LSWEB-EXT.supergrp.com

- Super Group Trading (Pty) Ltd -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:22:62:6c was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Super Group Trading (Pty) Ltd

Organization: Super Group Trading (Pty) Ltd
Locality: Sandton
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:22:62:6c
Serial Number (int): 1277321836
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: c9:36:6c:83:8d:6d:98:31:30:83:e0:82:76:2c:93:1b:92:9e:b0:7f
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): 7d:6f:e3:88:58:da:ed:37:39:c5:77:55:c7:a7:10:a9:33:8c:49:f7
Fingerprint (sha256): 04:f7:a9:f0:de:fb:b4:0c:7c:f7:9f:43:fa:15:7d:b0:2f:23:52:4d:95:7a:9c:32:b7:be:a8:fa:b2:af:81:31

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate LSWEB-EXT.supergrp.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for LSWEB-EXT.supergrp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

LSWEB-EXT.supergrp.com
LSWEB-EXT2.supergrp.com
lync.supergrp.com
lyncdiscover.supergrp.com

Other certificates including the domain name supergrp.com

(limited to 100 certificates)
LSWEB-EXT.supergrp.com
desk-test.oniwa.co.jp
LSWEB-EXT.supergrp.com
mymail.supergrp.net
support.filenorthcarolina.com
support.metaco.com
support.supergrp.com
desk-test.oniwa.co.jp
help.logicfusion.com
supergrp.com
support.metaco.com
mymail.supergrp.net
help.logicfusion.com
desk-test.oniwa.co.jp
mymail.supergrp.net
help.logicfusion.com
supergrp.com
supergrp.com
support.supergrp.com
support.metaco.com
support.metaco.com
sip.supergrp.com
mymail.supergrp.net
supergrp.com
support.metaco.com
support.supergrp.com
support.supergrp.com
help.adics.net
desk.elephantintheroom.website
mobi.supergrp.com
help.adics.net
sip.supergrp.com
desk-test.oniwa.co.jp
mymail.supergrp.net
supergrp.com
sip.supergrp.com
desk.elephantintheroom.website
help.adics.net
support.metaco.com
supergrp.com
sip.supergrp.com
desk.elephantintheroom.website
desk.gulfcoastone.com
support.creativefutureslab.com
supergrp.com
support.metaco.com
supergrp.com
help.logicfusion.com
supergrp.com
desk.elephantintheroom.website
help.adics.net

Certificate

The complete raw certificate details for LSWEB-EXT.supergrp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFZjCCBE6gAwIBAgIETCJibDANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNDAzMTMxNjAxNDNaFw0xODAzMTMy
MzQ3NDVaMGgxCzAJBgNVBAYTAlpBMRAwDgYDVQQHEwdTYW5kdG9uMSYwJAYDVQQK
Ex1TdXBlciBHcm91cCBUcmFkaW5nIChQdHkpIEx0ZDEfMB0GA1UEAxMWTFNXRUIt
RVhULnN1cGVyZ3JwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB
AN2o+Uj1Yn1QnIh5IcC5WmSYfzjLV/H9ppbYTjw+MQu/DShAHPSDzUygu/z2Kb/o
IMpejHe6QgCbS9lDu/xcmrLWjuWxBns+1pRrFh3f6BypcG0ly1BrDL44+aJTxuMV
8pdS/m76mB1YyW41OJ25xp4PC+BrK1Udr6VBjWirvE+Sk9G56DOTSfDCIHv0dwrO
ZtA0qwgM4gpHzzqvK48NwPwVEvFZVNlArvHqqUoh+MivxheZaCt7EnCJQ7H5nW7C
OtLJFPTw8m99MhmHikB/PpyRo+RvbQYZ6pwHeTzhl//ndXcwHVOX3G/fBqSAtLV3
xJYws4aamVE8cIBPOmR8HBECAwEAAaOCAcwwggHIMAsGA1UdDwQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwMwYDVR0fBCwwKjAooCagJIYiaHR0
cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFjLmNybDBkBggrBgEFBQcBAQRYMFYw
IwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MC8GCCsGAQUFBzAC
hiNodHRwOi8vYWlhLmVudHJ1c3QubmV0LzIwNDgtbDFjLmNlcjBKBgNVHSAEQzBB
MDUGCSqGSIb2fQdLAjAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3Qu
bmV0L3JwYTAIBgZngQwBAgIwaAYDVR0RBGEwX4IWTFNXRUItRVhULnN1cGVyZ3Jw
LmNvbYIXTFNXRUItRVhUMi5zdXBlcmdycC5jb22CEWx5bmMuc3VwZXJncnAuY29t
ghlseW5jZGlzY292ZXIuc3VwZXJncnAuY29tMB8GA1UdIwQYMBaAFB7xq4kG+EkP
ATN37hR67hl8kyhNMB0GA1UdDgQWBBTJNmyDjW2YMTCD4IJ2LJMbkp6wfzAJBgNV
HRMEAjAAMA0GCSqGSIb3DQEBBQUAA4IBAQAn7+bHE1p6OOjeX7r5nl8jLxZGmuid
06Dr9qo057k+8/zGOI3dWH77HztxwgW8h5/5O5dVarauTCiZdEe1Fv5irMV1VJqp
/gMA8ZzBHdxwv7ZsYGNIEj2TgOsJq8hqPwurRsP6LzPaxOQPz7TMGg2rgoefrAeV
7Mpki5W2rROGRzcafyReamthQqvvFmDWXcqhRY/d+npXjzbxpAjl8Pk4seJNkrxi
9qpWqoRMKycjJ+KP8frZQhHxYGRoOL7t2nv18Q0s0NvCVlJWPmEt7uH8iMj4/rIe
Hu/Lq0G+2vAEBkR46L00VEvtYuCfUZgFxvAg9M13/qkNiN6CAaKnn4nQ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3aj5SPVifVCciHkhwLla
ZJh/OMtX8f2mlthOPD4xC78NKEAc9IPNTKC7/PYpv+ggyl6Md7pCAJtL2UO7/Fya
staO5bEGez7WlGsWHd/oHKlwbSXLUGsMvjj5olPG4xXyl1L+bvqYHVjJbjU4nbnG
ng8L4GsrVR2vpUGNaKu8T5KT0bnoM5NJ8MIge/R3Cs5m0DSrCAziCkfPOq8rjw3A
/BUS8VlU2UCu8eqpSiH4yK/GF5loK3sScIlDsfmdbsI60skU9PDyb30yGYeKQH8+
nJGj5G9tBhnqnAd5POGX/+d1dzAdU5fcb98GpIC0tXfEljCzhpqZUTxwgE86ZHwc
EQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1277321836
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-03-13 16:01:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-13 23:47:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sandton'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Super Group Trading (Pty) Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'LSWEB-EXT.supergrp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27981989468774450537654303011439256262510488528614406024522636533527405752908867858540860900780657182124084332493954772577742957314009279622586880394312562255022163584862542133140593051026199307028093856700274809727003997258083095675478940429374451386940000328155950314936501895805272912618053315602706291390095740052823552372290805492746532962230634067417812753401086267422488550137670450385947803385601045853269081333605207609957248206652510226803619277469308802631870888421286612345507904040908630730268048304126363389170299573722518452706324171287555118076110169701919452383723918734652265505719790791891363830801
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LSWEB-EXT.supergrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'LSWEB-EXT2.supergrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lync.supergrp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.supergrp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c9366c838d6d98313083e082762c931b929eb07f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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