blackboard.staffs.ac.uk

Issued by Amazon

About this certificate

This digital certificate with serial number 09:a9:68:ea:d9:01:b3:7d:b5:57:2c:5d:41:73:47:fe was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blackboard.staffs.ac.uk

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a9:68:ea:d9:01:b3:7d:b5:57:2c:5d:41:73:47:fe
Serial Number (int): 12842678108305740516496903871099258878
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 48:cd:5f:e0:f6:0b:1a:d9:9a:c3:65:e5:5f:4a:6d:7c:b6:58:f6:eb
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c0:86:a3:b1:8f:5d:07:f2:ac:db:15:a9:fd:21:49:4d:6b:20:1c:b4
Fingerprint (sha256): 05:db:d1:3c:81:dc:f7:64:95:df:9e:d6:d6:a1:a3:d9:e0:a8:4c:6a:94:38:4f:ae:a0:a4:47:38:11:06:98:8d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate blackboard.staffs.ac.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blackboard.staffs.ac.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blackboard.staffs.ac.uk
*.blackboard.com

Other certificates including the domain name staffs.ac.uk

(limited to 100 certificates)
paymentportal.staffs.ac.uk
staffsurvey.staffs.ac.uk
shop.staffs.ac.uk
accesscentre.staffs.ac.uk
www-int.staffs.ac.uk
libguides.staffs.ac.uk
surf.staffs.ac.uk
evision.staffs.ac.uk
ingenius.staffs.ac.uk
jira.games.staffs.ac.uk
reslifeportal.staffs.ac.uk
vpn.staffs.ac.uk
blackboard.staffs.ac.uk
gamestech.staffs.ac.uk
gamestech.staffs.ac.uk
eprints.staffs.ac.uk
iris.staffs.ac.uk
i3.staffs.ac.uk
myportal.staffs.ac.uk
allstokedup.staffs.ac.uk
airnet-secure.staffs.ac.uk
learning.staffs.ac.uk
vmp1wscan1.staff.staffs.ac.uk
www-int.staffs.ac.uk
crusweb3.staffs.ac.uk
blackboard.staffs.ac.uk
crusweb3.staffs.ac.uk
sspr.staffs.ac.uk
sid-uat.staffs.ac.uk
libcat.staffs.ac.uk
workvivo.staffs.ac.uk
digitalacademy.staffs.ac.uk
journals.staffs.ac.uk
staffs.ac.uk
iswiki.staffs.ac.uk
govdocs.staffs.ac.uk
beacon.staffs.ac.uk
staffs.ac.uk
unicard.staffs.ac.uk
eu-central-1-san1.blackboard.com
evision.staffs.ac.uk
*.staffs.ac.uk
coll-publisher-ms.staffs.ac.uk
crusmis14.staffs.ac.uk
vmp1wstuweb1.staff.staffs.ac.uk
staffdirectory.staffs.ac.uk
crwnfcet2.staffs.ac.uk
medialibrary.staffs.ac.uk
bitlocker.staffs.ac.uk
san-eu02-gd.hosted.exlibrisgroup.com
eu-central-1-san1.blackboard.com
alumni.staffs.ac.uk
search.staffs.ac.uk
unicard.staffs.ac.uk
crusldi6.staffs.ac.uk
dilondon2.staffs.ac.uk
adfs.staffs.ac.uk
wwwtest.staffs.ac.uk
VMT1UCAMPUSM1.staffs.ac.uk
*.staffs.ac.uk
crusetran4.staffs.ac.uk
cruscmc2.staffs.ac.uk
coll-cucm-imp-ms.staffs.ac.uk
workvivo.staffs.ac.uk
crwnident1.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
images.staffs.ac.uk
crwncas1.staffs.ac.uk
libcat.staffs.ac.uk
grafana.staffs.ac.uk
staffs.ac.uk
crwnethot1.staffs.ac.uk
timetables.staffs.ac.uk
myview-test.staffs.ac.uk
rodc.staffs.ac.uk
cruscampus2.staffs.ac.uk
askus.staffs.ac.uk
myview.staffs.ac.uk
inplace-test.staffs.ac.uk
allstokedup.staffs.ac.uk
myportal.staffs.ac.uk
eu-central-1-san1.blackboard.com
vpn.staffs.ac.uk
www.staffs.ac.uk
adfs.staffs.ac.uk
*.staffs.ac.uk
search.staffs.ac.uk
coll-socialminer.staffs.ac.uk
*.ezproxy.staffs.ac.uk
staffs.ac.uk
blackboard.staffs.ac.uk
hotspot.staffs.ac.uk
staffdirectory.staffs.ac.uk
*.staffs.ac.uk
syllabus-test.staffs.ac.uk
adfs.staffs.ac.uk
accesscentre.staffs.ac.uk
shop.staffs.ac.uk
affiliates.staffs.ac.uk

