piwas-qa.travelers.com

- The Travelers Companies Inc -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number dd:17:22:01:c5:5e:8c:a2:00:00:00:00:54:d0:d0:56 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Travelers Companies Inc

Company registration number: 12-AA
Organization: The Travelers Companies Inc
State / Province: Connecticut
Locality: Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): dd:17:22:01:c5:5e:8c:a2:00:00:00:00:54:d0:d0:56
Serial Number (int): 293879499638450245699785208911520387158
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 81:51:0d:c6:48:56:24:50:d2:23:2e:38:1e:c5:d1:bc:7c:3b:9e:e2
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): f9:e5:cf:ef:64:37:13:3f:f8:a6:e2:ea:8b:97:97:b3:f1:59:d0:f4
Fingerprint (sha256): 01:06:d8:84:d9:8c:b1:fa:8d:c9:cd:cb:d2:fe:2d:6b:07:7d:5b:57:c8:88:2f:d8:7f:90:13:36:3f:13:a4:ea

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate piwas-qa.travelers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for piwas-qa.travelers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

piwas-qa.travelers.com

Other certificates including the domain name travelers.com

(limited to 100 certificates)
travelers.com
rmisui-qa.travelers.com
agent-qa.travelers.com
uat3-selfservice.dev.travelers.com
secureamp.travelers.com
mylogon.travelers.com
biepwjas.travelers.com
rmdquote.travelers.com
eclaimreporting.travelers.com
secure.travelers.com
riskcontrol.travelers.com
piepwjas.travelers.com
careers.travelers.com
agencyonboarding-status.travelers.com
lyftclaim-auth.travelers.com
federationcert-mo.travelers.com
piwas-qa.travelers.com
foragents.travelers.com
piwas-qa.travelers.com
businessinsured-api-auth.travelers.com
cat-acct-uw-pricing-dev2-test-harness.travelers.com
thirdpartyclaim-api-auth.travelers.com
employees.travelers.com
umumedia.travelers.com
epw.travelers.com
timetrak.travelers.com
appsmytpi.travelers.com
bondservices.qa.travelers.com
claimregistration.travelers.com
printselection.travelers.com
pdfweb.travelers.com
bi-agclaar.travelers.com
bi-digital-assessment-ui-auth.travelers.com
bi-customize-quote-pt-auth.travelers.com
thirdpartymedical-api-mo-auth.travelers.com
paymentcontainer.dr.travelers.com
qaagentauth.travelers.com
qavendorregistration.travelers.com
xapi-router-service-dev.dev.travelers.com
akamai-san69.exacttarget.com
accessclaim.travelers.com
mi.travelers.com
bi-webpdext-pt.travelers.com
iexmlepv.travelers.com
travalert.travelers.com
polarissalesforceservice-poc.dev.travelers.com
biws-pt.travelers.com
bi-guidewire-proxy-dev.travelers.com
clocp.travelers.com
bi-trvpas-pt.travelers.com
bi-platform-pt.travelers.com
autopay-cfpwzn.travelers.com
accessclaim.travelers.com
asguide.travelers.com
agenthq.travelers.com
biwas.travelers.com
voltage-pp-0000.travelers.com
myquote-mo.travelers.com
mo-edaxfilescan-auth.travelers.com
view.ems.travelers.com
www.travelers.com
rmisui.travelers.com
secureemail.travelers.com
p2p-qa.travelers.com
plgateway.travelers.com
connectwcforagents.travelers.com
epay-cl.travelers.com
subrogation-api-auth.travelers.com
servicesqa.travelers.com
agentdocs.travelers.com
socialplus.travelers.com
cct-gms-prod.travelers.com
transpnluwguide-pt-auth.travelers.com
aimmytpiregistration.travelers.com
esri-mo-ext.travelers.com
secureeft.travelers.com
epw.travelers.com
oplquote.travelers.com
piwas-qa.travelers.com
epwjas.travelers.com
securemail.travelers.com
egeico.travelers.com
apps.travelers.com
premiumauditreg.travelers.com
biwas-pt.travelers.com
internal.learning.dev2.travelers.com
pt-iexml.travelers.com
boa.travelers.com
qafederatedsso.travelers.com
sfscgateway-proxy-ext-mo-auth.travelers.com
esignws.dev.travelers.com
plagt.travelers.com
bi-webpdext-pd.travelers.com
pijas-ocf.travelers.com
www.travelers.com
equote.travelers.com
vendorregistration.travelers.com
mytbiconversion-auth.travelers.com
api-qa.travelers.com
p2p.travelers.com

Certificate

The complete raw certificate details for piwas-qa.travelers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RRpHu021cml78CFu+Tf
JtDEbKlzqaBH/Lo9LI1/uHRJ0O/Nj/VaInR2kz55ac7Tw9h8VdPh0eqL/texK14V
hK26Jd4ljWG6zaKYuTv3b0c8fN+XTzlQF0nBeId82whyTgzQ8N7EEkba7Q3CrRDw
2tGtziKbqnPUhczG31G+/8+YT3sDmVZk1EjRD++ruD+VsOE5vvJnUUgUcT726ZE9
yE/M6418Qx3lueF1bO7OaRElBNMArBN98jFr+euw2OrruIpnb6YVBI4pWvr25j6q
NKxHQeP/Pc07Ke1GklPky/JZMN7Y/XcvPqbvYOMmfjXhzRQXNeh6Z4SyNyVJzp8r
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 293879499638450245699785208911520387158
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-23 19:21:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-31 19:51:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Travelers Companies Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12-AA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'piwas-qa.travelers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26898823813634917837619247042296269387422844341371232765924131371114004724933306169980442129628573799170116869322139636031440519857733356925467945634803106868940794045243615874095242471476086805221144471187852752920327324452391021198185160354199938199782435926180017062422198610685263899974095478777749907140150660111217792421902161770632558922527704393970988702529630048194355269085884699710970082670304869019997290920249430018669529047913225608852121012801215791307239529607476011939765703509773988901140760891875883715461579496961217460753985971172290026224996071222307327559258076509449384062502928900915262860129
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwas-qa.travelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							81510dc648562450d2232e381ec5d1bc7c3b9ee2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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