www.two.qa.cox.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 89:d6:13:5f:f7:f7:1e:e0:00:00:00:00:51:02:15:f3 was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 89:d6:13:5f:f7:f7:1e:e0:00:00:00:00:51:02:15:f3
Serial Number (int): 183215779919459383843559423840138434035
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 2b:95:fa:de:fd:a3:2b:f3:be:a9:6f:c7:35:8b:37:58:79:7e:93:59
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 84:89:a4:19:75:8d:94:34:5b:30:7a:79:e1:3f:08:55:d7:9e:8f:11
Fingerprint (sha256): 01:4c:dd:dd:32:d5:16:71:2d:11:33:f7:cf:15:ee:82:0c:7d:62:28:27:d2:49:49:6e:2b:62:fe:ae:a4:68:7f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.two.qa.cox.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.two.qa.cox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.two.qa.cox.com
two.qa.cox.com
activation.two.qa.cox.net
framework.two.qa.cox.com
framework.two.qa.cox.net
framework.two.qa.coxbusiness.com
images.two.qa.cox.com
images.two.qa.cox.net
images.two.qa.coxbusiness.com
intercept.two.qa.cox.com
myaccount.two.qa.cox.net
store.two.qa.cox.com
ww2.two.qa.cox.com

Other certificates including the domain name cox.com

(limited to 100 certificates)
newsroom.cox.com
media.cox.com
www.privacy.dev.cox.com
mail-content.rm.cox.com
*.ecs-np.cloud.cox.com
chat1dev.cox.com
unifyoffcycle.cei.cox.com
www.two.qa.cox.com
CATL5PWSM20122.corp.cox.com
testinglemur.cox.com
measurementapp-origin.nonprod.aws.cox.com
m.mc.cox.com
newsroom.cox.com
*.eps-nonprd.corp.cox.com
duketrdd113.corp.cox.com
widget.qaint.cox.com
measurementapp-origin.prod.aws.cox.com
issues.stg.cox.com
cxc.cox.com
mobile.store.cox.com
jobs.cox.com
dark-voicetools.cox.com
DT-VOIP-2801-3.cox.com
mail-content.rmt.cox.com
jenkins.stg.cox.com
m-intercept.cox.com
publ.one.qa.cox.com
bi-discovery.corp.cox.com
porting.cox.com
nops.cox.com
www.cox.com
portal.cxqa.corp.cox.com
uwp-wifi-access-portal.cox.com
measurementapp.cox.com
sso.cox.com
cmac.dev.cox.com
*.ossprov-np.corp.cox.com
issues.corp.cox.com
idm.cox.com
wifi.cox.com
m-idm-east.cox.com
publ.one.staging.cox.com
idm-extread-qa.cox.net
ccirecruit.cox.com
dev-webview.wifi.cox.com
myaccount-business.qaa4.cox.com
webapi-svc.int.dev.cox.com
*.staging1.services.coxlab.net
atmos.cox.com
platform.ecs-ddtc.cloud.cox.com
privacy.dev.cox.com
test.cox.com
cxconnect-stage.cox.com
chat1.cox.com
bi.cox.com
coxmule.cox.com
login.cox.com
DUKEISEC15.corp.cox.com
oa.mail.cox.com
CATL0PWAS10933.CORP.COX.COM
ccidev.cox.com
ewfmm3.cox.com
wfo.cox.com
mobile.console.cox.com
webview.wifi.cox.com
secure06.lithium.com
porting-qa2.cox.com
coxlaw.cox.com
UCEEPOOL01.corp.cox.com
wfo.cox.com
capdev.sb.cox.com
OSPVault.cox.com
reportsdev.cox.com
repo.corp.cox.com
*.modops-dvtc.cloud.cox.com
forums.cox.com
sip.cox.com
portal.cxdev.corp.cox.com
idm.east.one.qa.cox.com
jump.cox.com
wfo.cox.com
serv-boundless.dev.cox.com
uet.corp.cox.com
mdm.cox.com
es.mobile.store.cox.com
connect2.cox.com
psp6cwaaaqv99.corp.cox.com
dukencwgqv99.corp.cox.com
secure06.stage.lithium.com
fbc-qa.cox.com
portal.cx.corp.cox.com
caps.cox.com
wam-stg.cox.com
ww3.cox.com
disp.cox.com
myes.cox.com
IATL0AS121.coxnet.cox.com
myworld.stg.cox.com
*.encoding-np.kaas.corp.cox.com
userreg.cox.com

Certificate

The complete raw certificate details for www.two.qa.cox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtCK2NdYmwZf6H6dhN20r
RfmYoDACyAdanMtZE5w9MJNhKgXWmEtWg3O5r+0Qh4bZdGqlh+KOxeKd8CPslnle
t1votna0t8VrOtWGm9A/domGUfSmElfjAgrIr/+hygN7cpchuhjgN5arAEc7a8aA
gihHyrQTuZQXdHBOU+/pT315vEBvVudt3krjg5fnhIMzwDOHWekQ17mMMGX/tiD5
4Uk1uuZPeb67tnmzY+AUkCc5hKmwHPZv0xJZVwEicfbQX1Yj9IOwdDSHcgqX3z8l
QTUvkUU+PTiL8vtGt1hBu/75682dB3EURzBP8guD0iKLJkp2gX73rSiJg7YBhjcH
zwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 183215779919459383843559423840138434035
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-06 15:22:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-05 15:52:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.two.qa.cox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22740011900203269195896573322528320698016928668180424621303664826361755984339202513016144035708751658756010565419805491669734761219501127936294483418889071019178089636402643372643259601237098303912980119635366194325319687336360045699549834101671448921420131224041935888535203793494667352149944806216430213334277363300860357923342896704368480512736524958857605336351375601781609554900323252056860279798317776833729434537706336599021558169243241564233114139039853594399368159819443276379631027539892789436155693667299961011120792265878210973914491224778740800955307187868013084713365657333409225276551597676000162809807
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (324 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.two.qa.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.two.qa.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.two.qa.coxbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.two.qa.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.two.qa.coxbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercept.two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.two.qa.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.two.qa.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.two.qa.cox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b95fadefda32bf3bea96fc7358b3758797e9359
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00995f10dd5d1ce76364924dbc0ea9d120c485a2c4e165f1d0efd9d6164b9c5dec15f72d41809468bc025357ae6105e190f0cf2570d3076082fa180bb3d1e08f437f7351aebcb4e6c30d5650a3293bc8d49894fb39d67812565e8a50d63984bb99eac689b10e842b59244e470ef81d77455736d6a75873340d089d064a136ef8716b6468604dd9a1d41a4c8f2ffdf72a1a06ff952fa7da68e64f097e0f61c4746a8444442c4bea920e83deca8d36d750ec35ac65e2d202c14d00f7aeb2e47225f1bc594fd59157d1cb15bb114a9cfa051789bd2f99f6d57ba99c8edb5ddebe9e24804355ca1790c2c9c15e54a0d382dd46667b94c38317c0d6d8d991b91d91d5d5