www.b2cshop-i.admin.ch

- Bundesamt fuer Informatik und Telekommunikation -

Issued by Swiss Government Public Trust Standard CA 02

About this certificate

This digital certificate with serial number 7d:d9:bd:43:53:d9:bd:60:bb:b7:b0:00:82:fb:07:ec was issued on by Swiss Government PKI.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)

Bundesamt fuer Informatik und Telekommunikation

Organization: Bundesamt fuer Informatik und Telekommunikation
Organization unit: Swiss Government PKI
State / Province: BE
Locality: Bern
Country: CH

Swiss Government PKI

Organization: Swiss Government PKI
Organization unit: Services
Organization unit: Certification Authorities
Country: CH

This certificate has expire since

Certificate Details

Serial Number (hex): 7d:d9:bd:43:53:d9:bd:60:bb:b7:b0:00:82:fb:07:ec
Serial Number (int): 167284066601069007359494927232626526188
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c1:81:86:a5:35:b9:13:5a:c0:55:ce:8c:9d:37:4b:35:71:ea:f6:16
AuthorityKeyId: 84:58:4e:87:2d:a5:b0:4e:49:85:bb:bc:01:71:e6:b4:c7:55:ff:10

Fingerprint (sha1): 9b:d9:5f:3e:7f:22:55:d6:d3:2e:2b:66:99:de:a9:2a:58:3a:f1:79
Fingerprint (sha256): 01:85:0d:1e:01:bb:15:82:a9:3a:7c:54:ef:e6:e7:16:61:fe:8a:82:41:48:91:23:de:74:3f:b0:b2:d6:72:1a

Issuing Certificate URL: http://www.pki.admin.ch/aia/PTSTCA02BC.crt

Revocation information

OCSP Server: http://www.pki.admin.ch/aia/bcocsp
CRL Distribution Point: http://www.pki.admin.ch/crl/PTSTCA02.crl
CRL Distribution Point: ldap://admindir.admin.ch:389/cn=Swiss Government Public Trust Standard CA 02, ou=Certification Authorities,ou=Services,o=Admin,c=CH

Check the revocation status for certificate www.b2cshop-i.admin.ch

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.b2cshop-i.admin.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.b2cshop-i.admin.ch

Other certificates including the domain name admin.ch

(limited to 100 certificates)
www.blw.admin.ch
www.gate.bav.admin.ch
www.jira-a.estv.admin.ch
sts0032.sts.eiam.admin.ch
www.cmsp4-a.admin.ch
appint.naz.admin.ch
www.staatskalender.admin.ch
*.geo.admin.ch
www.code.admin.ch
www.bundespublikationen.admin.ch
www.suissetax-r.estv.admin.ch
help.geo.admin.ch
int.translation.eda.admin.ch
www.portal.bsv.admin.ch
viaduc.sfa-laboratory.ch
www.tacho-en.admin.ch
e-dec-web-a.ezv.admin.ch
ncts-formular.ezv.admin.ch
trifid-lindas.int.cluster.ldbar.ch
ws.inar-r.zas.admin.ch
rp-eda01.eda.admin.ch
apis.sem.admin.ch
ws.seodor.zas.admin.ch
www.sust.admin.ch
www.edb.admin.ch
www.sib.admin.ch
www.apistore.estv.admin.ch
www.xmlns.bfs.admin.ch
www.logixs.eda.admin.ch
www.esti.admin.ch
nd8.li.admin.ch
www.bar.admin.ch
sts003-r.gever.admin.ch
www-tmp-a.ekf.admin.ch
www.cfig.admin.ch
adonis.ezv.admin.ch
www.bag.admin.ch
key-recovery.a-pki.admin.ch
Int.ex4.lmsvbs.admin.ch
toolchain-selfservice.bit.admin.ch
s001047a.adr.admin.ch
ws.dds.bakom.admin.ch
rio-a.ssl.admin.ch
www.portal-a.eiam.admin.ch
www.ekff.admin.ch
www.cms-a1.admin.ch
ws.lsvastammdaten-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
www.sonderbewilligungen.admin.ch
intranet.sibad.vbs.admin.ch
storme-r.bafu.admin.ch
intranet.gate-r.bar.admin.ch
idp-base.gate-r.eiam.admin.ch
tokenunseal.a-pki.admin.ch
www.e-cites-a2.admin.ch
www.regress.admin.ch
intranet.vbs.admin.ch
www.oscitv-gw-a.admin.ch
epo.ejpd.admin.ch
test2.gate-a.bit.admin.ch
www.etv.blv.admin.ch
www.bestellung-k.admin.ch
www.pxweb-admin-a.bfs.admin.ch
www.widget.e-portal.admin.ch
www.ausbildung.eur-med.bazg.admin.ch
ebd.abn.ezv.admin.ch
www.cmsp8-a.admin.ch
www.b2cshop-i.admin.ch
idp-egov-federal.gate-d.eiam.admin.ch
flrt.bazl.admin.ch
ca-sbpp.seco.admin.ch
www.b2cshop.admin.ch
www.coff-ekff.admin.ch
sanadress.vbs.admin.ch
www.medregom-r.admin.ch
transfer-pr.wbf.admin.ch
cmc.a-pki.admin.ch
www.g2020-info.admin.ch
www.eofcom-r.admin.ch
ekkj.admin.ch
www.astra.admin.ch
ww2.elic-en.admin.ch
ws.quattrop-r.admin.ch
www.bbl.admin.ch
wwwt.interruptio-ges.bfs.admin.ch
www-tmp.roemerholz.admin.ch
www.aramis.admin.ch
survey.efk.admin.ch
uat-publish-internet-vbs.vbs.admin.ch
www.infoafam-a.zas.admin.ch
www.sust.admin.ch
www.plugins.aramis-a.admin.ch
www.pxweb-a.bfs.admin.ch
www.openegov.admin.ch
www.cms-t2.admin.ch
www.psyreg-k.admin.ch
www.cfej.admin.ch
www.cfig.admin.ch
pin-reset.a-pki.admin.ch

