Securemail.mo.gov

- State of Missouri, Office of Administration -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 60:37:a2:a6:c1:df:da:b4:00:00:00:00:51:01:37:b9 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 60:37:a2:a6:c1:df:da:b4:00:00:00:00:51:01:37:b9
Serial Number (int): 127894762884803338406424234489601406905
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 44:d4:e7:25:10:a9:9e:fe:bf:00:cc:3b:12:52:85:7a:f2:b9:89:73
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9d:f5:25:c8:7c:83:68:54:4a:ca:f1:2c:66:8c:dd:ee:95:59:e7:2c
Fingerprint (sha256): 00:2f:1e:6f:73:e8:1f:e2:54:47:ec:91:dc:46:41:40:9b:b7:f8:9b:e9:53:39:9e:7b:36:ea:ee:5e:61:f9:21

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate Securemail.mo.gov

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Securemail.mo.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securemail.mo.gov
www.securemail.mo.gov

Other certificates including the domain name mo.gov

(limited to 100 certificates)
apidata-dev.dese.mo.gov
renew.pr.mo.gov
mo.gov
Securemail.mo.gov
Mail.sos.mo.gov
www.mostops.ago.mo.gov
www.courts.mo.gov
imperva.com
momail.mo.gov
5685057352105984-fe4.pantheonsite.io
airwatch4.mo.gov
incapsula.com
stoadf.treasurer.mo.gov
5659822271758336-fe3.pantheonsite.io
webmail2.auditor.mo.gov
mail.senate.mo.gov
mdc5test.mdc.mo.gov
mo.gov
oscna0013.courts.mo.gov
5658638538506240-fe4.pantheonsite.io
achieve.escoffier.edu
www.training.oa.mo.gov
appadmin-dev.dese.mo.gov
on.mo.gov
5685057352105984-fe4.pantheonsite.io
mo.gov
MoLogin.mo.gov
s1.sos.mo.gov
pr.mo.gov
cbafs.mo.gov
media.senate.mo.gov
lists.mo.gov
securemail.mo.gov
mcs.modot.mo.gov
mail.house.mo.gov
www.mshp.dps.mo.gov
mo.gov
WWW.MO.GOV
mo.gov
imperva.com
www.mosac.mo.gov
publicdefender.mo.gov
imperva.com
imperva.com
nature.mdc.mo.gov
incapsula.com
imperva.com
mo.gov
incapsula.com
vpn.sos.mo.gov
vpn.psc.mo.gov
achieve.escoffier.edu
www.MissouriEmployer.dss.mo.gov
molisapitest.legislativeoversight.mo.gov
*.house.mo.gov
medesfdshprod.dss.mo.gov
lyncaccess.modot.mo.gov
5659822271758336-fe3.pantheonsite.io
moaccount.mo.gov
incapsula.com
connect.mdc.mo.gov
incapsula.com
5658638538506240-fe4.pantheonsite.io
mo2fss.mo.gov
5659822271758336-fe3.pantheonsite.io
myworkspace.mo.gov
moadfs.mo.gov
achieve.escoffier.edu
extra.mdc.mo.gov
imperva.com
mymdc.mo.gov
mo.gov
legislativeoversight.mo.gov
ucceegainws.state.mo.us
5685057352105984-fe4.pantheonsite.io
connector-c.mshp.dps.mo.gov
mophin1.dhss.mo.gov
cobra.mshp.dps.mo.gov
www3.modot.mo.gov
mosso.mo.gov
5659822271758336-fe3.pantheonsite.io
mymdc.mo.gov
uisidestest.labor.mo.gov
imperva.com
5658638538506240-fe4.pantheonsite.io
remoteaccess.sos.mo.gov
incapsula.com
machs.mo.gov
achieve.escoffier.edu
*.courts.mo.gov
incapsula.com
www.courts.mo.gov
Evetest.mo.gov
mail.senate.mo.gov
incapsula.com
achieve.escoffier.edu
Airwatch1.mo.gov
gisblue.mdc.mo.gov
mo.gov
imperva.com

