fxspn.svcs.entsvcs.com

- DXC Technology Services LLC -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:d8:1e:ab:61:8f:f2:49:b7:03:41:2b:40:df:95:70 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DXC Technology Services LLC

Organization: DXC Technology Services LLC
State / Province: Virginia
Locality: Ashburn
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d8:1e:ab:61:8f:f2:49:b7:03:41:2b:40:df:95:70
Serial Number (int): 5109842159296236393152446562631128432
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 8e:25:1a:33:e3:e7:95:b4:41:20:ae:5c:c9:f6:58:96:83:90:65:75
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 9f:78:74:6e:ec:ca:49:ac:40:ce:8d:83:ee:ad:6f:6c:0b:39:0b:89
Fingerprint (sha256): 03:44:0e:ea:68:04:6a:56:a6:29:10:16:92:fa:04:21:e7:38:af:50:4f:91:14:6f:b3:8a:6d:50:4b:27:ad:65

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate fxspn.svcs.entsvcs.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fxspn.svcs.entsvcs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fxspn.svcs.entsvcs.com
fxspe.svcs.entsvcs.com
fxspns.svcs.entsvcs.com

Other certificates including the domain name entsvcs.com

(limited to 100 certificates)
cisamsprd.svcs.entsvcs.net
ap.svcs.entsvcs.com
*.continuity.entsvcs.com
emd.copa.travel.airservices.svcs.entsvcs.com
bgd03svcgwv01.emeanet.entsvcs.com
tyn01svcgwv01.emeanet.entsvcs.com
emdma.airservices.svcs.entsvcs.com
ipop-uat.orange-vpc.svcs.entsvcs.com
bes5.svcs.entsvcs.com
pssgui.copauat.travel.airservices.svcs.entsvcs.com
portal.bes.svcs.entsvcs.com
mft2.svcs.entsvcs.com
kau01svcgwv01.emeanet.entsvcs.com
ecsportal.mcloud.entsvcs.net
dcrgreredgc01.red.entsvcs.com
suo07svcgwv01.emeanet.entsvcs.com
gridmaster.svcs.entsvcs.com
dcsgpredgc01.red.entsvcs.com
centralftp.svcs.entsvcs.com
dxc.technology
fxspn.svcs.entsvcs.com
tub-crs1-eweb.mcloud.entsvcs.com
mis01svcgwv02.amsnet.entsvcs.com
swa-cr-eweb2.mcloud.entsvcs.com
wsmm.airservices.svcs.entsvcs.net
emdf.airservices.svcs.entsvcs.com
ber01svcgwv01.emeanet.entsvcs.com
euc.svcs.entsvcs.com
mdlz.si2.svcs.entsvcs.com
dxc.technology
mft2.svcs.entsvcs.com
minfsv001.ssn.entsvcs.com
nlr-rws.nlr.mcloud.entsvcs.com
nlr-rws.nlr.mcloud.entsvcs.com
swa-cr-eweb3.mcloud.entsvcs.com
atc-cr-wls3.mcloud.entsvcs.com
dev.administration.reseller.mcloud.entsvcs.com
dub04svcgwv01.emeanet.entsvcs.com
live1.dplan.svcs.entsvcs.com
das01svcgwv01.amsnet.entsvcs.com
am.svcs.entsvcs.com
webview-test.nz.bpo.svcs.entsvcs.com
ALF01SVCGWV01.amsnet.entsvcs.com
bun01svcgwv01.amsnet.entsvcs.com
emc01svcgwv01.apjnet.entsvcs.com
tpmgmt.hpmft.bes.svcs.entsvcs.com
dctorredgc01.red.entsvcs.com
cps-sharedsvcs-docker.paas4sap.svcs.entsvcs.com
wv-test2.nz.bpo.svcs.entsvcs.com
tul-rws.tul.mcloud.entsvcs.com
kau01svcgwv01.emeanet.entsvcs.com
mengtest.entsvcs.com
fxspins.svcs.entsvcs.com
syz-rws.syz.mcloud.entsvcs.com
tub-crs2-iweb4.mcloud.entsvcs.com
emc01svcgwv03.apjnet.entsvcs.com
emdsvc.uat.travel.ua.airservices.svcs.entsvcs.com
ec4t02051.itcs.entsvcs.com
retailavail.airservices.svcs.entsvcs.com
ols2-dev-external.itcs.entsvcs.com
usahcermp010.erm.svcs.entsvcs.com
oks01svcgwv01.amsnet.entsvcs.com
wgr01svcgwv01.amsnet.entsvcs.com
smtpx.svcs.entsvcs.com
bie03svcgwv01.emeanet.entsvcs.com
dcsaorsrcgc01.resrc.entsvcs.com
edc-flexera.edc.mcloud.entsvcs.com
ventura.svcs.entsvcs.com
ami01svcgwv01.amsnet.entsvcs.com
emc01svcgwv05.apjnet.entsvcs.com
plnsslvpn.levp.svcs.entsvcs.net
dcsaosecgc02.sec.entsvcs.com
cpiservices.mcloud.entsvcs.com
dxc.technology
shc01svcgwv02.apjnet.entsvcs.com
tub-crs1-eweb1.mcloud.entsvcs.com
ventutra.int.svcs.entsvcs.com
bes3.svcs.entsvcs.com
ishares.svcs.entsvcs.com
emd.uauat.travel.airservices.svcs.entsvcs.com
tub-crs1-eweb3.mcloud.entsvcs.com
bkk01svcgwv01.apjnet.entsvcs.com
custprof.copa.travel.airservices.svcs.entsvcs.com
ivrimport.svcs.entsvcs.com
fxsie.svcs.hpe.com
assessment.itcs.entsvcs.com
clg01svcgwv01.amsnet.entsvcs.com
ftpsm.irops.travel.svcs.entsvcs.com
vendor.svcs.entsvcs.com
mft2.svcs.entsvcs.com
ami01svcgwv01.amsnet.entsvcs.com
ap.svcs.entsvcs.com
emdma.airservices.svcs.entsvcs.com
dctkyrsrcgc01.resrc.entsvcs.com
bes7.svcs.entsvcs.com
nzmwvuflftp1.nz.bpo.svcs.entsvcs.com
oks01svcgwv01.amsnet.entsvcs.com
atc-cr-wls2.mcloud.entsvcs.com
mft2.svcs.entsvcs.com
sitemp.airservices.svcs.entsvcs.com

