standardsapi.tdquredev.devtest.aws.scania.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0d:38:79:85:d4:a2:fe:79:e3:4a:88:96:84:c3:8f:0c was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=standardsapi.tdquredev.devtest.aws.scania.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:38:79:85:d4:a2:fe:79:e3:4a:88:96:84:c3:8f:0c
Serial Number (int): 17573197343997382738648856616467926796
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 71:05:d3:b2:bd:3d:e7:63:e3:d6:f1:9f:f7:f1:fa:b2:9f:6c:55:7a
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): f3:92:52:c4:34:d3:14:14:24:80:a5:bc:1d:ee:ea:de:db:6d:94:ce
Fingerprint (sha256): 00:6a:58:d1:a8:6c:f4:27:72:c4:db:fe:df:57:f4:34:01:19:bb:f2:ab:71:81:a3:fa:6f:a4:ce:03:f2:90:10

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate standardsapi.tdquredev.devtest.aws.scania.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for standardsapi.tdquredev.devtest.aws.scania.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

standardsapi.tdquredev.devtest.aws.scania.com

Other certificates including the domain name scania.com

(limited to 100 certificates)
www.shopb2b.scania.com
rsc.cdn77.org
spii.scania.com
sparta.devtest.aws.scania.com
backend.omega.onappcdn.com
scaniaconfluence.prod.aws.scania.com
mobat.scania.com
standardsapi.tdquredev.devtest.aws.scania.com
webuyanyscania.uk.devtest.aws.scania.com
one.stage.scania.com
ws.conversion-dev.devtest.aws.scania.com
corporate-intranet.scania.com
ambari.streaming.prod.aws.scania.com
*.r.worldssl.net
myebapp.clad-playground.devtest.aws.scania.com
internal-equipmentusage.apivp.cs.scania.com
api.integration-dev.devtest.aws.scania.com
*.module.cava-staging.prod.aws.scania.com
web.cvss-dev.devtest.aws.scania.com
saps.dce.scania.com
ddmadmin.testdiagnosticinformation.cs.scania.com
static.clad.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
*.cava-dev.devtest.aws.scania.com
rfms2-status.testapies.cs.scania.com
chatbot.sfl.devtest.aws.scania.com
proxora-dev.cloud01-np.cd.scania.com
polarion-rms.cloud01.cd.scania.com
mona-calcium.np-dce.scania.com
sparta.devtest.aws.scania.com
homepage.devtools.devtest.aws.scania.com
fact.ema.prod.aws.scania.com
pre-comptool.scania.com
invoice-api.conversion-preprod.devtest.aws.scania.com
accounts.clad.devtest.aws.scania.com
dtsweb-prod.cloud01.cd.scania.com
sp-maintenancereportemailservice-api.apisp.cs.scania.com
test.calsium.devtest.aws.scania.com
rsc.cdn77.org
backend.omega.onappcdn.com
selfbilling.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
ec2-test.sfl.devtest.aws.scania.com
apicf.cs.scania.com
apim.devtest.aws.scania.com
identity.iron.cd.scania.com
polarion-rms.scania.com
identity.team-torch.devtest.aws.scania.com
oliver.pii-dev.devtest.aws.scania.com
adminlocalization.testapicd.cs.scania.com
ocs.scania.com
auth.clad.devtest.aws.scania.com
sgws.scania.com
win.caos.devtest.aws.scania.com
test.coc.devtest.aws.scania.com
apivp.cs.scania.com
calsiumhistory.scania.com
*.salesportal.prod.aws.scania.com
saps.np-dce.scania.com
keycloak.digitaldealer.prod.aws.scania.com
slapool01.scania.com
complete.scania.com
gbdesktop.scania.com
sp-grafana.apisp.cs.scania.com
monaws.np-dce.scania.com
preprod.jira-greenfield.prod.aws.scania.com
orderdiagnosticreadout.testdiagnosticinformation.cs.scania.com
apisp.cs.scania.com
ecs.apicd.cs.scania.com
mock.sws-dev.devtest.aws.scania.com
win.dev.aws.scania.com
puppet.sws-dev.devtest.aws.scania.com
*.scania.com
demo.sws-test.devtest.aws.scania.com
reflex-test.scania.com
testapird.cs.scania.com
saps.np-dce.scania.com
puppet-master.sws-prod.prod.aws.scania.com
saps.dce.scania.com
*.ccp.devtest.aws.scania.com
backend.omega.onappcdn.com
crp.prod.aws.scania.com
cloud.scania.com
complete.scania.com
saps.np-dce.scania.com
slapool01.scania.com
gitlab-dashboard.test.cs.scania.com
connect.shadow.devtest.aws.scania.com
dev.coc.devtest.aws.scania.com
fleetmonitor.scania.com
*.ithelp.scania.com
saps.dce.scania.com
uploadservice.diagnosticinformation.cs.scania.com
premacperiodicoptimizer.scania.com
saps.dce.scania.com
*.r.worldssl.net
multi-auth.sws-dev.devtest.aws.scania.com
mobat.scania.com
*.ciam.devtest.aws.scania.com

