cimdr-test.verizonwireless.com

- Verizon Data Services, LLC -

Issued by DigiCert Baltimore CA-2 G2

About this certificate

This digital certificate with serial number 08:1e:39:33:eb:ed:e4:d1:1a:fe:cd:68:cf:52:28:ee was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Verizon Data Services, LLC

Organization: Verizon Data Services, LLC
Organization unit: EUSITNUC
State / Province: Florida
Locality: Temple Terrace
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:1e:39:33:eb:ed:e4:d1:1a:fe:cd:68:cf:52:28:ee
Serial Number (int): 10790753083035641468919335524427245806
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bd:58:f8:78:ec:6e:56:8d:1e:8f:aa:7f:02:a5:2e:93:90:35:8f:fd
AuthorityKeyId: c0:12:b2:28:74:68:46:67:e9:70:25:74:1a:00:45:5b:06:7d:5c:44

Fingerprint (sha1): 42:05:49:ef:71:48:8a:20:60:3d:42:f7:61:bd:15:7f:5e:a6:9d:6a
Fingerprint (sha256): 05:3a:bd:05:62:f1:9e:d5:30:59:13:4b:21:a9:e0:0f:6f:0d:3d:2e:fa:f0:6b:cc:e8:81:5f:6b:45:f4:0f:4d

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl

Check the revocation status for certificate cimdr-test.verizonwireless.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cimdr-test.verizonwireless.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cimdr-test.verizonwireless.com
vziddr-test.verizonwireless.com

Other certificates including the domain name verizonwireless.com

(limited to 100 certificates)
secure07.stage.lithium.com
uc-impres-pub-ne1.telecom.ouroath.com
ringtones.verizonwireless.com
ringtones.verizonwireless.com
mytestbillpay.verizonwireless.com
nyhmpsa01pub01.verizon.com
ewi.verizonwireless.com
businessportals.verizonwireless.com
welktx08vzwvocs-q-nk-esmags-1.verizonwireless.com
indirectorders.verizonwireless.com
eroes-glbl.verizonwireless.com
bizqa.verizonwireless.com
newbillpay.verizonwireless.com
visit.verizonwireless.com
erpdev-srmdmo.verizonwireless.com
sl.e.verizonwireless.com
tester12.verizonwireless.com
ohtwbgs00pub01.tdc.vzwcorp.com
mdata.verizonwireless.com
erpprd-scn-inprd.verizonwireless.com
www.preprodsurvey.verizonwireless.com
timages.verizonwireless.com
cim.apps.verizonwireless.com
presupport.verizonwireless.com
agentcommdev2.verizonwireless.com
pservicedev.verizon.com
tokens.verizonwireless.com
pos-wwsqa5.verizonwireless.com
tonesqa7.verizonwireless.com
obdm.verizonwireless.com
mbwestaccessmgr.verizonwireless.com
posstore.verizonwireless.com
verizonwireless.com
secure.verizonwireless.com
pshr-uatvzwsso.verizonwireless.com
secure03.stage.lithium.com
secure02.lithium.com
presupport.verizonwireless.com
prewestaccessmgrpp.verizonwireless.com
lkg07-mediamanager.svcs.verizon.com
login.verizonwireless.com
erpdev-ws-fnbst.verizonwireless.com
newbillpay.verizonwireless.com
octes.verizonwireless.com
secure03.stage.lithium.com
vpne.verizon.com
crm-aem-prod.verizonwireless.com
newbillpay.verizonwireless.com
b2b.verizonwireless.com
psearch.verizonwireless.com
vzwqa1.sdc.vzwcorp.com
vipsvc-yzeast.verizon.com
txslries01.verizonwireless.com
vzcleanroom.verizon.com
engage.vzw.com
posstore-sqa5.verizonwireless.com
vzomsgsac.verizonwireless.com
cim-dr.verizonwireless.com
lifeonverizon-uat.verizonwireless.com
scmnsmedia.verizonwireless.com
mobilevec-uat.verizonwireless.com
wmediastoretest.verizonwireless.com
vztube.verizonwireless.com
nsavs36-ld-c.verizonwireless.com
pprd-ssoauth.verizon.com
amregnpp.verizonwireless.com
preorder.verizonwireless.com
amstage2.verizonwireless.com
mbss-west.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
psearch.verizonwireless.com
odideviceuat.verizonwireless.com
2wayssl_scm_to_VLocity.vzw.com
vzc-stg1-mediamanager-origin.svcs.verizon.com
sni1d57fgl.wpc.edgecastcdn.net
ecrm.verizonwireless.com
nyorbgcolec1p2.verizonwireless.com
sa430gl.wpc.edgecastcdn.net
ptqa.verizonwireless.com
vipsvcqa1.verizonwireless.com
ewi.verizonwireless.com
onepos-ss.west.verizonwireless.com
onevzssosoe-west-yz-sit6.verizonwireless.com
mediaQA2.verizonwireless.com
icedev.verizonwireless.com
mediastore.verizonwireless.com
infodoc.verizonwireless.com
2wayssl-scm-to-TCS.vzw.com
videos.verizonwireless.com
nsavs36-w.verizon.com
sharefile.vzw.com
sposstore.verizonwireless.com
secure02.lithium.com
eroes-ss.south.verizonwireless.com
tmblogin.verizon.com
WELKTX08VZWvOCS-Q-NK-eSMUCW-2.verizonwireless.com
cimdr-test.verizonwireless.com
2wayssl-mtas-to-ecgs-lab.verizonwireless.com
secure03.stage.lithium.com
globalm2mtest.verizonwireless.com

Certificate

The complete raw certificate details for cimdr-test.verizonwireless.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtdUtQdRTpUE/f68CDem
ovMNiuehq3XQ1wPPjcqSSd0CL8Bqvu2X/fjIrTV2Qk9mv0Fk2vCBp/azAVbajLs3
odV9Mj+i/scaAvuC+OapaqDjEBH+z3IDAWfpaaOmxSKF6pYoIxC16pB4DqH7Qz8R
Aag6pggEPpY1HWhpok43yLq8hMe60HMsCa/QqdVRuT3F2AonN1FMtownOjNOCBhe
+8hj0aCrI50VvvzoIDRIrMtL5BMB06HrWcw+LMTIazpbMXirGN3wJfdbuiG4svNN
8KWH61XCDNP3/9FM2z3Ep9wGTKiMX1O3SZ3iwBek+LnHh862eoTYbARAUqPjPyx+
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10790753083035641468919335524427245806
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Baltimore CA-2 G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-16 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Temple Terrace'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Data Services, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'EUSITNUC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cimdr-test.verizonwireless.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25101368001313528480344158100267167808989507026111236814325665380510105855351275387812580798392946714890717003932663478229348628207633669549738269654589267497924446099396736804714647512733209492205701993182987220302589387970439291288792881260010037968371258813889907899441566737398958818684392194623629203735012848772701291649347431261968049875910684086726816350976648896215826980675016235205020694318616099795568974533179301409087451005148211992558497227408580439228293181659127362659582494849453833420083993418294805488905059354239901796145699499217412340867160668444509588473905757481528288524743805716334916697647
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c012b22874684667e97025741a00455b067d5c44
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bd58f878ec6e568d1e8faa7f02a52e9390358ffd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cimdr-test.verizonwireless.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vziddr-test.verizonwireless.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertBaltimoreCA-2G2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertBaltimoreCA-2G2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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