ferienwohnung.expedia.at

- Expedia, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 37:2b:46:b1:e6:46:00:75:00:00:00:00:50:e3:e1:25 was issued on by Entrust, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Expedia, Inc.

Organization: Expedia, Inc.
State / Province: Washington
Locality: Bellevue
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:2b:46:b1:e6:46:00:75:00:00:00:00:50:e3:e1:25
Serial Number (int): 73332242396410570464005076496748372261
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f8:6c:0d:d1:36:4b:b7:7e:9f:12:c5:14:7b:40:77:91:d3:4f:94:59
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f8:d9:70:7e:02:5d:e0:03:65:dc:d3:3e:13:14:6b:94:d7:0b:4b:06
Fingerprint (sha256): 02:67:3d:a9:21:70:3b:71:be:89:ad:20:dc:a2:cf:3d:71:4f:b6:aa:02:3d:15:7d:de:7b:b1:75:3b:bf:f7:b8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate ferienwohnung.expedia.at

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ferienwohnung.expedia.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ferienwohnung.expedia.at
kreuzfahrten.expedia.at
booking.expedia.at
vakantiehuizen.expedia.nl
locations-vacances.expedia.fr
familienreisen.expedia.de
pauschalreisen.expedia.de
kreuzfahrten.expedia.de
rundreisen.expedia.de
ferienwohnung.expedia.de
mobilepauschal.expedia.de
pauschalreise.expedia.de
booking.expedia.de
blog.expedia.de
inside.expedia.de
pakketreizen.expedia.nl

Other certificates including the domain name expedia.at

(limited to 100 certificates)
www.expedia.com
ferienwohnung.expedia.at
discoverbudapest.expedia.co.uk
www.expedia.com
www.expedia.com
www.expedia.com
access.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
apim.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
access.expedia.com
www.expedia.com
apim.expedia.com
www.expedia.com
access.expedia.com
www.expedia.com
apim.int.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
access.expedia.com
expedia.at
www.expedia.com
www.expedia.com
www.expedia.com
redirect.expecsp.com
www.expedia.com
www.expedia.com
redirect.expecsp.com
EXPEDIA
access.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
access.expedia.com
apim.int.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
apim.int.secure.expedia.com
www.expedia.com
ferienwohnung.expedia.at
www.expedia.com
support.expedia.com
www.expedia.com
expedia.com
kreuzfahrten.expedia.at
www.expedia.com
apim.expedia.com
apim.expedia.com
apim.expedia.com
www.expedia.com
urlaub.expedia.at
apim.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
apim.expedia.com
access.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
www.expedia.com
germansummercities.expedia.com
www.expedia.com
access.expedia.com
www.expedia.com
www.expedia.com
apim.int.expedia.com
www.expedia.com
www.expedia.com
redirect.expecsp.com
www.expedia.com
www.expedia.com
expecsp.com
apim.expedia.com
apim.expedia.com
support.expedia.com
www.expedia.com
ferienwohnung.expedia.at
www.expedia.com
germansummercities.expedia.com
www.expedia.com
www.expedia.com
support.expedia.com
apim.int.expedia.com
www.expedia.com
www.expedia.com
expecsp.com
apim.expedia.com
www.expedia.com

Certificate

The complete raw certificate details for ferienwohnung.expedia.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCw4WrMnWq2dAf51hlf3
0mojW3GHdew8pHMNsCKSp9kCHmlGzdHZuz+Jv0ntdSaSnCCSTj97nqAlFPHMvI6Q
nEQ1GTAgfeV1mOM5TTcWCp+mBp+Yci1b8goN5Vy4l+ogYCOUsgBl1Um4mUA7yTcC
87gDF1xPEi7zQ4v2CawT5KvQeyAH36Bmz9ENjjEmcohUw4eaIp1Y+etrQ4/tJmLs
OHbUte83XsxKaVL5Gfp8r56LRQ14Kg8lhjH1Xr2tiejqwgQGrjeH1R85nU6fnydd
CrL/JHOXlIlTH3Eie4pgUJlAIsZBYZL05JcLuz6Vru9prOg9SPY3K2QzrBfbRJZS
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73332242396410570464005076496748372261
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-06-15 14:36:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-13 15:06:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bellevue'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Expedia, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ferienwohnung.expedia.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20724887775205763802570838003951778162470995141046726618128903317389627780090862373396691397528563928609998347200105470305243708437620276993908540547349356653951176575538398207531428523741429498057942016794232234051759195476416779503984054113021368663874180218547314030864319337913692125374196895673838838863251999122003648896733185300539658273473843918957716461726285241369301801955198749137800041939445420349386272027834258563494765322159340733185689298992684750144789169943344734510113632606610339529422221997838137376096336879850386246355011891161613324271645237329322786491127515544472598755030908387396637053623
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (395 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwohnung.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreuzfahrten.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.expedia.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vakantiehuizen.expedia.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'locations-vacances.expedia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'familienreisen.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauschalreisen.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kreuzfahrten.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rundreisen.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ferienwohnung.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mobilepauschal.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pauschalreise.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'booking.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inside.expedia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pakketreizen.expedia.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f86c0dd1364bb77e9f12c5147b407791d34f9459
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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