lyncae.merkleinc.com

- Merkle Inc -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1b:e2:eb was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Merkle Inc

Organization: Merkle Inc
Organization unit: MDT
State / Province: Maryland
Locality: Columbia
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1b:e2:eb
Serial Number (int): 1276895979
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 88:5b:f2:83:4d:12:95:d3:1e:c2:7f:56:27:1e:7f:86:99:f7:ff:22
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 38:53:04:7f:de:cf:96:eb:28:87:b5:1c:9f:d9:68:90:0f:93:83:6d
Fingerprint (sha256): 00:65:c9:19:de:59:7d:03:6e:ad:36:20:ef:18:af:45:dd:cf:bf:8b:02:d0:07:a8:ed:e3:f2:e4:8e:43:b1:fb

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate lyncae.merkleinc.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lyncae.merkleinc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lyncae.merkleinc.com
meet.cognitivedata.com
lyncdiscover.cognitivedata.com
meet.impaqt.com
lyncwc.merkleinc.com
sip.impaqt.com
meet.merkleinc.com
lyncext.merkleinc.com
lyncdiscover.merkleinc.com
lyncdiscover.impaqt.com
sip.merkleinc.com
dialin.merkleinc.com
sip.cognitivedata.com

Other certificates including the domain name merkleinc.com

(limited to 100 certificates)
dx.merkleinc.com
le1.pls.merkleinc.com
lyncae.merkleinc.com
emea.secureshare.merkleinc.com
signon.merkleinc.com
lyncae.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
*.lner.merkleinc.com
promo.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
pipes.merkleinc.com
*.lookalike.m1.merkleinc.com
le2.pls.merkleinc.com
denvpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
rmg-vpn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
vpn.merkleinc.com
www.apricot.merkleinc.com
allyreporting.merkleinc.com
le2.pls.merkleinc.com
*.merkleinc.com
*.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
merkury.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www.mission45.be
le1.pls.merkleinc.com
rmg-vpnbackup.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
code.test.pls.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
next-ci.aws-aquila.analytics-emea.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
sonar.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
webmail.merkleinc.com
*.lookalike.m1.merkleinc.com
officewebapps.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
pegademo.merkleinc.com
merkleinc.com
le1.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
ci.jpostma-discovery.aws-sandbox.analytics-emea.merkleinc.com
pegademo.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
dx.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
admin.buytime.network
sfbusae.merkleinc.com
lyncae-cn.merkleinc.com
le2.pls.merkleinc.com
pipeline.8bitpictures.com
lsweb2013-eu.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le1.pls.merkleinc.com
le2.pls.merkleinc.com
le2.pls.merkleinc.com
www2.merkleinc.com
le1.pls.merkleinc.com
vdidev.merkleinc.com
officewebapps.merkleinc.com
*.lner.merkleinc.com
aue1.xfer.merkleinc.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com
lsweb2013-cn.merkleinc.com
maytecedillo.com
le2.pls.merkleinc.com
le1.pls.merkleinc.com

Certificate

The complete raw certificate details for lyncae.merkleinc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx90RTYSxFPNhMzgspuLa
lmpnLUmO4LBcFZkgsVnBwbDSIFgfWvMoPsESgEzJ8luMzC14wxJ0Wbsj1yvA1XZq
wnSO9t6x6qeSB65TxWLq2yXyVcq8+83V+1p7CuHd/XriIkp8+sfVit16Ni6BQ4RV
l3XncaFkHsyjgIFBwPCkAjmSaf7xAQyoH38LOT+dTadvqdd2yuQNWnywdCMtKu4w
EhF8Q9BNhi+ximG8kscWb0G3B8f0v8a/xDLQcEe1d9/PjyVWN2qmp9LIr6KDGQjC
83TdcJaMGd5j1AjaBqgKvIZB6TjdZNxiMCmWEyK1zirRNQwD3HLCd/S7m+NKpQ2B
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276895979
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-12-31 04:21:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-07 15:20:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Maryland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Merkle Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MDT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lyncae.merkleinc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25230435179375059110438190098858736143527073908219116656039668611865366566209890366209871695321060442557772955121598709494292471992401014242092964011108528404574147024241340814934842785296781243999586922423707854798159105205909873715791535021406022553317627734219203500593464907319624734463622479567641580430305768621759020733991528780568511099983957079776378365755158339403818776868789893363534868560745528651551943341526785113760926932629132503659152380147950737168338178809973686145798040661792256563565771993748747997159818415004574971764498151923220775503176831676029606844910522029310512784362667429353493463423
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (297 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncae.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.cognitivedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.cognitivedata.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.impaqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncwc.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.impaqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meet.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncext.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.impaqt.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.merkleinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.cognitivedata.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							885bf2834d1295d31ec27f56271e7f8699f7ff22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00431e74f7d99f61d6faf57a85a986915c23db87acea2849b0bd1608d4c71a21b096241feb7a6de54caffd6bc47c453dd2336d67675a1bfc03ff2a874a7908f4ab1dd2b93559f6354a74008a1142e6bcb3bf842187ecbf4eead87aa36a8b8a1e0a39b42bc78cd56d07c33e319a9843f703f1fa50f2417c642f90498d2490325d08c5c446c980d37c021b341dc49d863992527b7353bcc22eef080a2d9e14b92aa5c8ce0f533d7dadeb85538a371839f9e06d7b5b7eb19827f52b1b138fd25feea121508e97ebed0e4cc0017e36d3aab33275dfddb57cbda8544d6cbbeac02263188ebd9a4ae2763b9cea7d9f098b856d0e57d14f98e5693bd1f897de990435536e