cct-gms-prod.travelers.com

- The Travelers Companies Inc -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 6d:9f:06:9e:ac:0b:e7:11:00:00:00:00:54:cf:d8:e0 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Travelers Companies Inc

Company registration number: 12-AA
Organization: The Travelers Companies Inc
State / Province: Connecticut
Locality: Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:9f:06:9e:ac:0b:e7:11:00:00:00:00:54:cf:d8:e0
Serial Number (int): 145711561006815977956778506834469181664
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 6f:dc:57:12:39:f7:f6:bd:b8:87:ad:3f:5f:c4:3e:3f:19:f9:9c:8e
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 96:ed:3f:1a:88:ad:b5:a1:eb:78:e6:35:bc:56:3d:0f:38:6c:79:99
Fingerprint (sha256): 06:0c:e9:59:e2:73:1e:bd:a8:31:72:38:f6:5a:c0:5a:5a:85:3c:6e:c9:e3:eb:10:c0:68:51:48:f5:f2:6c:93

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate cct-gms-prod.travelers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cct-gms-prod.travelers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cct-gms-prod.travelers.com

Other certificates including the domain name travelers.com

(limited to 100 certificates)
travelers.com
rmisui-qa.travelers.com
agent-qa.travelers.com
uat3-selfservice.dev.travelers.com
secureamp.travelers.com
mylogon.travelers.com
biepwjas.travelers.com
rmdquote.travelers.com
eclaimreporting.travelers.com
secure.travelers.com
riskcontrol.travelers.com
piepwjas.travelers.com
careers.travelers.com
agencyonboarding-status.travelers.com
lyftclaim-auth.travelers.com
federationcert-mo.travelers.com
piwas-qa.travelers.com
foragents.travelers.com
piwas-qa.travelers.com
businessinsured-api-auth.travelers.com
cat-acct-uw-pricing-dev2-test-harness.travelers.com
thirdpartyclaim-api-auth.travelers.com
employees.travelers.com
umumedia.travelers.com
epw.travelers.com
timetrak.travelers.com
appsmytpi.travelers.com
bondservices.qa.travelers.com
claimregistration.travelers.com
printselection.travelers.com
pdfweb.travelers.com
bi-agclaar.travelers.com
bi-digital-assessment-ui-auth.travelers.com
bi-customize-quote-pt-auth.travelers.com
thirdpartymedical-api-mo-auth.travelers.com
paymentcontainer.dr.travelers.com
qaagentauth.travelers.com
qavendorregistration.travelers.com
xapi-router-service-dev.dev.travelers.com
akamai-san69.exacttarget.com
accessclaim.travelers.com
mi.travelers.com
bi-webpdext-pt.travelers.com
iexmlepv.travelers.com
travalert.travelers.com
polarissalesforceservice-poc.dev.travelers.com
biws-pt.travelers.com
bi-guidewire-proxy-dev.travelers.com
clocp.travelers.com
bi-trvpas-pt.travelers.com
bi-platform-pt.travelers.com
autopay-cfpwzn.travelers.com
accessclaim.travelers.com
asguide.travelers.com
agenthq.travelers.com
biwas.travelers.com
voltage-pp-0000.travelers.com
myquote-mo.travelers.com
mo-edaxfilescan-auth.travelers.com
view.ems.travelers.com
www.travelers.com
rmisui.travelers.com
secureemail.travelers.com
p2p-qa.travelers.com
plgateway.travelers.com
connectwcforagents.travelers.com
epay-cl.travelers.com
subrogation-api-auth.travelers.com
servicesqa.travelers.com
agentdocs.travelers.com
socialplus.travelers.com
cct-gms-prod.travelers.com
transpnluwguide-pt-auth.travelers.com
aimmytpiregistration.travelers.com
esri-mo-ext.travelers.com
secureeft.travelers.com
epw.travelers.com
oplquote.travelers.com
piwas-qa.travelers.com
epwjas.travelers.com
securemail.travelers.com
egeico.travelers.com
apps.travelers.com
premiumauditreg.travelers.com
biwas-pt.travelers.com
internal.learning.dev2.travelers.com
pt-iexml.travelers.com
boa.travelers.com
qafederatedsso.travelers.com
sfscgateway-proxy-ext-mo-auth.travelers.com
esignws.dev.travelers.com
plagt.travelers.com
bi-webpdext-pd.travelers.com
pijas-ocf.travelers.com
www.travelers.com
equote.travelers.com
vendorregistration.travelers.com
mytbiconversion-auth.travelers.com
api-qa.travelers.com
p2p.travelers.com

Certificate

The complete raw certificate details for cct-gms-prod.travelers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZpcZcQehHPl1IrN9YPl
dEk181I86x2YY2SoeBGypG1Siijh4551vqohyhTTya41/svM8z8ghrrUArcVrekP
5HMbazPLzh8eOY8vKEIDNpRNFg1UQspFQD22KsHb6axqyJYl7N8GUECFrJjWntp2
dQvQG9FW5SjZLBulVvD17yKdRfxX8OScOG+eIhCCKFqeq61Uz/v+sIPsk/wSfqF9
/KWEUbVQ0wKUEvy3FGaqCXgsnBSYEGxECMwXhgsS61PWG5/y8oQyS3eAeN0IVViF
BSenHbQT0VxvztUNlI6oqs1sSqSfI99MuUOmXyrZGlG4s72cVJoh7GlkfrZTp0AI
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 145711561006815977956778506834469181664
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-30 17:27:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-07-31 17:57:49 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Travelers Companies Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12-AA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cct-gms-prod.travelers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18885625650418937296058539545861239086974671077506729989690900555048638291828836670226722129272624488037671155228215600144937727703121557744378230995620824904818204049552284166724673747240443197556878932830409904444612809229518852423718380250956652229968821543360578666124269145227113343129294787653549267098111979235140918141985576648903684320772508783363583794879720719987695286765559722753524526193867345764253327712360465316750496534843932702270392691574899693570169326174259719459268041821835737284889033470349450413001979011694808177132344360768374252650983633239077570777275563039957828912080142622757706795111
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cct-gms-prod.travelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6fdc571239f7f6bdb887ad3f5fc43e3f19f99c8e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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