Certificate

The complete raw certificate details for fxspn.svcs.entsvcs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf59h1Jrl/SM+0bgbcp5
XJ+ZlT5QLIR9hZ1iQRWkLkKPfqhM7E9QwyDylSmww4wqXJNUAlQViuykJJyMFYWs
bfCtpkWjc5lGG4yJgyRTndalxjIOGb21OtkSPPIVyQbqd9EQeuC1FSp+5Su3milF
dGceWjqlS34GU/lxDS+tlHuxjgHTNOFzFv7dDYcAhEXnwErmMATs1H11sas/0MZB
5bAxk9Dd/PQ0OqAu8Zg77j5KavsKXdAJQKdRD+3bPwOcvYC0/yrKTXRbVnRKeutP
5JxD30O2dWegDAi7Gr7SGAtiTCoVsbYZnwX5AGHBsuvDF9LcvBOo+P5uKxL955sb
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5109842159296236393152446562631128432
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Virginia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ashburn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DXC Technology Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fxspn.svcs.entsvcs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24994439945195513373826514232253941779787801247093437991245488240824319543229498929681872570047408398481996126794454448421907377138176486037892619873328575362611718795800289291382488174979751027168003290478911649904204952595432783795817158452407476674146079699445689768795580687831113886939982443222079315291977546711873994566482152031587917504779519857847386562004531319635863241918216377356384227073122221218386144578958964687788775838637646698704486089702236128450581973710805439294312492181218051454523416953539492535394585566518119458033807131854125930446090483297809552710282953712107469123961177533038594825171
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8e251a33e3e795b44120ae5cc9f6589683906575
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxspn.svcs.entsvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxspe.svcs.entsvcs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fxspns.svcs.entsvcs.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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