ukid.eih03.uk.experian.com

- Experian Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 51:f4:98:97:3f:d8:0a:85:00:00:00:00:54:cf:09:59 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Experian Limited

Company registration number: 653331
Organization: Experian Limited
Locality: Nottingham
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 51:f4:98:97:3f:d8:0a:85:00:00:00:00:54:cf:09:59
Serial Number (int): 108937483001531711627252519327012686169
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 16:8e:19:92:60:2e:3b:77:68:7a:e0:17:e7:47:f2:93:4f:54:a2:36
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): f2:1e:a9:94:cf:4f:fe:4d:a4:1a:70:d4:b5:9e:a8:50:a1:69:23:0a
Fingerprint (sha256): 02:6a:4f:41:19:69:50:6b:99:62:8a:62:96:01:42:5b:82:a8:62:ce:c5:eb:13:50:40:dd:2e:f4:0d:48:13:39

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate ukid.eih03.uk.experian.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ukid.eih03.uk.experian.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ukid.eih03.uk.experian.com
www.ukid.eih03.uk.experian.com

Other certificates including the domain name experian.com

(limited to 100 certificates)
prext.unify.uk.experian.com
psn.secure.wasp.uk.experian.com
eic-image.uk.experian.com
secure.wiseconsumer.uk.experian.com
beta-in-api.experian.com
stg-gateway.secure.experian.com
ww2.experian.com
*.datafabricpreprod.cdsw.experian.com
crp.h4cs.wapp.hunter.uk.experian.com
stageservicedeliveryplatform.uk.experian.com
www.mchsecrp.it.wapp.hunter.uk.experian.com
ss3.experian.com
das.uk.experian.com
5672591746400256-fe3.pantheonsite.io
sandbox.experian.com
secure-aie.experian.com
uathosted.bankwizardabsolute.uk.experian.com
stg1-ss1.experian.com
pages.e.usa.experian.com
newdaypccms.uat.uk.experian.com
www.autocheck.uk.experian
usx2-lyn-rp01.us.experian.local
mdmreg1.experian.com
auth-eub-test.experian.com
retain.uk.experian.com
imperva.com
ug-sav.uk.experian.com
ukid.eih03.uk.experian.com
UKX2-ISE-Monitor01.uk.experian.com
identityiq.uat.uk.experian.com
sandbox-uk-api.experian.com
secure.wasp.uat.uk.experian.com
secure.e-series.uk.experian.com
hpes.experian.com
identityiq.qat.uk.experian.com
usmkpsynsc.experian.com
incapsula.com
emsevents.experian.com
u6aeh5cx.fraudnet.experian.com
permissions.prod.uk.experian.com
qat.crosscore.experian.com
newprod.ie.wsrv.hunter.uk.experian.com
dev-spla-api.experian.com
stg1-fed.experian.com
www.mchseuat.nl.wsrv.hunter.uk.experian.com
ss1-ectst001vc.ec.experian.com
imperva.com
secure.e-series.uk.experian.com
images.proveid.experian.com
stg1-ss1.experian.com
dm-sgw1-us.experian.com
itdr-webadmin.uk.experian.com
stm.experian.com
wynsz2kd.test.fraudnet.experian.com
data.nl.experian.com
Amex.PCCM.experian.com
ukx1rpad1-mgmt.uk.experian.com
postemobile-trs.uk.experian.com
appsext.unify.uk.experian.com
ukid.eih02.uk.experian.com
uat-nec-data-link.experian.com
amrs.uk.experian.com
test-uk-api.experian.com
5672591746400256-fe3.pantheonsite.io
intelviz.experian.com
ukid.eih01.uk.experian.com
us-mdm1.experian.com
syncfs-nab.experian.com
www.mchsecrp.wsrv.hunter.uk.experian.com
nordic.experian.com
us-mail.experian.com
irt.caisma.uk.experian.com
uat-ukbsproxy.uk.experian.com
cma.uk.experian.com
sandbox-eu-api.experian.com
pks.experian.com
bankwizardondemand.uk.experian.com
mtvhpccowe.uat.uk.experian.com
cr-securemail.experian.com
staging.bwonline.uk.experian.com
www.mchsecrp.wapp.hunter.uk.experian.com
MQPD.UK.EXPERIAN.COM
customerdataengine.experian.com
devautodoc.proveid.experian.com
ss2.experian.com
anjuna.status.polaris.synopsys.com
caisma.uk.experian.com
api-dataexchange.experian.com
uat-uk.intact.uk.experian.com
ww2.experian.com
idm.uat.admin.uk.experian.com
saap-ansible.experian.com
intelviz.experian.com
stg2-ss1.experian.com
moroccopki.admin.dev.uk.experian.com
sgw.secure.uk.experian.com
dataservice-ent.uat.uk.experian.com
smetrics1.experian.com
tsvs-api.experian.com
secure.wasp.uk.experian.com

Certificate

The complete raw certificate details for ukid.eih03.uk.experian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyU0EMznMOfZESG6nbIj
coQpbv/YAJ6VwPX5SWglalSiANiIxQRThrVqCiDsC4ioEnYFVU345pZ8GXW/eOs/
g94z2uyt0UjKCf9wD9rbhEAoUFLPu/YroNq40WouIJEn4LUWlc6mG6+LqzZf9IcH
2iMmZFMYWci1YtcpiIp2jW/uKaogWjH2b2ky//OBq+9w++gTHEw1tzyzkG10Pwoz
RUETqPrioy+Xvc29U9wuTu+HAwWdgsZa/1qjXwnTr9X3eXCm4kLWUBW9ptoe6y7r
HsoxL3o15rJDbSxE9OqDm93jgzzRID97AduKV4yumE7p/6A0lR9/iz6P0s60cAUw
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 108937483001531711627252519327012686169
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-04 08:49:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-02 09:19:16 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nottingham'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '653331'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ukid.eih03.uk.experian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24129861919615281603001537189283329514460763240911148840541284717169186209408627441150385213221196706995305362998972793482964240761781753713038318147211801791093771095430561305940350086574390497371144444656387692022649681503281739391913483434877876015343306293775198895799401052433267573275375982432283240352803597905080325790601073626098145893065098583533086373608195517865589730164487167576861482385417357200569151656742210732826500884792263965991895564171279231851665061118320966070753443351735772543639934475850448200956830303258816289270546649522677156304060174580823821476097112136611495615935162082823927836741
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukid.eih03.uk.experian.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ukid.eih03.uk.experian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							168e1992602e3b77687ae017e747f2934f54a236
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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