supportmsi.schneider-electric.com

Issued by RapidSSL RSA CA 2018

About this certificate

This digital certificate with serial number 06:43:51:7e:26:f5:47:81:06:7e:b9:e1:82:62:4a:74 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=supportmsi.schneider-electric.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:43:51:7e:26:f5:47:81:06:7e:b9:e1:82:62:4a:74
Serial Number (int): 8324904734214656138280243931818117748
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: a1:5d:21:0e:a2:a9:bb:dd:0b:eb:fe:a2:95:1f:28:a8:01:08:d0:0a
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75

Fingerprint (sha1): 12:2f:5f:7d:ff:1d:ec:ec:5f:dd:e1:d6:85:c9:11:d8:9f:18:fe:9e
Fingerprint (sha256): 01:93:0c:92:67:d8:17:8c:e7:91:74:e7:08:7d:6e:30:0c:65:67:52:04:b5:87:c5:84:9a:71:29:d3:2a:cf:ce

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl

Check the revocation status for certificate supportmsi.schneider-electric.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for supportmsi.schneider-electric.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

supportmsi.schneider-electric.com

Other certificates including the domain name schneider-electric.com

(limited to 100 certificates)
bigoudi.fr.schneider-electric.com
2020.pasupport.schneider-electric.com
qa-downloads.schneider-electric.com
plcupload.schneider-electric.com
subscriptions.schneider-electric.com
identity-pprd.schneider-electric.com
rexel.mie3c.schneider-electric.com
ecoxpert.schneider-electric.com
mel.vpn.ems.schneider-electric.com
www.quantil.com
support5.cdnetworks.net
ib2diag.schneider-electric.com
secure08.lithium.com
support5.cdnetworks.net
spiceportal.schneider-electric.com
tango.us.schneider-electric.com
*.struxureware.schneider-electric.com
secure08.lithium.com
nsi.us.schneider-electric.com
www.bem.schneider-electric.com
www.appgate.schneider-electric.com
lamtraveler01.schneider-electric.com
dalton.tr.schneider-electric.com
devportalint-test.schneider-electric.com
consulting.schneider-electric.com
conextpowercloud.schneider-electric.com
*.dev.schneider-electric.com
support5.cdnetworks.net
supportmsi.schneider-electric.com
vfast-portal.schneider-electric.com
hca.pme-central.schneider-electric.com
www.wesop.schneider-electric.com
identity-pprd.schneider-electric.com
nsi.jp.schneider-electric.com
support5.cdnetworks.net
ping-access.schneider-electric.com
www.schneider-electric.com
sip-res.schneider-electric.com
secure08.lithium.com
mam.schneider-electric.com
appserver.leetechnologies.com
www.wesop.schneider-electric.com
support5.cdnetworks.net
aliases2.schneider-electric.com
facilityexpert-us.schneider-electric.com
p7vci.eud.schneider-electric.com
xsl.schneider-electric.com
vendor-uk.schneider-electric.com
dcimassets.schneider-electric.com
akamaisecure2.qualtrics.com
lamtraveler01.schneider-electric.com
support5.cdnetworks.net
gtp-pp.schneider-electric.com
aliases6.schneider-electric.com
motion.schneider-electric.com
onlinekatalog.schneider-electric.com
webexperience.schneider-electric.com
onewo.eud.schneider-electric.com
psr.fr.schneider-electric.com
*.buildings.schneider-electric.com
app.ppr.schneider-electric.com
*.fi.schneider-electric.com
ezlist.schneider-electric.com
facilityinsights-us.schneider-electric.com
*.raproxy.dsp.schneider-electric.com
isel-sqe.dev.schneider-electric.com
intranet-maison.schneider-electric.com
facility-insights.assessment.schneider-electric.com
www.quantil.com
mysecn-pp.dev.schneider-electric.com
www.bem.schneider-electric.com
www.schneider-electric.com
stage-systemplatform.marketplace.software.schneider-electric.com
trm.fr.schneider-electric.com
ping-access.schneider-electric.com
www.schneider-electric.com
conextpowercloud.schneider-electric.com
es-training-courses.schneider-electric.com
seifoundation.schneider-electric.com
bigoudi.fr.schneider-electric.com
echange-uat.cn.schneider-electric.com
mft.schneider-electric.com
smsurvey-ksa.schneider-electric.com
stage.teamforge.schneider-electric.com
www.appgate.schneider-electric.com
e-mail-internal-northamerica.schneider-electric.com
support5.cdnetworks.net
schneider-electric.com
www.schneider-electric.com
hca.pme-mountain.schneider-electric.com
mft.schneider-electric.com
facilityinsights-preprod.schneider-electric.com
jira.au.schneider-electric.com
vfast-pp.schneider-electric.com
secure0079.hubspot.com
services.modicon.com
www.schneider-electric.com
vmanage-emea.schneider-electric.com
support5.cdnetworks.net
popeye.ae.schneider-electric.com