Certificate

The complete raw certificate details for Securemail.mo.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAo0NbgLdYdmYbTB+LSsem
vFTOrEJ432rCi0Xyl852zxwTFv06fjUBKT/hJdzhlT7zND8spQ0ljT2+jX0JVoHf
zvVcKedhjtNJsoXyHyy1mWIYAI+0Ov0+GNzZTsPzJKa+FJ05SXgLeHzkADT/DyX7
DDcUpQy3rITA9Ub/Qn40FaB988f7J6kuPv3s+Uqv2CpfsfCzwALtBB0h7pKVP4BD
sXTPR7rs0IVjbI/fhI2BYMRLFk0nSy7zlmv+OIAbpgCgek4qQBzpCCpSqab2Zn23
oXizud+R5Woc8+HSvLqO5zS2+1s6II2jVNGYDUPkAB6ppfMST5iMVgKYLT7rYQam
216fR+EDMA7baVOdqV80bPtQ2Lpafjbiv69NIXbtIMzhFEWPXFBepwOaYEhD34ug
HpClNU9S/M65sc85ofunq5i/jjz7UB61LlSels888DLSUMn8vnNTsTnXpzNHYJIR
pF5m/OYeMFZWE7OW8vua2V0F+TmF/BgWfCpOg2O0vw+SbGV+NsjrfSYdqpBkDpO/
PzTAU3Ng8Kp64cQ4Evj2xqm404rUrrGQjNXE+OB1gkDlYQ2vA0Dn1u6MgGspMfLF
4S+hkYcGCZ0b/UQBCNeU4x3jDG/WAwZco01ayZqyePWQ5ULISJ9UVLnB+bI9UrWy
WdEdaZXdm0HFpidyDV/b2SMCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 127894762884803338406424234489601406905
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-23 20:44:53 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-06-22 21:14:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Securemail.mo.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666055398521549564858381639280370499149603096062558027964044863861066790148560769692593323601829744381875777898101356746502559289082279661251839527080214613168718246145804456748213196771960079606736266613577780822320786455384760930987963417187497749786116178290475285033395847932973973631808208078982843824812083495530570589850311759880707159406445123716131132361031346255515666932854569449923009704854576493207854787172873229995608703369864792853037147570999124391084511806971721200955551085551047133638812753755125663040809086240255896816606857088922569375959723865607681709540765087137355182313798913513578854229057557823342657163733044597890361566294469826874602589340139877792141485584841506931730587087959189703276697976118646888885330794531479475484742409369424608178504119939068065986714841617609938221958977313872307722199034595421298843157732683493491522682502588960590321727505898629287815861190235555175769808917523200863273789808661259761272578364780843816505913766267502277622992901010804799878714767305990773872027348286788199844852310474703094567880324871979217140297414606838652048577741107352979144620996473350901015357105821884285415435334621357371212215049736539936222043351422020560014014620047324659889240529187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.mo.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securemail.mo.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (488 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
							01e20077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000171093f95bb0000040300483046022100a8617f0b8b36585df90372c85e33ad6568a3dacef00007cd8bf362c88a23c5f1022100fe8bc5f8b3d9f1d88854c6f052d0ba2dc35d074508bf4bedf46b8437d15676ea0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000171093f95dd0000040300483046022100abdd1a1ac0749c75ea26aef2173d2fbd78fd050f653f3b8069004ad0b2cfe7d0022100fe7488cef5424f30ee702a4dad3581f55cea7fca8ed6fd90dc3c085a6e7cde680076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000171093f96140000040300473045022100c1e98dae278a7ca3af398bc358e32dd4a2ae38c61d4fc065cb02d8190e057a2c0220250e653b255525c1c7eb7c2f92b42be2a3320b96a73fae7de7a904b7623e75ae007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed18500000171093f95a20000040300473045022100ec9babbc2070662163c017db56806041ff7428a04bde73d52c75b1c10822807402204f9c090042a194eed1c0013b25b97471394a941a3ca676af5d849e19f02352c4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44d4e72510a99efebf00cc3b1252857af2b98973
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00616a601796ef6ff6d31ac0fbed2cf6ce76f42066c1376aeebcfc2a94eec1370453b8a2a86e5bf5641f2ad6b4936a34cf55c42b368989c70fde82a41a4741b119f58e18a1b89b47470963da70c73a95c20d3eb6b7fdec4054f336226034239a2c13704358310530bd36ab88ee2276ad9a682554d8ac6268eb8a9fe74b220507a57f5242bcdc2188857dcfcda8be861fc7e2dbe2a17f647ab926d87ccdb537a97741a2c8d6ee20924c6a9121b4e2f5a161f30b71bff9fd6d7bf8d84b459d0c85f572bec3f9cd2a588206b8dc1e506b5f0d05a878b3eebb06ee63d6c66f5c85ebc3ab2bca5d45d0f61e589fdb4e9330d8d897401d509c9d6ccd4bda71c5fd3443f1