dashboard.sandbox.lpdaac.earthdata.nasa.gov

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:1a:d1:5a:42:e2:77:59:92:cd:b8:ce:d5:c7:9e:b4 was issued on by Amazon.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=dashboard.sandbox.lpdaac.earthdata.nasa.gov

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:1a:d1:5a:42:e2:77:59:92:cd:b8:ce:d5:c7:9e:b4
Serial Number (int): 6785385872088065863161495675937988276
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: ee:6c:d2:86:d4:25:56:8d:cf:59:9e:c5:f1:e8:c1:31:88:32:f6:89
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 10:c6:99:b8:32:93:61:55:6d:3e:1e:e2:eb:ca:8c:76:65:34:2a:0a
Fingerprint (sha256): 00:86:f9:30:ca:4c:0d:c6:c9:de:34:0e:0f:f7:9c:04:30:d3:4a:22:76:2a:e7:a3:75:d8:a6:53:fd:38:bb:da

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate dashboard.sandbox.lpdaac.earthdata.nasa.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dashboard.sandbox.lpdaac.earthdata.nasa.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dashboard.sandbox.lpdaac.earthdata.nasa.gov

Other certificates including the domain name nasa.gov

(limited to 100 certificates)
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sma.gsfc.nasa.gov
*.jpl.nasa.gov
maptis.ndc.nasa.gov
*.jpl.nasa.gov
nirps-staging.msfc.nasa.gov
plop.nascom.nasa.gov
grin.hq.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
lrp.at.nasa.gov
spacecomm.nasa.gov
www-gsfc.edn.gsfc.nasa.gov
science.hq.nasa.gov
server-mpo.arc.nasa.gov
*.jpl.nasa.gov
*.fltops.jpl.nasa.gov
step.nasa.gov
ensight.eosdis.nasa.gov
photonics.gsfc.nasa.gov
education.jsc.nasa.gov
AntiSpam.ndc.nasa.gov
cptrace.nasa.gov
msfcvpn.nasa.gov
sip.jpl.nasa.gov
omisips2.omisips.eosdis.nasa.gov
*.jpl.nasa.gov
nai-ar.ndc.nasa.gov
code.luna.nasa.gov
atfi.hq.nasa.gov
veritas.ndc.nasa.gov
handbook.appdat.jsc.nasa.gov
*.jpl.nasa.gov
stereo-ssc.nascom.nasa.gov
*.dip.amesaero.nasa.gov
monitoring.eva.appdat.jsc.nasa.gov
*.jpl.nasa.gov
straw.nasa.gov
code541.gsfc.nasa.gov
*.jpl.nasa.gov
nescacademy.larc.nasa.gov
ecc.earthdata.nasa.gov
*.jpl.nasa.gov
cptrace.nasa.gov
corrosion.ksc.nasa.gov
minx-docs.arc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
ceres-wg.larc.nasa.gov
*.jpl.nasa.gov
supplychain1.gsfc.nasa.gov
aerocenter.gsfc.nasa.gov
*.jpl.nasa.gov
search.earthdata.nasa.gov
docserver.gesdisc.eosdis.nasa.gov
xanth.nsstc.nasa.gov
science.wff.nasa.gov
dashboard.sandbox.lpdaac.earthdata.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
istd.gsfc.nasa.gov
uat.earthdata.nasa.gov
*.hq.nasa.gov
sra.jsc.nasa.gov
gs6102dsc-web2.gesdisc.eosdis.nasa.gov
*.jpl.nasa.gov
cxfmea-cil.nasa.gov
openhouse.larc.nasa.gov
*.jpl.nasa.gov
femci.gsfc.nasa.gov
*.jpl.nasa.gov
vso1.nascom.nasa.gov
urap.gsfc.nasa.gov
*.mdscc.nasa.gov
lance4.modaps.eosdis.nasa.gov
*.jpl.nasa.gov
fcportal.nsstc.nasa.gov
*.nccs.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
*.jpl.nasa.gov
sfa.staging.ird.appdat.jsc.nasa.gov
omisips1.omisips.eosdis.nasa.gov
lacerta.gsfc.nasa.gov
developer.sit.earthdata.nasa.gov
sta3cd-map.larc.nasa.gov
iris.production.appdat.jsc.nasa.gov
ozoneaq.gpc.gsfc.nasa.gov
s3-test.kzebdi.ngap.sit.earthdata.nasa.gov
plmpdms.jpl.nasa.gov
*.homeandcity.nasa.gov
*.jpl.nasa.gov
HumanResearchWiki.jsc.nasa.gov
discovery.larc.nasa.gov
*.jpl.nasa.gov
cmr.earthdata.nasa.gov
sohoftp.nascom.nasa.gov
rtf.nas.nasa.gov

