app.inata.trade

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 08:04:54:07:8b:b5:a1:f9:ea:ba:b9:56:fe:07:0c:53 was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=app.inata.trade

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:04:54:07:8b:b5:a1:f9:ea:ba:b9:56:fe:07:0c:53
Serial Number (int): 10656297473955307483584817125222976595
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 50:5c:a8:67:c7:79:73:24:f7:a5:d8:03:72:4f:c7:2d:22:f2:b4:b5
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 0b:f7:8e:39:fc:e7:f6:ef:ab:96:32:a6:21:61:4f:45:ac:97:a4:f8
Fingerprint (sha256): 05:cd:36:21:da:e9:2f:25:f0:e4:9a:2c:a9:23:37:17:61:5b:f4:58:94:4f:20:88:f2:0b:23:26:14:68:00:f1

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate app.inata.trade

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for app.inata.trade

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

app.inata.trade

Other certificates including the domain name inata.trade

(limited to 100 certificates)
assured.yesflow.com
claims.ltl-xpo.com
inata.trade
www.kunchen.me
app.inata.trade
preview.appscreens.com
inata.trade
app.inata.trade
admin.jhumkaplanet.com
ivycreek.io
krakenrally.com.br
www.datasocofar.rayoapp.com
alpinerealm.net
sandbox-kissht.poshvine.com
backgammongame.online
00ht.ml
sandbox-kissht.poshvine.com
*.inata.trade
etienne-blanc.com
prayboiledegg.com
www.mortalgeek.com
krakenrally.com.br
beta.bepos.io
ioxleyte18.gdgcebu.org
www.kunchen.me
www.easytosale.store
www3.youdojam.com
assured.yesflow.com
boondockbuild.mandolin.com
careermarketzambia.com
login.itc-kostrena.com
202s.art
www.whatdosquirrelseat.org
beta.bepos.io
wetvac.hydrochempsc.app
*.inata.trade
valo.highlander.cloud
www.ilkerkaran.com
inata.trade
inata.trade
caesuramedia.com
www.cinder.st
valo.highlander.cloud
spectr.app
www.aplayer.info
app.inata.trade

