johnsoncontrols.com

- Johnson Controls, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number fe:e9:03:56:a5:f2:62:b3:00:00:00:00:50:e8:a4:38 was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Johnson Controls, Inc.

Organization: Johnson Controls, Inc.
State / Province: Wisconsin
Locality: Milwaukee
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fe:e9:03:56:a5:f2:62:b3:00:00:00:00:50:e8:a4:38
Serial Number (int): 338833783809616086499510090862915265592
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 22:8a:bf:dc:2a:ec:a4:b8:de:3f:be:a1:66:0d:f5:67:8b:ba:87:84
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9d:8d:c5:64:cd:7c:89:a8:f2:60:e3:1a:2b:42:45:fb:63:28:5c:59
Fingerprint (sha256): 04:b6:fe:47:ed:28:d2:b8:37:6b:19:8b:13:5d:a6:8e:09:e2:e9:d5:e0:9a:20:e9:2e:be:41:30:f8:1a:54:e0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate johnsoncontrols.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for johnsoncontrols.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

johnsoncontrols.com
york.com
www.york.com
www.varta-automotive.cn
www.jci.com
www.glas.johnsoncontrols.com
varta-automotive.cn
staging.johnsoncontrols.com
learningqa.johnsoncontrols.com
learning.johnsoncontrols.com
glas.johnsoncontrols.com
gatesqa.johnsoncontrols.com
gates.johnsoncontrols.com

Other certificates including the domain name johnsoncontrols.com

(limited to 100 certificates)
imperva.com
imperva.com
auvpn1.johnsoncontrols.com
imperva.com
samlssoc.johnsoncontrols.com
sm04-sdc.jci.com
csd.johnsoncontrols.com
imperva.com
be-ebusiness-support.eu.johnsoncontrols.com
incapsula.com
wwwqa.colps.johnsoncontrols.com
www.china.powersolutions.johnsoncontrols.com
incapsula.com
sts2.ga.johnsoncontrols.com
ssosamlqa.ga.johnsoncontrols.com
pa.johnsoncontrols.com
incapsula.com
mucntr.johnsoncontrols.com
bejih.com
ssoimqa.ga.johnsoncontrols.com
ocp1.pdc1.jci.ocp.johnsoncontrols.com
johnsoncontrols.com
myemail.johnsoncontrols.com
incapsula.com
incapsula.com
incapsula.com
cgeuapp13.johnsoncontrols.com
mx.clarios.com
ssoformxcpqa.ga.johnsoncontrols.com
imperva.com
mypanoptixdemo.johnsoncontrols.com
bejih.com
imperva.com
imperva.com
cgproducts.johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
ar1.johnsoncontrols.com
jobs.johnsoncontrols.com
incapsula.com
myappsdev.johnsoncontrols.com
imperva.com
imperva.com
imperva.com
meetings.johnsoncontrols.com
YUM-Brands.johnsoncontrols.com
incapsula.com
imperva.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
sdt-sit.johnsoncontrols.com
CCCyberSchool.johnsoncontrols.com
incapsula.com
incapsula.com
pa2.eu.johnsoncontrols.com
elearning.johnsoncontrols.com
imperva.com
*.mypanoptixstaging.johnsoncontrols.com
bejih.com
easyparts.johnsoncontrols.com
rscadmin.johnsoncontrols.com
eidp.jci.com
aasdsloth.gsm.cornell.edu
imperva.com
incapsula.com
www.jcihost.com
incapsula.com
kantech.sterigenics.schaumburg.johnsoncontrols.com
johnsoncontrols.com
incapsula.com
incapsula.com
imperva.com
incapsula.com
incapsula.com
www.mexico.powersolutions.johnsoncontrols.com
easyparts-support.johnsoncontrols.com
bejih.com
ssosaml.ga.johnsoncontrols.com
secure.cg.johnsoncontrols.com
incapsula.com
www.china.powersolutions.johnsoncontrols.com
investors.johnsoncontrols.com
incapsula.com
investors.johnsoncontrols.com
incapsula.com
skmtprod.johnsoncontrols.com
imperva.com
JohnsonControls.com
xnet.johnsoncontrols.com
imperva.com
www.battery.johnsoncontrols.com
incapsula.com
imperva.com
incapsula.com
B0324S03.Go.JohnsonControls.com
incapsula.com
incapsula.com
incapsula.com
ibs.johnsoncontrols.com

Certificate

The complete raw certificate details for johnsoncontrols.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaYSD/7cRcPAITsmLrJE
bIhhYoyk3/ZU+qP8fm6ur7Fe0LDxa6FEzn9DA/J8eyAf8qE6Yy97JjDSl+ep6oru
xBursv03BFP2r8k8DRfkbieKBMrKEXDVCHlrBaX6kAPqF3/MowXtfAulHgthj5hW
2e1bsgsosRBbiUw/sKL6x47xTTN8n12HiXsltCULP94X1LB8mwf4EUqDQ1cQdEwa
7ohKyAoIpHubKJYW+9O1TmPDoqLFBd5L/3u2yzZ5XaH6VctenlT6MX2+rMbeRqZd
R4pFlV6FzfjH33HqDH+T6Brj5tz2obWodyXc9zPmdP4PMdDKqcYoHPq0ZBJKKGia
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 338833783809616086499510090862915265592
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-10 11:09:58 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-08 11:39:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milwaukee'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johnson Controls, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'johnsoncontrols.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18891399883561905944431456724998084108915275898433768056820640452619772433651564512565476460177245527154344423878279724253704463433935609250559629787010988635801757730282598156868738740087303558953297531606552892515777650206867391573475885125947700497975225828539504938897464374324157095097741013199084923542370444353339303051330673306018478657700013235546382810556832940442627169858753932707894115259694652077369059612757397867367128445430110797486411342652714204058410222089109025717902643204571736483037665428570808806886075676824128231188166583718161060734057071936037994531643546158963167179034815958965002213997
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (311 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'york.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.york.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.varta-automotive.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jci.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.glas.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'varta-automotive.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learningqa.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learning.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'glas.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gatesqa.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gates.johnsoncontrols.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							228abfdc2aeca4b8de3fbea1660df5678bba8784
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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