opensource.huaweicloud.com

Issued by Encryption Everywhere DV TLS CA - G1

About this certificate

This digital certificate with serial number 02:68:ee:39:b2:26:40:9c:45:46:4e:e3:75:a1:f0:05 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=opensource.huaweicloud.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 02:68:ee:39:b2:26:40:9c:45:46:4e:e3:75:a1:f0:05
Serial Number (int): 3203286649482962273286449290069274629
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 4e:f1:31:9b:f1:ea:cf:b6:25:c6:6e:16:65:4b:10:1e:08:f4:4b:b8
AuthorityKeyId: 55:74:4f:b2:72:4f:f5:60:ba:50:d1:d7:e6:51:5c:9a:01:87:1a:d7

Fingerprint (sha1): b3:8c:5c:e5:e4:fe:db:b0:7d:c0:32:42:02:50:f1:3d:71:9d:f7:67
Fingerprint (sha256): 03:08:0c:19:54:d4:f5:4e:2a:2c:85:a6:5a:86:80:89:98:30:f4:c4:c2:05:09:ae:ee:fc:65:cb:a4:4c:19:86

Issuing Certificate URL: http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com

Check the revocation status for certificate opensource.huaweicloud.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for opensource.huaweicloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

opensource.huaweicloud.com

Other certificates including the domain name huaweicloud.com

(limited to 100 certificates)
*.ide.huaweicloud.com
*.cn-east-3.huaweicloud.com
obs.luzhouzwy01.gov.huaweicloud.com
redis-2c0a202e-d8f1-42e6-bc0b-9916ec603b75.dcs.huaweicloud.com
opensource.huaweicloud.com
*.cn-north-4.huaweicloud.com
macroverse.huaweicloud.com
roundtable.macroverse.huaweicloud.com
*.apistore.huaweicloud.com
*.huaweicloud.com
eda.fusionplant.huaweicloud.com
*.opensource.huaweicloud.com
*.apic.cn-south-1.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
cn-north-4-octopus.huaweicloud.com
ca-east-201-console-dev.huaweicloud.com
*.naas.huaweicloud.com
*.oob.vss.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.cn-north-219.jrzq.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
*.iotstage.huaweicloud.com
*.apigw.ap-southeast-3.huaweicloud.com
*.developer.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
naas.huaweicloud.com
payment.huaweicloud.com
naas-hk-intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
welink.huaweicloud.com
*.service-sh.ivm.huaweicloud.com
*.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.cdn-vod.huaweicloud.com
*.myhuaweicloud.com
*.oob.vss.huaweicloud.com
console.hcsoecology.huaweicloud.com
naas.huaweicloud.com
*.apigw.cn-east-3.huaweicloud.com
intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
south-device.campustest.huaweicloud.com
console.petalpay.huaweicloud.com
*.huaweicloud.com
*.workspace.cn-east-3.huaweicloud.com
*.saas.huaweicloud.com
craftartssim.cn-south-1.huaweicloud.com
intl.huaweicloud.com
*.huaweicloud.com
b2bgo.huaweicloud.com
*.ide.huaweicloud.com
event.huaweicloud.com
*.cn-south-1.huaweicloud.com
sd-wan.huaweicloud.com
*.devcloud.ap-southeast-3.huaweicloud.com
dme.cn-south-4.huaweicloud.com
*.apigw.cn-north-4.huaweicloud.com
obs.hbwuhan01.gov.huaweicloud.com
lab-desktop.huaweicloud.com
cn-north-280-modelarts-label.huaweicloud.com
*.connect.huaweicloud.com
event.huaweicloud.com
*.cdn-vod.huaweicloud.com
education.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
*.apistore.huaweicloud.com
*.apic.cn-north-1.huaweicloud.com
*.coreops.huaweicloud.com
as-south-205-console-dev.huaweicloud.com
*.huaweicloud.com
*.workspace.sa-brazil-1.huaweicloud.com
*.developer.huaweicloud.com
*.apistore.huaweicloud.com
*.cn-north-4.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.coreops.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
asset.macroverse.huaweicloud.com
*.developer.intl.huaweicloud.com
sd-wan.huaweicloud.com
*.iotstage.huaweicloud.com
sd-wan.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
marketing.huaweicloud.com
fusionplant.huaweicloud.com
*.devcloud.cn-east-3.huaweicloud.com
market.fusionplant.huaweicloud.com
hdc.huaweicloud.com
koosailing.saas.huaweicloud.com
*.apigw.cn-north-1.huaweicloud.com
device-naas3.huaweicloud.com
weuins.naas.huawei.com
payment.huaweicloud.com
obs.ucbhcso.huaweicloud.com