Certificate

The complete raw certificate details for app.inata.trade in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjjCCBXagAwIBAgIQCARUB4u1ofnqurlW/gcMUzANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjQwNDIzMDAwMDAwWhcNMjQxMDIzMjM1OTU5WjAaMRgwFgYDVQQDEw9hcHAuaW5h
dGEudHJhZGUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFhAnJY/jy
CCRlPvp+aOTVGBKcQwALbVlHFi8jEWgsd6kKnUh5RSFye8A4DzfNNbflkDPeBKqU
PZWS3J1aOiSgZjd3jZkB+7QD++RsRl06gaatTw85xnlsjRFNxpnJQL0TnbIrW1mZ
2XHdZwG0Jxqv0Lw4jfzgtKXWIA41cvRMLQHxg/i/JzUVQPehh3eAgLVHCT0+15PB
3KuLxeHF5LvPSFM9hWLAgYONvuJSZho5zGLAHXYRjAxC33lil6W5CIT3sqiC003B
xE9ZfAVm0IlYQ4l7XoCak712A6Y2KD7kS8dSfBUPAvG7xucqgy6RtVqRVtZGeAGn
+wEgiRGkCk0JAgMBAAGjggOMMIIDiDAfBgNVHSMEGDAWgBSltNbrNsTna6bfxGQL
ASogBLhmIzAdBgNVHQ4EFgQUUFyoZ8d5cyT3pdgDck/HLSLytLUwGgYDVR0RBBMw
EYIPYXBwLmluYXRhLnRyYWRlMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYB
BQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIGfBgNVHR8EgZcwgZQw
SKBGoESGQmh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRM
U1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNybDBIoEagRIZCaHR0cDovL2NybDQuZGln
aWNlcnQuY29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEu
Y3JsMIGHBggrBgEFBQcBAQR7MHkwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRp
Z2ljZXJ0LmNvbTBRBggrBgEFBQcwAoZFaHR0cDovL2NhY2VydHMuZGlnaWNlcnQu
Y29tL0dlb1RydXN0R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3J0MAwG
A1UdEwEB/wQCMAAwggF/BgorBgEEAdZ5AgQCBIIBbwSCAWsBaQB3AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABjwm9kmsAAAQDAEgwRgIhAPRIHxWX
HZs8sy/4EjwGTWInFSY+8ypfZez4MmLEMxZFAiEA8948/nmnCqs7kMRZE/XgTgVe
BGkIRHMw7tg+eiWU41IAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+rOdiE
cwAAAY8JvZJfAAAEAwBHMEUCIQCKHpRA3F39SMcZ8GX94y3psDM4RiGyt692dxmx
gYtrngIgQqhB/5EbvrPpfHrXnlDJh2XJX/s24JNd389dsQG1fioAdgDatr9rP7W2
Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAY8JvZJZAAAEAwBHMEUCIG73PV+v
h4OY1ubc5F+V810sxFAet3mgmZTf/3C+6xh4AiEA2OGAnXEI+F+PLQ3qPeSnyz7L
BFkCAxPTmgtXAsdn6K8wDQYJKoZIhvcNAQELBQADggIBACxBUeBQnLIhx2g1ISoQ
ziPfCoriGQKwgaJHsuZNbJcovl2pC+OvvPHrl7BVP/XjFY0ZOtw5Oj3nSns1oxKN
EziuZyaqVHP8lVKbC4ln6QiT6eV/pN6/RQ4dD9xPD+VKgxMacOUyiii0w+0NwbIm
9vveB16N9bzYL2k/VSiGXfDRHUhfF6VyAMW8Txxlu5IbGHv5RcIEf8eEeOV5AtJ8
ilRpySXZuzsdH4TRdz3NcvLadxHW+uXIe2XiXK6N6T9GB3pCTv9zGJuJASASICOg
xe6Hjb60PL3ocBpt8em2l1cMgDVYEn6XI3GOdhLPswRrrMef0LELWs7sFch+BD6W
fo72m3TC3j5IFnEV4IDutcEqs+Mw2GocNix4ZmWiRqpzw+AU32fTOXLAPvDuaEf8
OZRFeOXZiFXcq2z6R5DjiuJE0KbMky3hB+/6Z13UVLLvolOQbpa6PE0JWBS4kGE7
v7BFnrGjgefbS8Pq2VBb5SS8PxIktX3MYEWZ9ay9tLZxKMW7dUowd3Szgb9LkgDV
bPHB1Vht7XaaJDHPrXyHMljeE1OfPC+zij533KkvGdz6v9T1iZooMA3BtPfiDo4J
LeWaD/2NtKt1LE1zfXLCyd1zgtcA3yhbjWXjkRX8DgmCsavA/Q9gSQoVHtT0/30v
k+MCcAIDDitQb0HWZ91S2Bkr
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYQJyWP48ggkZT76fmjk
1RgSnEMAC21ZRxYvIxFoLHepCp1IeUUhcnvAOA83zTW35ZAz3gSqlD2VktydWjok
oGY3d42ZAfu0A/vkbEZdOoGmrU8POcZ5bI0RTcaZyUC9E52yK1tZmdlx3WcBtCca
r9C8OI384LSl1iAONXL0TC0B8YP4vyc1FUD3oYd3gIC1Rwk9PteTwdyri8XhxeS7
z0hTPYViwIGDjb7iUmYaOcxiwB12EYwMQt95YpeluQiE97KogtNNwcRPWXwFZtCJ
WEOJe16AmpO9dgOmNig+5EvHUnwVDwLxu8bnKoMukbVakVbWRngBp/sBIIkRpApN
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10656297473955307483584817125222976595
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'app.inata.trade'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24934056555845335183958290726995559452451375775314529063255194198681610897356496527149984450418490299416614177697217987271639799779042633798739120038944557969258417689236491042949899921655116716340303232804491326473406402073232375238384869924492961773127591632970374884145873305377620580448438407749672789064206633381735006120056448892132484361274118403758176594816671700067372117221817704724208104441236355789004826116010068308376435377258135635613171936759918234130252701706975305159553627888186456063973115781163020885731044589878391575407085164089443045011250375817039590121440300334734457913807666851469645729033
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							505ca867c7797324f7a5d803724fc72d22f2b4b5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.inata.trade'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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