ocir.me-jeddah-1.oci.oraclecloud.com

- Oracle Corporation -

Issued by DigiCert Global G2 TLS RSA SHA256 2020 CA1

About this certificate

This digital certificate with serial number 03:d8:9d:fc:d0:4c:5c:bc:74:47:15:44:75:78:56:d8 was issued on by DigiCert Inc.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Oracle Corporation

Organization: Oracle Corporation
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:d8:9d:fc:d0:4c:5c:bc:74:47:15:44:75:78:56:d8
Serial Number (int): 5112424477068195632557126671786333912
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 9b:8c:99:f2:ab:e7:56:4f:01:b2:dc:29:1a:5f:64:c6:2c:20:7a:22
AuthorityKeyId: 74:85:80:c0:66:c7:df:37:de:cf:bd:29:37:aa:03:1d:be:ed:cd:17

Fingerprint (sha1): 5c:09:91:35:61:b4:96:e0:a5:49:b4:ff:ac:00:0b:20:6d:75:99:e7
Fingerprint (sha256): 05:52:5e:53:78:02:9d:74:27:6f:63:87:09:9c:de:93:ca:c4:d3:55:d8:19:94:0e:4d:73:71:7b:14:91:49:a8

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl

Check the revocation status for certificate ocir.me-jeddah-1.oci.oraclecloud.com

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocir.me-jeddah-1.oci.oraclecloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocir.me-jeddah-1.oci.oraclecloud.com
me-jeddah-1.ocir.io
jed.ocir.io

Other certificates including the domain name oraclecloud.com

(limited to 100 certificates)
*.prj.us9.oraclecloud.com
*.ic.em3.oraclecloud.com
kms.ap-hyderabad-1.oraclecloud.com
ecra1-mgmt-exadata.uspp1.oraclecloud.com
bi.pp1.oraclecloud.com
streaming-delta.eu-frankfurt-1.oci.oraclecloud.com
*.storage.oraclecloud.com
*.eu-frankfurt-1.clusters.oci.oraclecloud.com
*.cloudem3.audc1.oraclecloud.com
digitalassistant.us-ashburn-1.oci.oraclecloud.com
*.bi.us2.oraclecloud.com
*.crm.us1.oraclecloud.com
*.hcm.ap5.oraclecloud.com
query.us-ashburn-1.oraclecloud.com
commercial.us-phoenix-1.oci.oraclecloud.com
*.bi.la1.oraclecloud.com
*.fs.em3.oraclecloud.com
helm-api.us-phoenix-1.oraclecloud.com
*.fs.ap5.oraclecloud.com
*.bi.us4.oraclecloud.com
console.ca-toronto-1.oraclecloud.com
aconex-status.oraclecloud.com
cwp.status.symantec.com
stg-cloud.oracle.com
statuspage.io
cgclmta01.ca3.oraclecloud.com
chclc4r210s1imap02.usdc2.oraclecloud.com
*.prj.la1.oraclecloud.com
mbclrp3980.ap4.oraclecloud.com
kms.us-phoenix-1.oraclecloud.com
aconex-status.oraclecloud.com
notification.ap-seoul-1.oci.oraclecloud.com
g1chclrp3980.us8.oraclecloud.com
cheis01nasx25.infra.oraclecloud.com
*.scm.us2.oraclecloud.com
*.prj.ap2.oraclecloud.com
*.hed.us1.oraclecloud.com
oc-141-144-146-91.compute.oraclecloud.com
oc-129-191-52-117.compute.oraclecloud.com
syd10-c-ad1-web-01.ap1.oraclecloud.com
*.fa.ca3.oraclecloud.com
*.cx.usd.oraclecloud.com
*.iad.bca.ocs.oraclecloud.com
nlclrv3990.em2.oraclecloud.com
*.scm.us2.oraclecloud.com
streaming.ap-sydney-1.oci.oraclecloud.com
nlclc2r303s2imap01.nldc1.oraclecloud.com
*.pbcs.us2.oraclecloud.com
statuspage.io
*.ic.oraclecloud.com
*.crm.us2.oraclecloud.com
ndcs.eu-zurich-1.oci.oraclecloud.com
mbclc1r402s1imap01.audc2.oraclecloud.com
*.fs.ap1.oraclecloud.com
g1iad38-opc-c7r111-zfs-1-ilom.usdc9.oraclecloud.com
statuspage.io
sgsmtp.email.ap-melbourne-1.oci.oraclecloud.com
*.prc.ap4.oraclecloud.com
*.prj.em2.oraclecloud.com
*.hcm.us4.oraclecloud.com
*.compute.us6.oraclecloud.com
*.fin.stg.us1.oraclecloud.com
ingestion.osms.me-abudhabi-1.oci.oraclecloud.com
*.fin.us9.oraclecloud.com
*.prc-sp.ap2.oraclecloud.com
oc-140-86-15-116.compute.oraclecloud.com
storage-gateway.eu-frankfurt-1.oci.oraclecloud.com
*.fs.la1.oraclecloud.com
*.prj.ap4.oraclecloud.com
search-head.phx-pp.ssvcs.ocp.oraclecloud.com
*.ic.us8.oraclecloud.com
*.ic.oraclecloud.com
*.social.ap4.oraclecloud.com
resourcemanager.uk-london-1.oraclecloud.com
concor-apics-production-lb-1.oraclecloud.com
g1iad38-opc-c7r105-zfs-2-ilom.usdc9.oraclecloud.com
*.cadc2.oraclecloud.com
*.ic.em5.oraclecloud.com
*.identity.us.oraclecloud.com
*.apm-agt.ap-mumbai-1.oci.oraclecloud.com
g1cheis01nasx11.usdc8.oraclecloud.com
*.fs.us1.oraclecloud.com
*.fs.ap1.oraclecloud.com
grafana.fra.ssvcs.ocp.oraclecloud.com
*.prc.ap2.oraclecloud.com
ctrl.email.ca-montreal-1.oci.oraclecloud.com
caal-test.social.us1.oraclecloud.com
*.scm.ap5.oraclecloud.com
*.ic.pp1.oraclecloud.com
*.fin.us1.oraclecloud.com
*.fin.ap4.oraclecloud.com
*.login.oraclecloud.com
fa.hsm.sa-santiago-1.ocs.oraclecloud.com
oc-129-150-200-210.compute.oraclecloud.com
*.scm.oraclecloud.com
qalw.oraclecloud.com
slc1-p-ad1-log-01.us11.oraclecloud.com
query.uk-london-1.oraclecloud.com
faopccicd.pp1.oraclecloud.com
interact.aftm9.origin.responsys.ocs.oraclecloud.com

