*.fpotest.emric.se
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 0e:ee:93:a4:b8:dc:81:d2:49:89:b0:4d:dd:cf:11:c0 was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.fpotest.emric.se
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0e:ee:93:a4:b8:dc:81:d2:49:89:b0:4d:dd:cf:11:c0Serial Number (int): 19847953158162318882981459569517990336
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 74:96:62:d1:e1:49:0a:4b:39:e9:83:0b:84:49:b5:98:cf:3b:84:06
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 6e:a8:3d:6d:10:62:29:d8:a8:b2:d6:09:e2:44:35:03:cd:6a:ac:d5
Fingerprint (sha256): 06:58:41:c4:a5:e1:f3:b8:09:38:d6:11:2b:ca:bc:88:4e:30:24:70:2a:47:d7:cd:8d:e5:5d:06:ce:a1:ac:2e
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate *.fpotest.emric.se
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.fpotest.emric.se
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.fpotest.emric.se
Other certificates including the domain name emric.se
(limited to 100 certificates)
*.fpotest.emric.se
*.carnegie.fpo.emric.se
*.trio.fpo.emric.se
*.emric.se
clouatforexbroker.emric.se
*.fpotest.emric.se
*.emric.se
*.kraft.fpotest.emric.se
*.emric.se
*.dev.emric.se
fpo-cloprd-vs07.fpo.emric.se
*.fpotest.emric.se
*.carnegie.fpotest.emric.se
clouatforexbroker.emric.se
*.kraft.fpo.emric.se
*.stabelo.fpotest.emric.se
*.okq8.fpo.emric.se
fpo-clotst-vs07.fpotest.emric.se
cloforexbroker.emric.se
cla.carnegie.fpo.emric.se
*.emric.se
*.fpo.emric.se
*.medmera.fpotest.emric.se
*.emric.se
cla.carnegie.fpo.emric.se
*.fpo.emric.se
*.kraft.fpo.emric.se
fpo-cloprd-vs07.fpo.emric.se
webmail.emric.se
clouatforexbroker.emric.se
fpo-clotst-vs07.fpotest.emric.se
*.emric.se
*.medmera.fpo.emric.se
webmail.emric.se
webmail.emric.se
cloforexbroker.emric.se
*.carnegie.fpo.emric.se
fpo-cloprd-vs07.fpo.emric.se
cloforexbroker.emric.se
*.okq8.fpo.emric.se
trygghansa.emric.se
*.tfbank.fpotest.emric.se
*.emric.se
fpo-clotst-vs07.fpotest.emric.se
*.emric.se
*.carnegie.fpotest.emric.se
*.kraft.fpotest.emric.se
*.tfbank.fpo.emric.se
*.tfbank.fpo.emric.se
webmail.emric.se
*.carnegie.fpo.emric.se
*.trio.fpo.emric.se
*.emric.se
clouatforexbroker.emric.se
*.fpotest.emric.se
*.emric.se
*.kraft.fpotest.emric.se
*.emric.se
*.dev.emric.se
fpo-cloprd-vs07.fpo.emric.se
*.fpotest.emric.se
*.carnegie.fpotest.emric.se
clouatforexbroker.emric.se
*.kraft.fpo.emric.se
*.stabelo.fpotest.emric.se
*.okq8.fpo.emric.se
fpo-clotst-vs07.fpotest.emric.se
cloforexbroker.emric.se
cla.carnegie.fpo.emric.se
*.emric.se
*.fpo.emric.se
*.medmera.fpotest.emric.se
*.emric.se
cla.carnegie.fpo.emric.se
*.fpo.emric.se
*.kraft.fpo.emric.se
fpo-cloprd-vs07.fpo.emric.se
webmail.emric.se
clouatforexbroker.emric.se
fpo-clotst-vs07.fpotest.emric.se
*.emric.se
*.medmera.fpo.emric.se
webmail.emric.se
webmail.emric.se
cloforexbroker.emric.se
*.carnegie.fpo.emric.se
fpo-cloprd-vs07.fpo.emric.se
cloforexbroker.emric.se
*.okq8.fpo.emric.se
trygghansa.emric.se
*.tfbank.fpotest.emric.se
*.emric.se
fpo-clotst-vs07.fpotest.emric.se
*.emric.se
*.carnegie.fpotest.emric.se
*.kraft.fpotest.emric.se
*.tfbank.fpo.emric.se
*.tfbank.fpo.emric.se
webmail.emric.se
Certificate
