqGSIb3DQEBCwUA
A4IBAQCbTl9Cst4ND3MXs1CINVpFbifX6Mp3Xf1A3mIzLVubLWYFBXXYgVJb3Jcd
xO+SXqBOTzdTbN3K2vAiEaibIiTR59q587+MsISzFpwdhx+8jIJ/2HHBXdLk4agV
gZgmcIvcu8lsCvZwzLVyDyKsw0Fr+WSErWeMkzD1P44OK3EUCCelYUPNLyrNNVOj
M5eMO/oC9+gxhhZNeM0Pf0/VdtEdoBhCdsoVp8RPEfaPob/FCf3vJ9wTSZmzWtXj
mqwrTYYdf8XvZpUSlct0hl8WruDv+3DmRyZmAjk2QMnK0dsQGgT0a6/R67SuRr/K
23bF2lfj3EjXarkZwk/uz4rYnzeI
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 271820429718336552658000902552512217523977
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Let's Encrypt Authority X3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-06 21:12:38 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-06 21:12:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cis.gobearsgo.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 708527770816710962461369281921624347663866990539232810263877021776994916802763526532792249064451688554819348919194355121727833041277059908878924286388109511627798654165981480234088870994507199084392826674641639665020458357402825000740361316925987874432450738532678764942933529078807008776240706140198340537261542294093875059968881841486392246132788152843579149836305136543152303221964192259582445901981437216925290031878313490937004642685331141878801970823387411405540368261899860554971787111093201068433209046426355401303437713649386913278003905446119474792860670226348980253236596343016628627241737701378161485878762742457484499011301513093855862237669714355475656386758532613677406567970714540371153501447419446226602705208452229077435663640168614031455177061220334754579310712086776090628193534440183669044959767382177941512969880643844006666982814346904778720938059485833161380600569885406427577437292001324756190678884730680768468043935054773615479450432449947659819334616732761248802392334707123298697409020081242195516967924344025414661386887944671392557938826531732432140894020174523526402120087386875390396612223465177349123401208069116546556001394556492565452002055305579356456611387679421396435798350880110847735335025741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f6bc84d6c2c2e32f20020ff2d4d6c5afc6ebabb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a84a6a63047dddbae6d139b7a64565eff3a8eca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.int-x3.letsencrypt.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.int-x3.letsencrypt.org/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2295 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.breed.exteraschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.holyfamilyhs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.orcaeagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.res.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sdhs.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sme.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sts.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.sves.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tes.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.tms.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.va.davidson.k12.nc.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bes.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bhs.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bis.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bjh.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bl.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradley.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ces35.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cfh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'chs.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cis.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cnh.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colehs.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colems.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'coop.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cte.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dz.aceroschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ees.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eisenhower.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'es.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fa.arrowacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fshelem.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hs.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'is.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jh.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lp.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'macarthur.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mhs.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ms.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nhms.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'patton.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pes.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'phs.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pps.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pve.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'res.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'south.fisd.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'triviumcharter.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webster.usd465.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wes.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chesterfieldschools.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cliftonisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.elkhartisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fshisd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fuchsmizrachi.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.gobearsgo.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hbuhsd.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.k12.ca.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hemetusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jecc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.kahukuhigh.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.magnoliaisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monroe.k12.tn.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.parkerusd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.phillips.k12.wi.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reaganacademy.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.rebsamen.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.roosevelt.k12.tx.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sbdiocesecef.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smcjuhsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tahquitzhs.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.upshurschools.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.usd207.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vciseagles.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www2.smcjuhsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.44947.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://cps.letsencrypt.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000167859476f1000004030047304502207f29aa165126170a7fff61b082f96a155a4eb2c6241f15fc2fb183d9be2d4365022100d9c87dbacdea6f8e889d8d18d303f80cd22d2cf519db1700d5f7fdbd6203ab1d00770063f2dbcde83bcc2ccf0b728427576b33a48d61778fbd75a638b1c768544bd88d00000167859477540000040300483046022100f674268a1cdb8abced4ac261421d88d32c3cca430ee6db6c383b3ec1cb2d908d022100ef9aecadc511b0033a96e2617216357e8ebc9983faf04f1c53821cfb54b711fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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