ss2.experian.com

- Experian Information Solutions, Inc. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number f5:64:6d:0c:ff:af:18:2e:00:00:00:00:54:cc:a9:f4 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Experian Information Solutions, Inc.

Company registration number: 812947
Organization: Experian Information Solutions, Inc.
State / Province: Texas
Locality: Allen
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): f5:64:6d:0c:ff:af:18:2e:00:00:00:00:54:cc:a9:f4
Serial Number (int): 326182300465672973535755409668463962612
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: c7:3f:6c:fc:37:3e:31:65:47:99:74:ee:ca:1b:74:6d:a7:02:96:4d
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): bf:1c:b5:3e:70:87:bb:7d:0d:34:31:1f:67:4f:2b:b2:d2:6d:8a:0c
Fingerprint (sha256): 05:be:1c:41:c6:1f:c9:9b:92:6b:1e:b4:91:39:9e:96:62:9b:9e:c9:98:e5:63:27:12:e3:93:23:53:8c:b1:6b

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate ss2.experian.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ss2.experian.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ss2.experian.com

Other certificates including the domain name experian.com

(limited to 100 certificates)
prext.unify.uk.experian.com
psn.secure.wasp.uk.experian.com
eic-image.uk.experian.com
secure.wiseconsumer.uk.experian.com
beta-in-api.experian.com
stg-gateway.secure.experian.com
ww2.experian.com
*.datafabricpreprod.cdsw.experian.com
crp.h4cs.wapp.hunter.uk.experian.com
stageservicedeliveryplatform.uk.experian.com
www.mchsecrp.it.wapp.hunter.uk.experian.com
ss3.experian.com
das.uk.experian.com
5672591746400256-fe3.pantheonsite.io
sandbox.experian.com
secure-aie.experian.com
uathosted.bankwizardabsolute.uk.experian.com
stg1-ss1.experian.com
pages.e.usa.experian.com
newdaypccms.uat.uk.experian.com
www.autocheck.uk.experian
usx2-lyn-rp01.us.experian.local
mdmreg1.experian.com
auth-eub-test.experian.com
retain.uk.experian.com
imperva.com
ug-sav.uk.experian.com
ukid.eih03.uk.experian.com
identityiq.uat.uk.experian.com
sandbox-uk-api.experian.com
secure.wasp.uat.uk.experian.com
secure.e-series.uk.experian.com
hpes.experian.com
identityiq.qat.uk.experian.com
usmkpsynsc.experian.com
incapsula.com
emsevents.experian.com
u6aeh5cx.fraudnet.experian.com
permissions.prod.uk.experian.com
qat.crosscore.experian.com
newprod.ie.wsrv.hunter.uk.experian.com
dev-spla-api.experian.com
stg1-fed.experian.com
www.mchseuat.nl.wsrv.hunter.uk.experian.com
ss1-ectst001vc.ec.experian.com
imperva.com
secure.e-series.uk.experian.com
images.proveid.experian.com
stg1-ss1.experian.com
dm-sgw1-us.experian.com
itdr-webadmin.uk.experian.com
stm.experian.com
wynsz2kd.test.fraudnet.experian.com
data.nl.experian.com
Amex.PCCM.experian.com
ukx1rpad1-mgmt.uk.experian.com
postemobile-trs.uk.experian.com
appsext.unify.uk.experian.com
ukid.eih02.uk.experian.com
uat-nec-data-link.experian.com
amrs.uk.experian.com
test-uk-api.experian.com
5672591746400256-fe3.pantheonsite.io
intelviz.experian.com
ukid.eih01.uk.experian.com
us-mdm1.experian.com
syncfs-nab.experian.com
www.mchsecrp.wsrv.hunter.uk.experian.com
nordic.experian.com
us-mail.experian.com
irt.caisma.uk.experian.com
uat-ukbsproxy.uk.experian.com
cma.uk.experian.com
sandbox-eu-api.experian.com
pks.experian.com
bankwizardondemand.uk.experian.com
mtvhpccowe.uat.uk.experian.com
cr-securemail.experian.com
staging.bwonline.uk.experian.com
www.mchsecrp.wapp.hunter.uk.experian.com
MQPD.UK.EXPERIAN.COM
customerdataengine.experian.com
devautodoc.proveid.experian.com
ss2.experian.com
anjuna.status.polaris.synopsys.com
caisma.uk.experian.com
api-dataexchange.experian.com
uat-uk.intact.uk.experian.com
ww2.experian.com
idm.uat.admin.uk.experian.com
saap-ansible.experian.com
intelviz.experian.com
stg2-ss1.experian.com
moroccopki.admin.dev.uk.experian.com
sgw.secure.uk.experian.com
dataservice-ent.uat.uk.experian.com
smetrics1.experian.com
tsvs-api.experian.com
secure.wasp.uk.experian.com
Autodoc.proveid.experian.com

Certificate

The complete raw certificate details for ss2.experian.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDYe1uebImH+WSOiX8Fb
f+nlbam7Ra5mBjzl9GzSa2mZxcani0QnmOM+Y/Nz/bE7cj0VoeBCHdlj16dCss15
ZMIQlz31h2R2RcIWmmm8zVWkz/No2vRcco/rAZdufgmBK4jftLMBLZlD4yiiM3xx
a9k8jWPInyuleW91Hwbx9w6oEDEeNxh4dTly7InxRbm9H+POow+tklxRk8kMMFff
d2VG8PgpyP+hbo9Xrkp8BJAX8HYYx1lV6vk5Tp32GQuHskdRCtaFSuoYrgOf4RQr
t657UagA5cuwgu/tvmsF8I67KB/Ca1/oel01AP/EbDMqpEbHpY4aqoh6Eac8RtXK
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 326182300465672973535755409668463962612
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-24 06:11:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-24 06:41:14 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Allen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Experian Information Solutions, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '812947'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ss2.experian.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23254535910545289606264689660808420474905743344248991349232478701485127866363190241693293458653466464739332090689906677009743419811880330720479083920918502112630904599938690097577113758106533505222672716883635732401321727729569319161243856221250888914833638798219006118408831860388022853024716783649105728067493569922623753039996502136447457031643414732176139746461494773498609729786174188225685707928039504734715264549751163860775854069672016296526884237169948362430256795206500003412453214703051713292486736344139166137379142229350091873995004617363678239880952659179288551314577708797163519313302523184832251808459
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ss2.experian.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c73f6cfc373e3165479974eeca1b746da702964d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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