Certificate

The complete raw certificate details for opensource.huaweicloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFnjCCBIagAwIBAgIQAmjuObImQJxFRk7jdaHwBTANBgkqhkiG9w0BAQsFADBu
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMS0wKwYDVQQDEyRFbmNyeXB0aW9uIEV2ZXJ5d2hlcmUg
RFYgVExTIENBIC0gRzEwHhcNMjAwOTEwMDAwMDAwWhcNMjEwOTExMTIwMDAwWjAl
MSMwIQYDVQQDExpvcGVuc291cmNlLmh1YXdlaWNsb3VkLmNvbTCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALnEoV+7i2CYhx+wrVIDZoWgswM8XLZuOO5P
Gv5OPu1BGEyw9GgprPnJLik920kno75qrvmANWQTcvSawzMcQBEjbyXNvgc5u7Og
CY2KLlz7UKCHXcZ3wWqj5ebmI21xLdqO/4ugs4ioQw3o/iEGMYj5RhEIhxZEbbvF
CkNmoFqx8wQvTd6jL1THAW82ce0y0Ls20BoGL6m9v8EDvtO57CJSN0EmlrnrUx0Q
gvLLfzROEgON1TsydoahO7Guo1YCFiyF+XcEZl32PwTMLTvrAkCfC+UGijif6JMw
tSyeriiFdZ4zU4uQ11iAS81fyhTg1PYMVOguh+QigWf7gRwMmIsCAwEAAaOCAn8w
ggJ7MB8GA1UdIwQYMBaAFFV0T7JyT/VgulDR1+ZRXJoBhxrXMB0GA1UdDgQWBBRO
8TGb8erPtiXGbhZlSxAeCPRLuDAlBgNVHREEHjAcghpvcGVuc291cmNlLmh1YXdl
aWNsb3VkLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMEwGA1UdIARFMEMwNwYJYIZIAYb9bAECMCowKAYIKwYBBQUHAgEW
HGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYGZ4EMAQIBMIGABggrBgEF
BQcBAQR0MHIwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNvbTBK
BggrBgEFBQcwAoY+aHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL0VuY3J5cHRp
b25FdmVyeXdoZXJlRFZUTFNDQS1HMS5jcnQwCQYDVR0TBAIwADCCAQUGCisGAQQB
1nkCBAIEgfYEgfMA8QB3AH0+8viP/4hVaCTCwMqeUol5K8UOeAl/LmqXaJl+IvDX
AAABdHb6qGcAAAQDAEgwRgIhAPG21HsOlnQ8NkYUM8iJ98VbdhmCat9tvX4yI/8J
xGM9AiEA48aywH+300Ym6LyHHs0vTJYMLB5vYBIbSRqqoYrAGO8AdgBc3EOS/uar
RUSxXprUVuYQN/vV+kfcoXOUsl7m9scOygAAAXR2+qexAAAEAwBHMEUCIQDIOc+J
oYIpZf1O5oKWgI59iPYKPN6h2P19bxvR257g5wIgOMORvaoI4LI6MWFREB29xKYN
GihNk1JxoUmE5BJq2fUwDQYJKoZIhvcNAQELBQADggEBACl1jDo8orZQkn9sCDlQ
Fi/FuZ50crHazJ435ArWzTPdHA+X5nzEbRApPmtLHTSEvfud//JU+mYwzmemZPWE
0BMqQssARluZ3dzYKgV6Gm/rfyW/ZMVXLehMKZ+OK1Ia+4di0+wzo2fzfc83eKUV
IUnY1ymEoKETGu9azJHSf7xqLG5oatW/b1uZFjQTg29JIhqoRe9Suq1gmncB3LMP
OE0YPdZ4+x/ww5SST364abJG3MMMTHwcgFr4qNirAa3uGmWrb47QHeZRlgrsiSXa
fzIC+fSZXkYxG9A/kv9HWceEP51jkQC9NJwHVQR0XPbxSHUZbdbrN87qmEoBaFkl
nso=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucShX7uLYJiHH7CtUgNm
haCzAzxctm447k8a/k4+7UEYTLD0aCms+ckuKT3bSSejvmqu+YA1ZBNy9JrDMxxA
ESNvJc2+Bzm7s6AJjYouXPtQoIddxnfBaqPl5uYjbXEt2o7/i6CziKhDDej+IQYx
iPlGEQiHFkRtu8UKQ2agWrHzBC9N3qMvVMcBbzZx7TLQuzbQGgYvqb2/wQO+07ns
IlI3QSaWuetTHRCC8st/NE4SA43VOzJ2hqE7sa6jVgIWLIX5dwRmXfY/BMwtO+sC
QJ8L5QaKOJ/okzC1LJ6uKIV1njNTi5DXWIBLzV/KFODU9gxU6C6H5CKBZ/uBHAyY
iwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3203286649482962273286449290069274629
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Encryption Everywhere DV TLS CA - G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-10 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'opensource.huaweicloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23451048466520203813910256225326782483119579254887815440895855258140933809067575843670308896901150264057954775350015350227840140058674265185515009786460054531475620343214212209651639220417333603201500295740174619044588260160122886087023760809041276837026266430926093324980941835551373317635408121184085183722968797494387555627186290562054400113816128213749029151215819490490888305062149435120571382060641431022623313557257023175334193026671041876757701129815959440191527369574970360607771153227861368267154046556491302806451681631922631523518317005280588861652687343597958612094876978974498567877148920661537098340491
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55744fb2724ff560ba50d1d7e6515c9a01871ad7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ef1319bf1eacfb625c66e16654b101e08f44bb8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'opensource.huaweicloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/EncryptionEverywhereDVTLSCA-G1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077007d3ef2f88fff88556824c2c0ca9e5289792bc50e78097f2e6a9768997e22f0d70000017476faa8670000040300483046022100f1b6d47b0e96743c36461433c889f7c55b7619826adf6dbd7e3223ff09c4633d022100e3c6b2c07fb7d34626e8bc871ecd2f4c960c2c1e6f60121b491aaaa18ac018ef0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017476faa7b10000040300473045022100c839cf89a1822965fd4ee68296808e7d88f60a3cdea1d8fd7d6f1bd1db9ee0e7022038c391bdaa08e0b23a316151101dbdc4a60d1a284d935271a14984e4126ad9f5
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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