Certificate

The complete raw certificate details for dashboard.sandbox.lpdaac.earthdata.nasa.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIQBRrRWkLid1mSzbjO1ceetDANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDIxNjAwMDAwMFoXDTI1MDMxNjIzNTk1OVowNjE0
MDIGA1UEAxMrZGFzaGJvYXJkLnNhbmRib3gubHBkYWFjLmVhcnRoZGF0YS5uYXNh
LmdvdjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALK9C4FAtfpYDYId
WLG+sM1+UIHql00M7RyfTtjn3R745Qm22Hyc58Lt9P8SvOU0wiye1E4p4yp9icOk
NUuqLa5IAtH6rlC9d2kxJh4E4jiYKJ30YvGcW+8CSWPZELIBj95enoZagZWUDXi6
9wMlCYrfOqO4ldA3/sghgem+oZq4S8OH26qffGy67GaYwOT7vWJtK5X4MRrwOkeY
qwxLjXg06bRZ9KPtpQjY+JLjmwPxDPegp4kPfV3f5avuLvF0VcqLKNSFkMED3j/k
+j6pmGHsNQE7BDM9O8JwR39vAvUk/PKUamdKTIaPQQkJj8rTn8dJr6qFYgc2S8DU
IJRTJA8CAwEAAaOCAwMwggL/MB8GA1UdIwQYMBaAFMAxUs1aUMOCfHRxzsvpnPl6
64LiMB0GA1UdDgQWBBTubNKG1CVWjc9ZnsXx6MExiDL2iTA2BgNVHREELzAtgitk
YXNoYm9hcmQuc2FuZGJveC5scGRhYWMuZWFydGhkYXRhLm5hc2EuZ292MBMGA1Ud
IAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEF
BQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0w
Mi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEBBGkwZzAtBggr
BgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3QuY29tMDYGCCsG
AQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5j
ZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkCBAIEggFtBIIBaQFnAHYATnWj
J1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGNsnxwcQAABAMARzBFAiEA
/PyxSsskK8K0ynZ+4R3iQnMQlJnFwSwzhPe4/gzY9WECICdWmm6cv4q8xNzxKbLv
v6XRvb+FieyVeAgJTzuLMxpLAHUAfVkeEuF4KnscYWd8Xv340IdcFKBOlZ65Ay/Z
DowuebgAAAGNsnxwqwAABAMARjBEAiBuUHdPmaLWIGr0vuaipIpzQcXn35SZc9wf
Ko0ppV4QkwIgV3TTo1rKgeZ509gH9MMzWq+YXrmvfO+Y9edCszxGUZcAdgDm0jFj
QHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAY2yfHDdAAAEAwBHMEUCIARu
No0GkE0FXYJnpQg66A4/Se1uphg+80f90n3V9YTMAiEA6BspEqhvaG+SsSkS75yN
k2V7gKZm+luRrSypO8Q0hzUwDQYJKoZIhvcNAQELBQADggEBAF2dWFIm6SE9wTdp
/THBT1NeV+pekHYnX608G/q2niRa+YIivKTrK/KmFjen9hiPK3VLkuJl8DI2Zvit
udU5sU2csaDVx4FG0RQOOT5z8D04paVdgFz4rbg3HdBLL+5bx0EishmNZFXwZJPC
619YISBL41QoR/k6dbbhSY6KCYxl8N+SlpUoimnTqLeKWUPIgnFOgqJB7He6Lpls
8v5gCYk6q9Ea+CCPP6S7CMvAAxOFa8ol67UNlqlsrQpmoecEX4MnVzlTobYoLGyp
+XGoeUvt3oPvQmt3Xrl9pEdq9+6Qr09uK0yvVc80kT2nHyBUmCsh6MIByMvgsqUC
3Sa7IWk=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsr0LgUC1+lgNgh1Ysb6w
zX5QgeqXTQztHJ9O2OfdHvjlCbbYfJznwu30/xK85TTCLJ7UTinjKn2Jw6Q1S6ot
rkgC0fquUL13aTEmHgTiOJgonfRi8Zxb7wJJY9kQsgGP3l6ehlqBlZQNeLr3AyUJ
it86o7iV0Df+yCGB6b6hmrhLw4fbqp98bLrsZpjA5Pu9Ym0rlfgxGvA6R5irDEuN
eDTptFn0o+2lCNj4kuObA/EM96CniQ99Xd/lq+4u8XRVyoso1IWQwQPeP+T6PqmY
Yew1ATsEMz07wnBHf28C9ST88pRqZ0pMho9BCQmPytOfx0mvqoViBzZLwNQglFMk
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6785385872088065863161495675937988276
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-16 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dashboard.sandbox.lpdaac.earthdata.nasa.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22563639818775209301969168440200150779019988394716837046172589566843430461013088296668580412069138985288431504907525377325460290705045672715406732997360871294088904925466164508047391137481398042300224901835843924631231388832024988029249572670857694505204827003041280014823598640489899112847272345849132457582996445704542351332468015926937504800014625611022031433068882935992355085317427250072020922002433003267720757385798770834705200952179093446528520174031994377578566320851933915335787836943473974175867610527365296887470809152196647903627399022896113182365807635382691469049532502583432447810210036557831747085327
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ee6cd286d425568dcf599ec5f1e8c1318832f689
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dashboard.sandbox.lpdaac.earthdata.nasa.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670076004e75a3275c9a10c3385b6cd4df3f52eb1df0e08e1b8d69c0b1fa64b1629a39df0000018db27c70710000040300473045022100fcfcb14acb242bc2b4ca767ee11de24273109499c5c12c3384f7b8fe0cd8f561022027569a6e9cbf8abcc4dcf129b2efbfa5d1bdbf8589ec957808094f3b8b331a4b0075007d591e12e1782a7b1c61677c5efdf8d0875c14a04e959eb9032fd90e8c2e79b80000018db27c70ab000004030046304402206e50774f99a2d6206af4bee6a2a48a7341c5e7df949973dc1f2a8d29a55e109302205774d3a35aca81e679d3d807f4c3335aaf985eb9af7cef98f5e742b33c465197007600e6d2316340778cc1104106d771b9cec1d240f6968486fbba87321dfd1e378e500000018db27c70dd00000403004730450220046e368d06904d055d8267a5083ae80e3f49ed6ea6183ef347fdd27dd5f584cc022100e81b2912a86f686f92b12912ef9c8d93657b80a666fa5b91ad2ca93bc4348735
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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