htcsd.ca
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number 63:9b:eb:89:49:d8:2a:c9:0d:c8:4b:64:1d:d5:18:04 was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=htcsd.ca
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 63:9b:eb:89:49:d8:2a:c9:0d:c8:4b:64:1d:d5:18:04Serial Number (int): 132403154839148428038838919688925550596
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: f6:e8:4d:a2:e3:6a:cd:a1:10:21:1a:7f:4c:7a:39:8a:0e:8a:4f:97
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): fb:62:90:58:65:62:b4:84:32:bc:27:34:63:60:e4:cb:bc:3f:f3:61
Fingerprint (sha256): eb:f4:81:e1:d6:79:cb:8d:f6:23:0d:bb:5f:80:f6:c4:53:e7:9b:0c:f7:d6:b9:cc:a2:c8:37:b5:b6:ab:1a:ab
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/b9wasVEb1xECRL Distribution Point: http://crls.pki.goog/gts1p5/fQi9C1q3EEc.crl
Check the revocation status for certificate htcsd.ca
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for htcsd.ca
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
htcsd.ca
Other certificates including the domain name htcsd.ca
(limited to 100 certificates)
citrix.htcsd.ca
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
admin.colegiogreenhills.com
christtheking.htcsd.ca
htcsd.ca
htcsd.ca
printshop.comoxvalleyschools.ca
vanier.htcsd.ca
stagnes.htcsd.ca
stmary.htcsd.ca
stmargaret.htcsd.ca
citrix.htcsd.ca
comoxvalleyschools.ca
elem.bicschools.net
*.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
*.htcsd.ca
stmichael.htcsd.ca
htcsd.ca
www.wexford.edu.mx
admin.wearedace.org
allsaints.htcsd.ca
soss.sd53.bc.ca
*.htcsd.ca
stmargaret.htcsd.ca
*.htcsd.ca
adss.sd70.bc.ca
*.htcsd.ca
htcsd.ca
www.htcsd.ca
www.wearedace.org
*.htcsd.ca
phoenix.htcsd.ca
*.htcsd.ca
*.htcsd.ca
*.htcsd.ca
stagnes.htcsd.ca
htcsd.ca
allsaints.htcsd.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
stmargaret.htcsd.ca
www.gpcsd.ca
stmichael.htcsd.ca
fatimaschoolwilton.com
sacredheart.htcsd.ca
www.theratnerschool.org
htcsd.ca
ined.comoxvalleyschools.ca
*.htcsd.ca
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
*.htcsd.ca
htcsd.ca
powerschool.htcsd.ca
jcsk8.org
admin.jcsk8.org
glacierview.comoxvalleyschools.ca
admin.bicschools.net
careerprograms.comoxvalleyschools.ca
admin.bicschools.net
admin.colegiogreenhills.com
christtheking.htcsd.ca
htcsd.ca
htcsd.ca
printshop.comoxvalleyschools.ca
vanier.htcsd.ca
stagnes.htcsd.ca
stmary.htcsd.ca
stmargaret.htcsd.ca
citrix.htcsd.ca
comoxvalleyschools.ca
elem.bicschools.net
*.htcsd.ca
stmary.htcsd.ca
citrix.htcsd.ca
*.htcsd.ca
stmichael.htcsd.ca
htcsd.ca
www.wexford.edu.mx
admin.wearedace.org
allsaints.htcsd.ca
soss.sd53.bc.ca
*.htcsd.ca
stmargaret.htcsd.ca
*.htcsd.ca
adss.sd70.bc.ca
*.htcsd.ca
htcsd.ca
www.htcsd.ca
www.wearedace.org
*.htcsd.ca
phoenix.htcsd.ca
*.htcsd.ca
*.htcsd.ca
*.htcsd.ca
stagnes.htcsd.ca
htcsd.ca
allsaints.htcsd.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
stmargaret.htcsd.ca
www.gpcsd.ca
stmichael.htcsd.ca
fatimaschoolwilton.com
sacredheart.htcsd.ca
www.theratnerschool.org
htcsd.ca
ined.comoxvalleyschools.ca
*.htcsd.ca
www.fatimaschoolwilton.org
admin.colegiogreenhills.com
www.bicschools.net
*.htcsd.ca
htcsd.ca
powerschool.htcsd.ca
jcsk8.org
admin.jcsk8.org
Certificate