Certificate

The complete raw certificate details for ocir.me-jeddah-1.oci.oraclecloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlS//qUf/SennhM5Gd3ph
VBfP9vXi0bIaWmIkXd6cpl/oTm+s05pxk7TZm0slRyqS0KhJ1sZC+Lb+slOyWTsx
b2x1A2L6RrO7WYNZYWhPzs39SW0F6dTZsicx6q+LBvU2PbMzE2eI7kzbmGhI5gZ/
kLIa2ugiP8HIcAghc3MUc0OqLSEhuGktHzzRzaEAoOinX2TqnMLKqel1hVrHPofw
M8wm6S8ep4BtIPMYoaQupp9JmvT49WTqMntxw/UQsoczwPncYdo4yQBmBbq/zUOt
aIwWIDgoCNoE6tLmZ+ATjv6ATxIuOBVtAHfKRFlQEZXpUFCHhyWD5seafiBsb3dz
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5112424477068195632557126671786333912
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Global G2 TLS RSA SHA256 2020 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-02 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocir.me-jeddah-1.oci.oraclecloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18833176469618152307779065833821114392880677154705659608474208813862393547116232662999938294140527550658617069316369158907053932542134517274341654601879484229864087694157404691581193353220445462917591172811021301918922297808814991698075756780102124076685290664516927676322109538995627000467639799109890089554072144470263229120534108758853855041018761649307060310877118916865431957177470555739239528532519813611061213754791683386778604906527676431040489611954860923072778748162007937529968636569279836527059656582751198189995903148288604816093485432178359505649469138427394066458755529689423454451388473557649817301763
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 748580c066c7df37decfbd2937aa031dbeedcd17
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9b8c99f2abe7564f01b2dc291a5f64c62c207a22
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocir.me-jeddah-1.oci.oraclecloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'me-jeddah-1.ocir.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jed.ocir.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertGlobalG2TLSRSASHA2562020CA1-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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