ASPRTFS.HHS.GOV

- US Dept of Health and Human Services -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 3a:40:ed:b1:0d:66:93:ec:00:00:00:00:50:e8:f9:22 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

US Dept of Health and Human Services

Organization: US Dept of Health and Human Services
State / Province: Maryland
Locality: Rockville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:40:ed:b1:0d:66:93:ec:00:00:00:00:50:e8:f9:22
Serial Number (int): 77432351713079494169907752121064290594
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 29:5e:64:32:d0:29:26:8a:c1:d2:70:79:16:07:6a:ae:8f:ac:6e:1f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f0:e6:cd:a9:bf:67:67:c2:87:62:28:75:f9:e6:9b:d1:78:29:d8:e9
Fingerprint (sha256): 00:53:22:60:61:21:ea:50:e6:bc:45:26:f1:35:a7:4f:3d:c6:4f:0d:eb:4b:89:5e:4b:ca:29:11:98:6d:b8:b0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ASPRTFS.HHS.GOV

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ASPRTFS.HHS.GOV

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ASPRTFS.HHS.GOV
www.ASPRTFS.HHS.GOV

Other certificates including the domain name HHS.GOV

(limited to 100 certificates)

Certificate

The complete raw certificate details for ASPRTFS.HHS.GOV in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHUDCCBjigAwIBAgIQOkDtsQ1mk+wAAAAAUOj5IjANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x
ODEwMTcxNDI0MTFaFw0yMDEwMTcxNDU0MTFaMH0xCzAJBgNVBAYTAlVTMREwDwYD
VQQIEwhNYXJ5bGFuZDESMBAGA1UEBxMJUm9ja3ZpbGxlMS0wKwYDVQQKEyRVUyBE
ZXB0IG9mIEhlYWx0aCBhbmQgSHVtYW4gU2VydmljZXMxGDAWBgNVBAMTD0FTUFJU
RlMuSEhTLkdPVjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJNoQPsl
jXd3tt9f6uP3bCUXOJIgO/vY+co4H+7tiMg7/oSqOB1cNPXt8JFIWMY2Y0v76QoS
JaAQXkwYQSmGRCmR96ewg5s57H/kgoLRR0Kvtv+LgycsBkhaBYWNkSkj/lku3UbT
dqiaY4OrhXNlJtC01S0Ze68EPqavhtsesmZOR2MvMpFnYVvar0hyyADlai71M8Sd
GWW9ukzGpOL8sy+nr7YoX8PL3lQq0PRed7DXpIssrCzi3u3TTxnd0m1lW6wIfxEh
f9iN+tYN8BkdWmWN2aSwK4ow8+d2/EQ/aum6kGFAt2knPR+mBA9Psno+GxqxdFp5
EuQPRoHTkHaNDnUCAwEAAaOCA4wwggOIMC8GA1UdEQQoMCaCD0FTUFJURlMuSEhT
LkdPVoITd3d3LkFTUFJURlMuSEhTLkdPVjCCAfcGCisGAQQB1nkCBAIEggHnBIIB
4wHhAHYAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFmgoUV9QAA
BAMARzBFAiA95abVsb1d47UV+yifl85oB77M+axscHdGKUza8pkpEAIhAMCrbR90
FZ5sR4zYqJdYmtnvxxpgc5RjsNx9efueb+jaAHcAVYHUwhaQNgFK6gubVzxT8MDk
OHhwJQgXL6OqHQcT0wwAAAFmgoUWBgAABAMASDBGAiEA3Js4VWnzEYgBBxJifl1l
DKzJUnez18+NY1X/6+9yFWwCIQCw4rKJgabeeqLa9Td36Glxe9DBH0OPbwnZL7F7
sVEyMAB1AF6nc/nfVsDntTZIfdBJ4DJ6kZoMhKESEoQYdZaBcUVYAAABZoKFFk4A
AAQDAEYwRAIgLLQvPOxYkyo8Uc05VKTXOq+Rgux+deAHSMPeAzXwlJ0CID3sZNFT
LRgvXPV424AS44BErdgIs2GUogZheB5fC/apAHcAu9nfvB+KcbWTlCOXqpJ7RzhX
lQqrUugakJZkNo4e0YUAAAFmgoUWYAAABAMASDBGAiEAq/WXVQ1NYDUKl2cFFZVx
R1uSuMCN4ZwVir9NhAvv0BQCIQDyM4r4S+26Qvn945ROa8ZY0Dyy2MKuEFP547Ty
wH3kuzAOBgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwMwYDVR0f
BCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBL
BgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3
dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggr
BgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0
dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAfBgNVHSMEGDAW
gBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUKV5kMtApJorB0nB5Fgdq
ro+sbh8wCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAOY79hM34AEm58TCk
4IvlmBTezm673IVdnnwiuP9yEKEliMyqObDbFupgevRpvvZKoaoj69vQIGR6214Y
0MZnIc8AQz9knmsLmb6mR5mHu2gjEYsKwfREzRAIvK+L/cRvYPRvDv9CZPoz3e3G
jT9xlE8NcwKrMIid8D3/8yW7JS1Ygyq0kgRPIEk5PVtHU3wbaXkNipmB7F9fq4IG
OtkYkR3/rJemJBaweT7C2/e/FiDhRm6ZNkUd7NPuo9z7+iQexUFkInT7GG9vIHUi
xZNESmpfMq6X2argpRdzOOV6pd9U+8xveOX9lKjYuhKr6qe1FaUWPocq5Nceye8L
4U/oMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk2hA+yWNd3e231/q4/ds
JRc4kiA7+9j5yjgf7u2IyDv+hKo4HVw09e3wkUhYxjZjS/vpChIloBBeTBhBKYZE
KZH3p7CDmznsf+SCgtFHQq+2/4uDJywGSFoFhY2RKSP+WS7dRtN2qJpjg6uFc2Um
0LTVLRl7rwQ+pq+G2x6yZk5HYy8ykWdhW9qvSHLIAOVqLvUzxJ0ZZb26TMak4vyz
L6evtihfw8veVCrQ9F53sNekiyysLOLe7dNPGd3SbWVbrAh/ESF/2I361g3wGR1a
ZY3ZpLArijDz53b8RD9q6bqQYUC3aSc9H6YED0+yej4bGrF0WnkS5A9GgdOQdo0O
dQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 77432351713079494169907752121064290594
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-17 14:24:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-17 14:54:11 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US Dept of Health and Human Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASPRTFS.HHS.GOV'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18608440310723244284498689542460544046084854674349869980176014130929174970374657172966068952066656497584937438880287411228040870881509629987366550444838257424232863362901510107829440352450763652610041902248592909609117689880711126449514940610090091380329627061500247071190836405581500257611532857250894573169901485440971968223876021037915535210398073027681968633850107263515710786359098483131160805438905941860475913071842432870418078289759346589495602987845403367765336150887295099969544303520057398384920940699219279194043436282153800504998429527797599428286593326344276146564923433766553610393936120546749978578549
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ASPRTFS.HHS.GOV'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ASPRTFS.HHS.GOV'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							295e6432d029268ac1d2707916076aae8fac6e1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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