Certificate

The complete raw certificate details for standardsapi.tdquredev.devtest.aws.scania.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIQDTh5hdSi/nnjSoiWhMOPDDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDIyNDAwMDAwMFoXDTIzMTEyOTIzNTk1OVowODE2
MDQGA1UEAxMtc3RhbmRhcmRzYXBpLnRkcXVyZWRldi5kZXZ0ZXN0LmF3cy5zY2Fu
aWEuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkmwgByKthQ
AW6ZSZfQTnR79p2OUNevYlXLkrZmWkaepVBaXmkDDl4ecWh3HnMDo/Vj0Qv21R9X
0anzLtYSMcWJ+Vjg2oeb2bvaiAtsHHr5elqFpDI1hwed/NQQVXE2a2ACBKzt6lUT
LON4aJF8u7O05KnKcssEH6Hfnm2vjMSrHrHnGXuUYirufPJeGDP5mwxfWyjCtEmq
k7ffq06Gk6ZbCsFml3t2Ms4BG8vqL9kpTmcD9m+OlLlFlfZW+BGkeI1YGD+pqVPw
OeQpAw5LHm2DJFgJqtft7DZ0Hvq+gwTZTDxlpnUtXcmO5HL9MALLSTSqeMjd02DT
tQAOVo4YFQIDAQABo4IDBTCCAwEwHwYDVR0jBBgwFoAUgbgOY4qJEhjl+js7UJWf
5uWQE4UwHQYDVR0OBBYEFHEF07K9Pedj49bxn/fx+rKfbFV6MDgGA1UdEQQxMC+C
LXN0YW5kYXJkc2FwaS50ZHF1cmVkZXYuZGV2dGVzdC5hd3Muc2NhbmlhLmNvbTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG
A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucjJtMDEuYW1hem9udHJ1c3QuY29t
L3IybTAxLmNybDATBgNVHSAEDDAKMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcw
LQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnIybTAxLmFtYXpvbnRydXN0LmNvbTA2
BggrBgEFBQcwAoYqaHR0cDovL2NydC5yMm0wMS5hbWF6b250cnVzdC5jb20vcjJt
MDEuY2VyMAwGA1UdEwEB/wQCMAAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1
AOg+0No+9QY1MudXKLyJa8kD08vREWvs62nhd31tBr1uAAABhoJfhEIAAAQDAEYw
RAIgNML1SM1LKg9ZWpXtOHJvjJMQS9+lUDShOldc5vXJHQkCICgjxNNy94tVwrqY
pOWA/e5YzlTQ7yrIsP/NfZ7Eq/L9AHYAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH
3PADDnk2pZoAAAGGgl+EjwAABAMARzBFAiEAhBr5Y0WoC4zpvqXld61c1V2jrRSz
QJNEuQxKYnfeg2wCICYjNxsb/FVBTVToUqOlJL7uq3Wg1rFo6grsWwbKzrRhAHYA
tz77JN+cTbp18jnFulj0bF38Qs96nzXEnh0JgSXttJkAAAGGgl+EYgAABAMARzBF
AiEAjqlcrCQYjaWOaKpmCDI/yDWCb7bsPCpfx5p0AaPh+zwCIHVfZZ8T0VQrSvX0
3kSYmV7PFcf1NfzCMEOONFpyfIZJMA0GCSqGSIb3DQEBCwUAA4IBAQCy7p2X/9OI
IVh8/ng7L+p/2i9pCh+MFPnOayGFQ1JHi+jqcR4M6SolEYgFaYAHWuVR/y5RfGky
1Y+as7yyr5Xw8CQxHMHCOZ8XXgHpVA8iSt/vu4J1sFfxfsly62Jz1TYr8Id6EW1C
kRw46Aeut/a1eBWHElrp5gUjjlO+sT2qN1aMdZ0lRq/9sDGPYl4Cee8Yw4VAeSqf
bjvTWGorV1q7NxxYPkZFnW8tfL6OvSsGKFmiWu+wIHEcv3xjXa9K8juu4l+Oqqsg
ZRrdPx1hp4nxrzgOsRQ10R56yfdp2iyCctOI97qAffh33n6M7OFIKAFCI5VyJfcW
raVR1qrMvXob
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqUkmwgByKthQAW6ZSZfQ
TnR79p2OUNevYlXLkrZmWkaepVBaXmkDDl4ecWh3HnMDo/Vj0Qv21R9X0anzLtYS
McWJ+Vjg2oeb2bvaiAtsHHr5elqFpDI1hwed/NQQVXE2a2ACBKzt6lUTLON4aJF8
u7O05KnKcssEH6Hfnm2vjMSrHrHnGXuUYirufPJeGDP5mwxfWyjCtEmqk7ffq06G
k6ZbCsFml3t2Ms4BG8vqL9kpTmcD9m+OlLlFlfZW+BGkeI1YGD+pqVPwOeQpAw5L
Hm2DJFgJqtft7DZ0Hvq+gwTZTDxlpnUtXcmO5HL9MALLSTSqeMjd02DTtQAOVo4Y
FQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17573197343997382738648856616467926796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-02-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'standardsapi.tdquredev.devtest.aws.scania.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21370345837918370901468708723796756733951862143776548623609097772662819081635019403877237714947022419221470885804671653348957228860101297408644794851453027437708998137823575584148478122286045115409004019625840575382734109323196641263174048106419440767866686633850336475858221993214184540346439775631610913220889618172009671327677452713860996936853906758396518379354749213337620336243258254803557305245452463300962285398516480276743722700291883342397971628702470879702652722848618792835874243493163171744195963967866551915333046343100964841958902069618412157972701222642266848530521797439442563065045492568105304332309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7105d3b2bd3de763e3d6f19ff7f1fab29f6c557a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'standardsapi.tdquredev.devtest.aws.scania.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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