Sip1-noram.s4b.my-ucaas.com

- NTT Cloud Communications SAS -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 01:c9:e2:bd:b5:cd:00:f0:cb:6f:ae:51:68:2d:e2:8a was issued on by DigiCert Inc.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

NTT Cloud Communications SAS

Organization: NTT Cloud Communications SAS
Locality: Paris
Country: FR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:c9:e2:bd:b5:cd:00:f0:cb:6f:ae:51:68:2d:e2:8a
Serial Number (int): 2377478519308177712276215168121037450
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 7b:8f:fd:f1:9b:a0:71:5a:6c:c2:91:01:ef:e7:36:7d:97:0a:98:52
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 18:86:2d:f3:f2:0a:a7:a6:92:48:72:26:57:a7:01:75:94:a5:f0:14
Fingerprint (sha256): 01:05:a7:0a:31:9e:cc:76:2c:0d:02:f3:ac:0c:24:bd:92:dd:94:f2:a5:99:6e:76:d9:cd:83:63:f6:37:99:e1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate Sip1-noram.s4b.my-ucaas.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Sip1-noram.s4b.my-ucaas.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Sip1-noram.s4b.my-ucaas.com
Sipfed.s4b.my-ucaas.com
webconf1-noram.s4b.my-ucaas.com
sip.sfb.arkadindemo.com
sip-noram.s4b.arkadindemo.com
sip-noram.emea2.arkadin-trial.com
sip-noram.ci.s4b.my-ucaas.com

Other certificates including the domain name my-ucaas.com

(limited to 100 certificates)
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip.emea.my-ucaas.com
sip.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-apac.s4b.my-ucaas.com
sip-apac.s4b.my-ucaas.com
*.aw365.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-apac.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.hcc.emea.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip.emea.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
*.hcc.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
*.hcc.emea.my-ucaas.com
*.s4b.my-ucaas.com
sip.emea.my-ucaas.com
*.aw365.emea.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
*.aw365.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
*.emea.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.aw365.noram.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
*.hcc.emea.my-ucaas.com
sip-apac.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
*.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
aw365.noram.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip.emea.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip2-noram.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
sip.emea.my-ucaas.com
*.aw365.noram.my-ucaas.com
*.emea.my-ucaas.com
*.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.s4b.my-ucaas.com
sip-emea.s4b.my-ucaas.com
*.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
Sip1-noram.s4b.my-ucaas.com
*.my-ucaas.com
sip-emea.s4b.my-ucaas.com

Certificate

The complete raw certificate details for Sip1-noram.s4b.my-ucaas.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqPoz8TN7b6i6oNETkq+c
LvbjKO4IqZ1KaTRLbOnlowVopf6yzqMfcWuwMCpZMWn4WHewKXUh5MZsxAGrArM7
nCyY3TcRnOzLfuqOmC1A52rdJsMi4YF1qJRo7UAq9s05Vmgs7cfVGjFkNFSdiyJB
Pot6VXbautvILtNKfFdVh35upkJrUrY0MWMAruozpMQqhkQTZNDnn9/FRtTz3Fcm
PocepnHnkrk7bStmJD+220R/rSGl+ji9sbZQ9V8SfKBB+ScpmwdWWcgHi7HHjron
KzMuHbzpBTyt+2TnaSnTqNLIDGD6heYxrSk5T7zC0i5c3KPnofdRjSpxj9koJISs
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2377478519308177712276215168121037450
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NTT Cloud Communications SAS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sip1-noram.s4b.my-ucaas.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21331414882309285218298349245602651350745546538107808626499161280829486695851229824488603208129794678273756867800548323062082963790657885911360825672829894393776944955674146443927262741515789543716077268159832985481985469633212396776540093669597852263496385819420108724513058635819876442238926320754493293432688306947191283358564643335531969039597069369520088364808706783657612555906963234282060107773507156284736715676036212797347714263016699186967259780404297828550773007860415986487012547788048593260959209279558789640956080014154164043970401463969341994267023668107289949512425863300433964647052910673756221123609
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7b8ffdf19ba0715a6cc29101efe7367d970a9852
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (212 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Sip1-noram.s4b.my-ucaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Sipfed.s4b.my-ucaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf1-noram.s4b.my-ucaas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.sfb.arkadindemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip-noram.s4b.arkadindemo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip-noram.emea2.arkadin-trial.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip-noram.ci.s4b.my-ucaas.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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