The complete raw certificate details for htcsd.ca in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFVDCCBDygAwIBAgIQY5vriUnYKskNyEtkHdUYBDANBgkqhkiG9w0BAQsFADBG MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM QzETMBEGA1UEAxMKR1RTIENBIDFQNTAeFw0yNDAyMDMwNzExMTBaFw0yNDA1MDMw NzExMDlaMBMxETAPBgNVBAMTCGh0Y3NkLmNhMIIBIjANBgkqhkiG9w0BAQEFAAOC AQ8AMIIBCgKCAQEAsuypcWKm4M9ZeT9CCL/3NirT3BXnbmrQc7+1Q6FGOmukQ/Lx bBk4wJwssf1HpZssrZ1EtpFLhnVJK6OmftpgSrsCvmXmU4C7hVZJl47awcmmFYiC Pz6A6vDvlQwuNBPPTQu5kilF6IQ7spI2YpZAksEqu1cIApANvvuGIB6cOoDNTCvn /QAl8aU6BlenCpjrNimUFY31raz3ZSKUzkLXp0H9mureiCVw7Fy7ERyTvLTJ3+lo 8sEkeMgiFHsx3Xdpn+7kMx5J/iKhcKZfmxLZNimqnmMMXq6Mql4n5fndfef/I3iI Jn+gn3EYmVYSF/Rf6gvZ6DADEUgiIqPpe40IQQIDAQABo4ICbzCCAmswDgYDVR0P AQH/BAQDAgWgMBMGA1UdJQQMMAoGCCsGAQUFBwMBMAwGA1UdEwEB/wQCMAAwHQYD VR0OBBYEFPboTaLjas2hECEaf0x6OYoOik+XMB8GA1UdIwQYMBaAFNX8ng3fHsrd CJeXbivFX8Ur9ey4MHgGCCsGAQUFBwEBBGwwajA1BggrBgEFBQcwAYYpaHR0cDov L29jc3AucGtpLmdvb2cvcy9ndHMxcDUvYjl3YXNWRWIxeEUwMQYIKwYBBQUHMAKG JWh0dHA6Ly9wa2kuZ29vZy9yZXBvL2NlcnRzL2d0czFwNS5kZXIwEwYDVR0RBAww CoIIaHRjc2QuY2EwIQYDVR0gBBowGDAIBgZngQwBAgEwDAYKKwYBBAHWeQIFAzA8 BgNVHR8ENTAzMDGgL6AthitodHRwOi8vY3Jscy5wa2kuZ29vZy9ndHMxcDUvZlFp OUMxcTNFRWMuY3JsMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHcA7s3QZNXbGs7F XLedtM0TojKHRny87N7DUUhZRnEftZsAAAGNbgWBTwAABAMASDBGAiEAqsu7UyuU SJ3v7vc+pL9W0bPMdHe3IrISVycItFGd2UgCIQCxOhW/p6Ecvv2GZbXMgOPIQ+JJ x7r0pizDnkzhzO+gvQB1ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/ur AAABjW4FgYYAAAQDAEYwRAIgYqZi0KJ7R2IGfK/A3cbUDzyAPwjkpZtB1JOyFOJH krkCICveeF9I60WnzzbPeM7yPZYcprcZ6dpb0BVE288dtAH+MA0GCSqGSIb3DQEB CwUAA4IBAQAA7ZwUuFE/ryEYNbpwiE42zRBxxNX9CEFlb/PmXhzCnO3Feib5pbqz yW3AcgSZgeIsiIIQZMoi4JO8qVClvDL9gnuFJeu4SOA4XUSA0C6HakbTlfha87kt Ci/XWfNwSLtfcsiG29cB1ptMExUgovg0Ufty3XCKRxrNhftvjPENgt/7qJepdrVw NesK1Vg29JDDs+i4fEGZnZm/+pkRIzAiZlUOnfuCz4TXKHOBi9yGkVvhHoKEyFdN jWOuEKoWGDrmpvf/cSskIFilqnzAVSoyEbLEsPCAE6hFX6bUkyKmvAmcto9XIW1n 7TjxVMJfNiAqber8bSdEQORqIXs5qJmO -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuypcWKm4M9ZeT9CCL/3 NirT3BXnbmrQc7+1Q6FGOmukQ/LxbBk4wJwssf1HpZssrZ1EtpFLhnVJK6Omftpg SrsCvmXmU4C7hVZJl47awcmmFYiCPz6A6vDvlQwuNBPPTQu5kilF6IQ7spI2YpZA ksEqu1cIApANvvuGIB6cOoDNTCvn/QAl8aU6BlenCpjrNimUFY31raz3ZSKUzkLX p0H9mureiCVw7Fy7ERyTvLTJ3+lo8sEkeMgiFHsx3Xdpn+7kMx5J/iKhcKZfmxLZ NimqnmMMXq6Mql4n5fndfef/I3iIJn+gn3EYmVYSF/Rf6gvZ6DADEUgiIqPpe40I QQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 132403154839148428038838919688925550596 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-03 07:11:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-03 07:11:09 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'htcsd.ca' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22587120609684341116068770984405757204146960646163402550940083225809043977373032007968558020764991359089546303586504077398132551243635990306614813096710361094956253117697784148495923480461274536176823773575052189061448686310729908012388698787819517423209581363752504862394612998449939910780231318543423867625844243960491183172316070716517012488256886339515539605240238608861240833491544907077901112159916453745001695126055860273129677290808989197361506210129015342576334813606382539722017573140917393146131864453680541348985546856769229844315365110611076569043066858466867773204893608237870121639404229769084523055169 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f6e84da2e36acda110211a7f4c7a398a0e8a4f97 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/b9wasVEb1xE' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'htcsd.ca' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/fQi9C1q3EEc.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes) 00f0007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018d6e05814f0000040300483046022100aacbbb532b94489defeef73ea4bf56d1b3cc7477b722b212572708b4519dd948022100b13a15bfa7a11cbefd8665b5cc80e3c843e249c7baf4a62cc39e4ce1ccefa0bd007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018d6e0581860000040300463044022062a662d0a27b4762067cafc0ddc6d40f3c803f08e4a59b41d493b214e24792b902202bde785f48eb45a7cf36cf78cef23d961ca6b719e9da5bd01544dbcf1db401fe . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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