Certificate

The complete raw certificate details for supportmsi.schneider-electric.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIQBkNRfib1R4EGfrnhgmJKdDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe
Fw0xOTAxMzAwMDAwMDBaFw0yMDAzMzAxMjAwMDBaMCwxKjAoBgNVBAMTIXN1cHBv
cnRtc2kuc2NobmVpZGVyLWVsZWN0cmljLmNvbTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAOyFXQJq1yLUhHYm4qa3wnnAU80rMZXvNcEPeuuKuqoRgq2+
u9dtPwLqCnq3DXsywXWvCQc0UluhA8b5UjhWn2qAYxUuOZiYgC+498glFyB+nkh0
/GrKw5JsYuhNx9BHKwNhurq7GVJslo3n22LHJdA713hMlTxf5VltRnE00fxaVZnY
kHlodb9/0D7Zq3RjpMIA4YflHp81WirgDEMaxpyKFezOo/MjfpcNM6xxC7GAA+za
O7w8fK3lofCJ27Nxx2bmf3C3vHYX108Dv+eVoEgvuO8HLBG91P9eKA+vMLQGbzf3
KVORVSXtHYSRCwJ5nBhpbt6QZJpKctAIU1juOgMCAwEAAaOCAcYwggHCMB8GA1Ud
IwQYMBaAFFPKF1n8a8ADIS8aruSqqByCVtp1MB0GA1UdDgQWBBShXSEOoqm73Qvr
/qKVHyioAQjQCjAsBgNVHREEJTAjgiFzdXBwb3J0bXNpLnNjaG5laWRlci1lbGVj
dHJpYy5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLnJhcGlkc3NsLmNv
bS9SYXBpZFNTTFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIw
KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn
gQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz
LnJhcGlkc3NsLmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMucmFwaWRz
c2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMBMGCisGAQQB
1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAbxaD2I/x54gOPc/w0GBq8
4qLPh1TI+AAO0ab92D2IYTo0esoOlTHAaZ01HkD61XWGEQGTb2gQj0Ha/Lkirrf0
w9zjCF6tV4E4zSES+v2fdvqEqqBq1DnXgTdekQvbctab69YkBKr8i8v1E4paormm
pVXLwjqQ10wBmjI0UWr5mqTm04J2sNcQFqiijN26aDyCMbR16t99xiTseF7RzVjP
1spM+Xmg+GbDvDImzFQZcca3bcRdYQKSptPi74/f0aL0sMCA174X0VoGA6qOG0rz
BBEB+xV+JeenWx18dCTL7HbkMdziRb+6dxG3e+tOTPTzAXVCI7TDc+SXxx01Lhae
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IVdAmrXItSEdibiprfC
ecBTzSsxle81wQ9664q6qhGCrb67120/AuoKercNezLBda8JBzRSW6EDxvlSOFaf
aoBjFS45mJiAL7j3yCUXIH6eSHT8asrDkmxi6E3H0EcrA2G6ursZUmyWjefbYscl
0DvXeEyVPF/lWW1GcTTR/FpVmdiQeWh1v3/QPtmrdGOkwgDhh+UenzVaKuAMQxrG
nIoV7M6j8yN+lw0zrHELsYAD7No7vDx8reWh8Inbs3HHZuZ/cLe8dhfXTwO/55Wg
SC+47wcsEb3U/14oD68wtAZvN/cpU5FVJe0dhJELAnmcGGlu3pBkmkpy0AhTWO46
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8324904734214656138280243931818117748
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-30 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'supportmsi.schneider-electric.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29858003875216817904642849705251397035894538983807343633323840972062992305113260456970617035029085853884181271894790573807583046927782659569090107209600543017251512936003309653219212194598466754776167847076286962770794899637621020560388384094883427946478248066756574891141582826493157126397292802322149514815432519463759707409757307970462416408454591258360426238478849298752042208753882871125810321540513113635003547494336058854133197814692592127195035378906549526225281638159799829673577453234266048513697803652900695116623002345132886638511964575129490814879001940665282443346022476757077832269238594423604827273731
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a15d210ea2a9bbdd0bebfea2951f28a80108d00a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'supportmsi.schneider-electric.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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