Certificate

The complete raw certificate details for blackboard.staffs.ac.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIQCalo6tkBs321VyxdQXNH/jANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA1MTMwMDAwMDBaFw0yMTA2MTIx
MjAwMDBaMCIxIDAeBgNVBAMTF2JsYWNrYm9hcmQuc3RhZmZzLmFjLnVrMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqexuwQ6HGQ+WgE5ChfRulrphiC2I
JZma+9YbPxrTFA4DfdYL2Hpl6r+OCqpKgxIj6Tf+Q/fWUJru4xaa7FLtY3L54Ts3
ZDtAmh5PnUxWjYXOYlhHx7liBmXzUPyvxuC9M4gP8a/HAVwfsRPCXGwSOUW9+IzN
hvLlNKO7853oBVbKmR1pPtI+HM6Z4Q+//ZniU6afj8PYWUHXz20W1dSel+rR4NAH
nOawV64C5Yr6fVuW84AqXABZkSUt8gIAFQDJ3FyHJ7ggBILXiIHtfF78LmJw8fbt
6kI3HV95DiOoLJomvgSdFP1lnD/9+cuZC7by8Xpo0yE7jYEJUzi2ZOygbQIDAQAB
o4IClDCCApAwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFEjNX+D2CxrZmsNl5V9KbXy2WPbrMDQGA1UdEQQtMCuCF2JsYWNrYm9hcmQu
c3RhZmZzLmFjLnVrghAqLmJsYWNrYm9hcmQuY29tMA4GA1UdDwEB/wQEAwIFoDAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYq
aHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIuY3JsMCAGA1Ud
IAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYI
KwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFtYXpvbnRydXN0LmNvbTA2Bggr
BgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6b250cnVzdC5jb20vc2NhMWIu
Y3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEEAdZ5AgQCBIH0BIHxAO8AdQD2XJQv
0XcwIhRUGAgwlFaO400TGTO/3wwvIAvMTvFk4wAAAXIPAPUpAAAEAwBGMEQCIAhB
+iWSCj+nMjVyh7A7UqRwp5T19Ia1tQZwbeVAOVlwAiAWLpjtQABrdek5b8x7uzwL
zHIN7sv67Ijrlu09os+xwwB2AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2
xw7KAAABcg8A9SUAAAQDAEcwRQIhAMxKf081RWv6mCGdaW2J99uIiUQMkD0Ulhmy
HVmmG1t+AiBaZosde/8iWww4YMPmagOlBGheiTon+iCePh1IMtY7iDANBgkqhkiG
9w0BAQsFAAOCAQEADvKIeoPQnFveuK4kDXL2k1PL2kf1VR6lhYG08CudGjmb6XpF
KcaFhT4T8GeRhS5S1O67l9/qwZEAsa0ic7JyvEnIwwAgzpTLgzU1G2SKBlo21txW
Tg6zQRz8/+fD+9PqQIZv21kV6kedo5B9eXJija95br7KamdUccxn/tKkC7TVXepl
PdLxlQFXN6SHPAeY/npq6g6vvoZhJ6uYxvTNr1YJ5FPleFqwV6fBxJuRSgFdPixk
R19sUBQoSn7H2np3+vQqT/l5Te2jotVBF3whcjyqv9TyODCnnRDy7mfqJqKzBkDo
iHEHDkv2rQyauT1MwBU3hwn9z2q5B0Uvh9KRKw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqexuwQ6HGQ+WgE5ChfRu
lrphiC2IJZma+9YbPxrTFA4DfdYL2Hpl6r+OCqpKgxIj6Tf+Q/fWUJru4xaa7FLt
Y3L54Ts3ZDtAmh5PnUxWjYXOYlhHx7liBmXzUPyvxuC9M4gP8a/HAVwfsRPCXGwS
OUW9+IzNhvLlNKO7853oBVbKmR1pPtI+HM6Z4Q+//ZniU6afj8PYWUHXz20W1dSe
l+rR4NAHnOawV64C5Yr6fVuW84AqXABZkSUt8gIAFQDJ3FyHJ7ggBILXiIHtfF78
LmJw8fbt6kI3HV95DiOoLJomvgSdFP1lnD/9+cuZC7by8Xpo0yE7jYEJUzi2ZOyg
bQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12842678108305740516496903871099258878
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-13 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-12 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blackboard.staffs.ac.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21450862816092012448707855023639743188174561012989458180339336269754295618866471453122702573606183871023770628986327449937103702573462885523680734156657901311131452794477807921361172491326579867893420286077820366360858635494759024554858555597250067473305495921666465957133009827032436575296783098943903608226725955614800102890752549000935181772011004336115560935911740470717022229286130404357637686436177498558285170128600798367786976105108263423834603690796369730718664250322958106829712098034887329616420702040370806569013318352266846777769723121889397282897831293607301149123772748919457451710680228241544795955309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							48cd5fe0f60b1ad99ac365e55f4a6d7cb658f6eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (45 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blackboard.staffs.ac.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001720f00f529000004030046304402200841fa25920a3fa732357287b03b52a470a794f5f486b5b506706de5403959700220162e98ed40006b75e9396fcc7bbb3c0bcc720deecbfaec88eb96ed3da2cfb1c30076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001720f00f5250000040300473045022100cc4a7f4f35456bfa98219d696d89f7db8889440c903d149619b21d59a61b5b7e02205a668b1d7bff225b0c3860c3e66a03a504685e893a27fa209e3e1d4832d63b88
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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