a118336104046.testcertificates.com

- Entrust, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 59:4e:0f:83:9d:c3:b8:be:00:00:00:00:50:f1:f4:98 was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: R&D
State / Province: Ontario
Locality: Kanata
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 59:4e:0f:83:9d:c3:b8:be:00:00:00:00:50:f1:f4:98
Serial Number (int): 118706605443682332884239041541407110296
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 33:24:84:8c:b9:81:15:31:c3:2f:d2:4e:6e:99:82:2a:2c:f5:9d:b2
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): c0:f6:be:a8:51:67:a1:ae:7a:a1:17:4d:73:08:55:eb:49:66:01:16
Fingerprint (sha256): 01:e9:4f:7c:7f:83:a9:5e:4b:22:7f:ec:c9:a0:fb:78:a7:c9:61:09:a2:2f:03:49:77:86:bc:97:d0:da:3e:4f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate a118336104046.testcertificates.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for a118336104046.testcertificates.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

a118336104046.testcertificates.com
www.a118336104046.testcertificates.com
a118330111548.testcertificates.com
san1.a118330111548.testcertificates.com
san2.a118330111548.testcertificates.com
san3.a118330111548.testcertificates.com
san4.a118330111548.testcertificates.com
san5.a118330111548.testcertificates.com
6.a118330111548.testcertificates.com
7.a118330111548.testcertificates.com
8.a118330111548.testcertificates.com
9.a118330111548.testcertificates.com
10.a118330111548.testcertificates.com

Other certificates including the domain name testcertificates.com

(limited to 100 certificates)
a11824115234.testcertificates.com
standard.testcertificates.com
a119778026.testcertificates.com
a1202384735.testcertificates.com
*.a117731066.testcertificates.com
cole.testcertificates.com
cole.testcertificates.com
a1177191343.testcertificates.com
*.wc.testcertificates.com
*.testcertificates.com
API.costa.testcertificates.com
a11877101548.testcertificates.com
cole.testcertificates.com
a114273154320.testcertificates.com
a118332112913.testcertificates.com
*.testcertificates.com
apinew.testcertificates.com
EV1.uatentrust.testcertificates.com
juan.testcertificates.com
test.testcertificates.com
fonzytech.com
uc.Testcertificates.com
a1151751391.testcertificates.com
testcertificates.com
a118213113511.testcertificates.com
dokic9222.testcertificates.com
uc.Testcertificates.com
R-API.testcertificates.com
testcertificates.com
testcertificates.com
a1178114949.testcertificates.com
a118113111547.testcertificates.com
pfortnermau2.absa.testcertificates.com
test.test.testcertificates.com
snhw07.testcertificates.com
Entrust Corporation
certbotttest.testcertificates.com
*.a117200115350.testcertificates.com
a118197135013.testcertificates.com
eurocom.autopscript.testcertificates.com
*.testcertificates.com
snwhq02.testcertificates.com
nginxtest.testcertificates.com
testcertificates.com
a1178115492.testcertificates.com
a115264152841.testcertificates.com
standard.testcertificates.com
*.testcertificates.com
a118196123012.testcertificates.com
abc.testcertificates.com
a118336104046.testcertificates.com
standard.testcertificates.com
testcertificates.com
a1173238367.testcertificates.com
a115202133128.testcertificates.com
a1169173759.testcertificates.com
testcertificates.com
CMD.testcertificates.com
website.testcertificates.com
a11992104632.testcertificates.com
DoNotRevoke7.testcertificates.com
a11527115137.testcertificates.com
Testcertificates.com
wwwtest.testcertificates.com
a118114142415.testcertificates.com
a1171061691.testcertificates.com
testcertificates.com
a117323122659.testcertificates.com
www.testcertificates.com
turbo.testcertificates.com
a11973114057.testcertificates.com
testcertificates.com
a119237132243.testcertificates.com
a11774145726.testcertificates.com
a12113872532.testcertificates.com
standard.testcertificates.com
www.a11912912549.testcertificates.com
a1176175028.testcertificates.com
ubuntu-api.testcertificates.com
testcertificates.com
www.testcertificates.com
test.test.testcertificates.com
testcertificates.com
a1177465845.testcertificates.com
testcertificates.com
testcertificates.com
a117200111038.testcertificates.com
webmail.testcertificates.com
testcertificates.com
a1182008321.testcertificates.com
333.testcertificates.com
a11434811406.testcertificates.com
11ab.testcertificates.com
a114351111539.testcertificates.com
test.testcertificates.com
a1181408026.testcertificates.com
testcertificates.com
*.testcertificates.com
www.testcertificates.com
Entrust Corporation

Certificate

The complete raw certificate details for a118336104046.testcertificates.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwAT01a4sy0ELyb1OyFMC
QrceumjSZyUjGSLO33pQipzdUlh2QXZWfSaAGoPFPtfh+S93Xrbde/OJMisbi15i
h8ZnPCnnIBuaMYkWxsKITPKO09QH/Byqu0BrbKxIBJX8lJLEHg6q9ObeMz7YVWla
jp2uXA4eLWDOa6hSdAsD7mAP+h6olA8Zhg5Crtlcz4+nEQPDANvgelX9XT4xjqbr
0RcXIanR7vFvODiiHPAjY62oN0arseN/oX1YQLaUu9FP7KQ2n7SN6HI8ShN8Wg7n
8y10ezW+i4z9tlpea1vH6JVMGaFovtO+rW1ft8dS8HiqlLB46wrgfTgUoc4pgwC/
4QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 118706605443682332884239041541407110296
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-21 11:38:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 12:08:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kanata'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'R&D'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'a118336104046.testcertificates.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24240198638267421222617754693127041922108015241676777345136742554958868414809064750295371211413997049633154457400959171939375944453915398325492963672196804107072292265188288576711100001031947020596596587215716462047692174185518608483294019407951327014390675047441161051062231260320593006365016562930167988672854499858099316104928748811566972697922923573780968106773819004649685769679856579972856854780577408863501100534303846506441735543503507009317153202401075684715099825493656253427739136370227701848389561716302117622815575925188129197079106779656404280074907500107854251659092268524159568172120394250497778827233
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a118336104046.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a118336104046.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san1.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san2.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san3.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san4.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'san5.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '6.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '7.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '8.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '9.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '10.a118330111548.testcertificates.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3324848cb9811531c32fd24e6e99822a2cf59db2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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