Certificate

The complete raw certificate details for www.b2cshop-i.admin.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0BVBLZwGryCNZwaAIRcW
B14TyMXw/6aurO8DG3xu+apfIfafb2pd4A1UVtAxRyI1bUQOo87QxUKQPj64muPX
Ogfm009s/680InPx91v/GnQzGa3ZxtVN5gri9RbPp1wNQwt51FrvUt/tH0EYsAjK
EV5VbgsGzVrZmVBlGasKVhLOf5LN/9Z+QC7IUqhmQZ937D4+ooG4JQtj4BJwSwRN
/ZI+nOUdefSZzx2NgfqPCmDV6b8cYp0sXfWDu87U8ajAUT9KUneXNjcQifgCMH+J
qtsWsYwllN98SFOYHAfVjMxR1wt6EkfMazpnAZTFOH6puVgOSoAQiKi1oDrLTO2W
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 167284066601069007359494927232626526188
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certification Authorities'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government Public Trust Standard CA 02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-01 19:52:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-01 19:52:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Bundesamt fuer Informatik und Telekommunikation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Swiss Government PKI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'www.b2cshop-i.admin.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26268048467916262699757708054630949098054348187378974580137507120950061532234474265485138516354146163750543891609560669782934225801170760196654297058326109164357579964149269538093728181227448919125895069155282433987552442511688029314688653422208823307216928110190685129047756110581463724912333357014284290354065930998517830147477759922650161893433295038257098017438974527914199215955204378402568975527996770009159430620674686757090667341481239324905944622410060586066242104781013431012310933146401504058362950294858901885822310801481137110901173038142564302449478098504769038550107528632020493395744533267946150925993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (271 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.756.1.17.3.62.14
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.pki.admin.ch/cps/CPS_2_16_756_1_17_3_61_0.pdf'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [82 101 108 105 97 110 99 101 32 111 110 32 116 104 101 32 83 71 32 82 111 111 116 32 67 65 32 73 73 73 32 67 101 114 116 105 102 105 99 97 116 101 32 98 121 32 97 110 121 32 112 97 114 116 121 32 97 115 115 117 109 101 115 32 97 99 99 101 112 116 97 110 99 101 32 111 102 32 116 104 101 32 116 104 101 110 32 97 112 112 108 105 99 97 98 108 101 32 115 116 97 110 100 97 114 100 32 116 101 114 109 115 32 97 110 100 32 99 111 110 100 105 116 105 111 110 115 32 111 102 32 117 115 101 32 97 110 100 32 116 104 101 32 83 71 32 82 111 111 116 32 67 65 32 73 73 73 32 67 80 83]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b2cshop-i.admin.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/PTSTCA02BC.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/aia/bcocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (194 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.pki.admin.ch/crl/PTSTCA02.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://admindir.admin.ch:389/cn=Swiss Government Public Trust Standard CA 02, ou=Certification Authorities,ou=Services,o=Admin,c=CH'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 84584e872da5b04e4985bbbc0171e6b4c755ff10
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c18186a535b9135ac055ce8c9d374b3571eaf616
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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