origin-aws1.cec.tesco.com

- Tesco PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 4c:12:75:cc:a0:d5:1a:fe:00:00:00:00:54:cd:55:4e was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tesco PLC

Company registration number: 00445790
Organization: Tesco PLC
Locality: Welwyn Garden City
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:12:75:cc:a0:d5:1a:fe:00:00:00:00:54:cd:55:4e
Serial Number (int): 101117178277351243631362032771200275790
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: bd:0d:5e:fb:a5:91:db:da:cd:ab:23:0a:b4:ca:a5:a6:60:61:91:e6
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 5e:98:d5:04:18:61:f9:1a:1b:5b:63:e6:81:e0:b3:64:41:92:39:d7
Fingerprint (sha256): 00:fd:65:46:10:0d:67:51:94:d3:8c:10:38:f0:4a:9c:8c:c8:f6:09:73:e2:e6:33:f6:bd:36:0c:d8:66:49:01

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate origin-aws1.cec.tesco.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for origin-aws1.cec.tesco.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

origin-aws1.cec.tesco.com

Other certificates including the domain name tesco.com

(limited to 100 certificates)
origin-wdc.customerorder-ppe.api.tesco.com
mmslauat.my.tesco.com
enterprise.ui.tesco.com
payplus.tesco.com
digitalcontent.tesco.com
www.cedarcom.co.uk
tescolocation.api.tesco.com
ppe.tesco.com
ppe.digitalcontent.tesco.com
origin-aws1.cec.tesco.com
insight.dev.global.tesco.org
origin-euw.pricepromotion.api.tesco.com
clj-wdc-api.global.tesco.org
click.mail.tesco.com
enterprise2.ui.tesco.com
origin-wdc.supplychain.tesco.com
csmailings.tesco.com
ppe.tesco.com
origin-eun.price-promomgrtn-ppe.api.tesco.com
customer-service.tesco.com
locationsurvey.tesco.com
ppe.tesco.com
origin-pwdcz1d1.tpc.tesco.com
origin-wdc.profile-system-ppe.api.tesco.com
origin-aws1.storedvalue.api.tesco.com
payment-ppe.api.tesco.com
enterprise.api.tesco.com
origin-ld8.activedirectory.api.tesco.com
redirects.tesco.com
origin-aws1.search.api.tesco.com
preprod.origin-aws1.contentservice.tesco.com
origin-wdc.payplus-ppe4-ppe.api.tesco.com
cdo.qa.cdo.tesco.com
origin-wdc.customerorder.api.tesco.com
enterprise.ui.tescolotus.com
origin-eun.price-promocmd-perf.api.tesco.com
tracking.customerexperience.tesco.com
search-ppe.sys.api.tesco.com
redirects.tesco.com
origin-wdc.di-ppe.task.api.tesco.com
cdo.prod.cdo.tesco.com
origin-aws1.media-ingestion.digitalcontent-ppe.api.tesco.com
cdo.tesco.com
origin-aws1.price-ppe.api.tesco.com
cdo.prod.cdo.tesco.com
tracking.customerexperience.tesco.com
assets-ppe.api.tesco.com
Origin-wdc.customerprofile.api.tesco.com
cec.tesco.com
origin-wdc.secure-ppe.tesco.com
digitalcontent.tesco.com
thowa.tesco.com
payment.api.tesco.com
sellers.tesco.com
origin-aws1.fulfilment-ppe.tesco.com
origin-aws1.int.mca.tesco.com
techsupport.tesco.com
origin-wdc.supplierorder-supplierslot-ppe.api.tesco.com
m3.tesco.com
supplychain.tesco.com
ppe.api.tesco.com
origin-cdc-payplus-ppe.tesco.com
contact.api.tesco.com
hybrid.tesco.org
tescostoreprefs.tesco.com
storedvalue.api.tesco.com
redirects.tesco.com
ppe.digitalcontent.tesco.com
origin-wdc.supplierorder-ppe.api.tesco.com
authoring-assets.ppe.eun.app.digitalcontent.tesco.com
webmail.cn.tesco.com
enterprise.api.tesco.com
origin-aws1.www.tesco.com
enterprise.api.tesco.com
enterprise.ui.tesco.com
origin-aws1.cec.tesco.com
origin-aws1.int.mca.tesco.com
origin-wdc.secure-assets-til.ap.tesco.com
origin-wdc.orderfulfilment.api.tesco.com
api-ppe.tesco.com
origin-aws.digitalcontent.api.tesco.com
origin-aws1.payment-ppe.api.tesco.com
card.sys-api.tesco.com
origin-euw.price-promoquery-dev.api.tesco.com
authoring-ppe.assets.tesco.com
origin-eun.pricepromotion.api.tesco.com
enterprise1.ui.tesco.com
origin-wdc-tul.www.tesco.com
origin-euw.price-promoquery-ppe.api.tesco.com
identity.api.tesco.com
api.analytics.mobile.tesco.com
Origin-wdc.identity.api.tesco.com
origin-pcdcz2d4.tpc.tesco.com
origin-sdc.tap2system.api.tesco.com
origin-wdc.rangeplan-txt.sys-api.tesco.com
partners.tesco.com
enterprise2.ui.tesco.com
origin-aws1.price.api.tesco.com
shipping-transport.api.tesco.com
origin-aws1.ccc-portal-ppe.tesco.com

Certificate

The complete raw certificate details for origin-aws1.cec.tesco.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 101117178277351243631362032771200275790
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-11 08:10:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-10 08:40:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Welwyn Garden City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tesco PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00445790'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'origin-aws1.cec.tesco.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 752919047404867082369527142111749886507666999766922114546074820626924068880180743070864065981632604322799112705795571789702715098713815548721739112812061079387525775557216829660862348378481781179014996215654422190904729981271914965748890920738862765132102796129587457925755375464769178870006358647111999380183308193614970340620188031320207425773319218844027207913126516212107654847080661369961345846058188801674715616729957139038525671889766218173162825322602987053547472353138781301008678831087159264910769534901921939642149587987623732643231620364412500633132250346347323150334903866083906440879488467133726870004376588639181943101081726070549612409674447606946283410279629630840044002128354162386978499390170976158630113944659441110078786014650906806972156585720231129069881922661314928056925260388527337985897067716808939178022925286106577265779965492952655601555944922788969213758902643847535602839183129777418026531859216871402070912479375609147488849203191464133235129182418883760121424803898612200335693607274463107981720108897952595467528679163987057391475067333222667790235342271873140534365591987985472795724414122879752093249402189622821018839829710472770809884711664298764882171258914524617552230236823009305603487644337
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-aws1.cec.tesco.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd0d5efba591dbdacdab230ab4caa5a6606191e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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