accounts-ci-integration.fsxt.net

- F-Secure Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:f4:42:bd:08:55:ae:d8:73:8d:a0:63:70:be:6f:f1 was issued on by DigiCert Inc.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

F-Secure Corporation

Organization: F-Secure Corporation
Locality: Helsinki
Country: FI

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:f4:42:bd:08:55:ae:d8:73:8d:a0:63:70:be:6f:f1
Serial Number (int): 17219009998637509080244142430295584753
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 83:08:b7:23:76:83:d1:bb:ea:ac:3b:76:10:df:84:d5:9b:cd:11:93
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): cc:53:b7:be:3e:27:6a:4f:d6:b2:2b:ef:da:fc:2f:15:e0:1d:be:76
Fingerprint (sha256): 04:92:54:50:1f:a4:fe:0e:e3:59:b7:65:55:24:1e:c3:60:b5:f0:fe:61:5c:5f:57:52:a0:7f:d5:a5:de:30:f1

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate accounts-ci-integration.fsxt.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for accounts-ci-integration.fsxt.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

accounts-ci-integration.fsxt.net
accounts-emea-ci-integration.fsxt.net
accounts-na-ci-integration.fsxt.net
accounts-apac-ci-integration.fsxt.net
static.accounts-ci-integration.fsxt.net
static.accounts-emea-ci-integration.fsxt.net
static.accounts-na-ci-integration.fsxt.net
static.accounts-apac-ci-integration.fsxt.net

Other certificates including the domain name fsxt.net

(limited to 100 certificates)
ew1-rds-be-ci-rabbitmq-02.rds-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
accounts-apac-ci.fsxt.net
portal.radar.elements-stg.withsecure.com
fss-ci.fsxt.net
niemee-test.aws-dev.fsxt.net
a.accounts-emea-stg.fsxt.net
avenue-master-admin.fsxt.net
accounts-na-stg.fsxt.net
accounts-ci-integration.fsxt.net
*.facs-stg.fsxt.net
oh-ci.fsxt.net
sieportal.devtoo-ci.fsxt.net
static.accounts-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
psblive.psb-stg.f-secure.com
accounts-ci-integration.fsxt.net
fss-ci.fsxt.net
*.my.fsxt.net
static.accounts-stg.fsxt.net
latest.psb-ci.fsxt.net
*.my.fsxt.net
accounts-ci-integration.fsxt.net
*.push-parthe.aws-dev.fsxt.net
us2.analytics.psb.fsxt.net
portal.radar-ci.fsxt.net
quickscan-stg.fsxt.net
rusticrule.logos.fsxt.net
*.fusion-stg.fsxt.net
psblive.analytics.psb-stg.fsxt.net
management-api-kornal.cspm-ci.fsxt.net
accounts-ci-integration.fsxt.net
portal4client.ta.fsxt.net
portal.cp.elements-stg.withsecure.com
tormja.attr-ci.fsxt.net
accounts-ci-integration.fsxt.net
playground-stg.fsxt.net
portal-elb.cp-ci.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
sieportal.devtoo-stg.fsxt.net
rus-api.radar-stg.fsxt.net
unstable.push-ci.fsxt.net
static.accounts-apac-stg.fsxt.net
portal.cp-stg.fsxt.net
arcticsauna.logos.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
*.accounts-emea-ci.fsxt.net
portal.cp-stg.fsxt.net
dev.radar-ci.fsxt.net
*.fusion-ci.fsxt.net
data-api-simon.cspm-ci.fsxt.net
auth.ci.ccr-ci.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
*.facs-stg.fsxt.net
playground-stg.fsxt.net
ew1-rds-be-stg-rabbitmq-01.rds-stg.fsxt.net
stable.attr-stg.fsxt.net
onlinehelp-qe.aws-dev.fsxt.net
avenue-master-admin.fsxt.net
*.my.fsxt.net
playground-ci.fsxt.net
a.accounts-na-stg.fsxt.net
playground-ci.fsxt.net
perf.push-ci.fsxt.net
*.accounts-emea-stg.fsxt.net
ew1-rds-ds-stg-bigdata.rds-stg.fsxt.net
accounts-ci-integration.fsxt.net
static.accounts-stg.fsxt.net
auth.dev.ccr-ci.fsxt.net
latest.analytics.psb-ci.fsxt.net
ctf.playground-ci.fsxt.net
idpadmin.accounts-emea-ci-integration.fsxt.net
accounts.int.gbl.oneid-unstable.fsxt.net
ew1-rds-ds-ci-bigdata.rds-ci.fsxt.net
elements-stg.fsxt.net
skyblue-psb.fsxt.net
api.mptest1.fsxt.net
seattle.aws-dev.fsxt.net
*.my.fsxt.net
oh-stg.fsxt.net
*.rds-ci.fsxt.net
stable.attr-ci.fsxt.net
a.accounts-apac-ci-integration.fsxt.net
api.threatintel-ci.fsxt.net
static.accounts-ci.fsxt.net
auth.dev.ccr-ci.fsxt.net
*.accounts-emea-ci.fsxt.net
littledynamo.logos.fsxt.net
mail.fsxt.net
ctf.consultancy-services-ci.fsxt.net
psblive.psb-stg.f-secure.com
accounts-apac-ci.fsxt.net
onlinehelp-doc.aws-dev.fsxt.net
*.gs-stg.fsxt.net
ppaem.aws-dev.fsxt.net
radar-intra-ci.fsxt.net
dev-stable.radar-ci.fsxt.net
management-api-alexp.cspm-ci.fsxt.net
*.rds-stg.fsxt.net
*.aws-dev.fsxt.net

Certificate

The complete raw certificate details for accounts-ci-integration.fsxt.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoCNCLy9jckksZvixPxZ
HfRyXEn8K2rLAelH5ikW1E1gG8TrEHbp26j9zijtZIRkwoE7ZKLJqoM42DWtDZBI
IVS1SaLMKjwodE7mq2THL2E9Mjd+AOD/TouZbsWgJXZXu7DGvflTbt4F9HQtx55i
bYrjrFOvID3YTbMZQ6iKAt0O2geCUVsGDbAGPDKt9gDEOe1onoxOlP9e4GjKtgeO
ZrWj7qZiLzoTwdIH0Nv0P9J49RMQzAsDc0CRek/KRQL6UpRnOGDAdcf5f+33WUAg
QhS4eaRzjxnTJ9LV01WNh32YywxxMuSkX1RgPZFwMwl4SSpeVRKEYJ4K4Xa2/O79
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17219009998637509080244142430295584753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-01-31 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'F-Secure Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'accounts-ci-integration.fsxt.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21018949442948420807211841356400456461275828975284391781732628139246289438447037496640391809998868863008174288235633142156632384091520433137072965400215435103689745515403621837520612847446821224318390623538050622878655075170666149282567086797372957353619459424696829226810006647547751818462987124756760860990438348199706125843642662708118144536553755288746762030729414011284683086601230149989243562702200177315196922724908056189122507902484467010830810989452760171982490935033026572600953922107927740052544680882869067130005123121656407334860366738101643160763386273149720571606769208837191211060361875543994215103801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8308b7237683d1bbeaac3b7610df84d59bcd1193
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (330 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-emea-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-na-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'accounts-apac-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-emea-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-na-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'static.accounts-apac-ci-integration.fsxt.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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