The complete raw certificate details for *.fpotest.emric.se in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGKzCCBROgAwIBAgIQDu6TpLjcgdJJibBN3c8RwDANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xODAzMTYwMDAwMDBaFw0yMDAzMTUxMjAwMDBaMB0xGzAZBgNVBAMMEiouZnBv dGVzdC5lbXJpYy5zZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANsF 7V7/oTn7Yh0lDgUrsuj6wD3uZv7l4JHnqPXIAUF877v7D7DZ+RAXYCyeQgSI5WQ+ cV5jnGNY4SPznzKKBUjaAEVLGHgdMW2leBoqmplwYll+1XNT3iexx5/e+yg4Uuw7 0wcRgFZSkbwMN2L6fM/hAREgD4pNJ++Cqcbo03KR5SrTmfXoKyfxkzeKolDJG0F8 SpBzgUOtVh+XTBB7boHfTUlD7b3PwIkRywkk1nuYtngGajY1cKdPwQXaXFBbZx9R SZ8DsBqM0ai7crk4DQlrGYejVtZtqSx2zW/mff2YpZ2SgHHgfqb6oM0NHEnTAWtq JXwp0WbMZFOofvVacQkCAwEAAaOCAyQwggMgMB8GA1UdIwQYMBaAFFPKF1n8a8AD IS8aruSqqByCVtp1MB0GA1UdDgQWBBR0lmLR4UkKSznpgwuESbWYzzuEBjAdBgNV HREEFjAUghIqLmZwb3Rlc3QuZW1yaWMuc2UwDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw Oi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFJTQUNBMjAxOC5jcmwwTAYDVR0g BEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln aWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF BzABhhpodHRwOi8vc3RhdHVzLnJhcGlkc3NsLmNvbTA9BggrBgEFBQcwAoYxaHR0 cDovL2NhY2VydHMucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNBQ0EyMDE4LmNydDAJ BgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgCkuQmQtBhYFIe7 E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAWIugO9wAAAEAwBHMEUCIHWFADuKz/LA VKL1SssNFUTPE3uwCKQoAj4ff2PszD8SAiEAh/FyUdtGaE1LLD8v/z1zt4RD/7qn 3ZYF2jeOTakVJS8AdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbIImjfZEwAA AWIugPE6AAAEAwBHMEUCIEvOkw4oT9g+9UuUoQRS9z5qUzxRmPOgxOjsGxKuNJfN AiEAgErsqiZo9CTD6F75K0YD7liXwFnxmMT55Fk0vk5k4jsAdgDuS723dc5guuFC aR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWIugO/DAAAEAwBHMEUCIQDf60qUkEQh YcEnZyJ2AaVp0GqKMmLYuKFi1Rnq2H9cnwIgWUgiYNi/4pDVcSXcQzWMR+L7AyU2 E0vTMULTbR+w30cwDQYJKoZIhvcNAQELBQADggEBAJke3Bcn0SHiKluRk83OYFvb /YZeMipoZs41gklLEx4M//sJgg9C1EIoe8Y8a1wYURZ7k5vl3tbBxZVn1Qb2UEZa k5MMM5avijwZvCBpYiEieURvuLs3QLVZ4JLxz8qtMelVP8q9oZY4pX8jfy0fLpQO XOzygKlptRrb70pIADqWvpKpq6382dxfWPhCkshvZPGwlKqgJ29ZCsh935KX5g0H b5h71AaPtEWEML+Itf77tfFt0pXJoCJXrCfAMPIorp170NORc8bMMrE0dnMYVg8N r06S0r5uWrCiyPWHhvWpmGORfbYsYLxQCIoLR7za5TObjuZEwJ+jK7Xjr0oB3sc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wXtXv+hOftiHSUOBSuy 6PrAPe5m/uXgkeeo9cgBQXzvu/sPsNn5EBdgLJ5CBIjlZD5xXmOcY1jhI/OfMooF SNoARUsYeB0xbaV4GiqamXBiWX7Vc1PeJ7HHn977KDhS7DvTBxGAVlKRvAw3Yvp8 z+EBESAPik0n74KpxujTcpHlKtOZ9egrJ/GTN4qiUMkbQXxKkHOBQ61WH5dMEHtu gd9NSUPtvc/AiRHLCSTWe5i2eAZqNjVwp0/BBdpcUFtnH1FJnwOwGozRqLtyuTgN CWsZh6NW1m2pLHbNb+Z9/ZilnZKAceB+pvqgzQ0cSdMBa2olfCnRZsxkU6h+9Vpx CQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 19847953158162318882981459569517990336 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-16 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.fpotest.emric.se' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27649111614015910262514322470518575371889172662130376243184712706645037824950699642041298329305404264365660282037601283332308050174562222151120926619939737273732334797473604303972324763000253137699985971456239464634861883145659660844297257047767486111266556726423483354664231093470852695225046664923302555847496043890000061300086254845183773982066491884789435071342246993728728519855475021904201380163474447650263965842304047359988053571081978474054902756224901303522612623446626507024392522736043013623484354897556586802034702567121740204145732983700698652315590628396112686859965102870947080241875704407317854974217 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 749662d1e1490a4b39e9830b8449b598cf3b8406 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fpotest.emric.se' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00991edc1727d121e22a5b9193cdce605bdbfd865e322a6866ce3582494b131e0cfffb09820f42d442287bc63c6b5c1851167b939be5ded6c1c59567d506f650465a93930c3396af8a3c19bc206962212279446fb8bb3740b559e092f1cfcaad31e9553fcabda19638a57f237f2d1f2e940e5cecf280a969b51adbef4a48003a96be92a9abadfcd9dc5f58f84292c86f64f1b094aaa0276f590ac87ddf9297e60d076f987bd4068fb4458430bf88b5fefbb5f16dd295c9a02257ac27c030f228ae9d7bd0d39173c6cc32b134767318560f0daf4e92d2be6e5ab0a2c8f58786f5a99863917db62c60bc50088a0b47bcdae5339b8ee644c09fa32bb5e3af4a01dec7