peopleadmin.com

Issued by Amazon

About this certificate

This digital certificate with serial number 0b:5d:b6:04:10:66:2b:b2:33:a2:91:36:99:67:8d:26 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=peopleadmin.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:5d:b6:04:10:66:2b:b2:33:a2:91:36:99:67:8d:26
Serial Number (int): 15108083282013605172211840291921431846
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:44:bf:a8:66:50:52:44:e7:5b:92:c0:21:a4:c0:2e:77:07:ca:20
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): eb:57:e2:6a:6d:19:9d:5a:e2:86:fa:76:1b:d4:85:f2:23:37:37:45
Fingerprint (sha256): 06:68:44:d2:ad:03:2a:eb:bd:6e:2d:ec:25:9f:fe:fa:9b:88:14:1e:ec:46:ba:4c:65:bb:c4:c6:0d:6a:d0:fd

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate peopleadmin.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for peopleadmin.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

peopleadmin.com
*.peopleadmin.com
talentedk12.com
*.talentedk12.com
pastaging.com
*.pastaging.com

Other certificates including the domain name peopleadmin.com

(limited to 100 certificates)
community.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
imperva.com
peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
peopleadmin.com
edge-uc1.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc4.peopleadmin.com
imperva.com
imperva.com
edge-uc4.peopleadmin.com
*.demofaculty.peopleadmin.com
edge_uc4.peopleadmin.com
lb03.pacloud.com
*.services.peopleadmin.com
imperva.com
ha.peopleadmin.com
imperva.com
edge_uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
incapsula.com
edge_uc3.peopleadmin.com
*.ca.services.peopleadmin.com
ha.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge_uc2.peopleadmin.com
ha.peopleadmin.com
peopleadmin.com
ted.peopleadmin.com
edge_uc4.peopleadmin.com
peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc4.peopleadmin.com
edge-uc1.peopleadmin.com
imperva.com
edge-uc2.peopleadmin.com
ted.peopleadmin.com
peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge-uc1.peopleadmin.com
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge_uc3.peopleadmin.com
imperva.com
edge_uc2.peopleadmin.com
edge-uc3.peopleadmin.com
patest.peopleadmin.com
edge-uc3.peopleadmin.com
edge-uc3.peopleadmin.com
sfqa.peopleadmin.com
imperva.com
ha.peopleadmin.com
*.sandboxfaculty.peopleadmin.com
lb03.pacloud.com
imperva.com
ha.peopleadmin.com
highered-ci.peopleadmin.com
ha.peopleadmin.com
edge-uc3.peopleadmin.com
*.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.com
*.services.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc1.peopleadmin.ca
edge_uc1.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc1.peopleadmin.com
edge-uc1.peopleadmin.com
uc1.pacloud.net
ha.peopleadmin.com
edge_uc2.peopleadmin.com
edge_uc3.peopleadmin.com
edge-uc3.peopleadmin.com
peopleadmin.com
peopleadmin.com
imperva.com
peopleadmin.com
edge-uc3.peopleadmin.com
edge_uc3.peopleadmin.com
edge_uc1.peopleadmin.ca
edge-uc4.peopleadmin.com
edge-uc2.peopleadmin.com
edge-uc4.peopleadmin.com
edge_uc3.peopleadmin.com
ha.peopleadmin.com

Certificate

The complete raw certificate details for peopleadmin.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIQC122BBBmK7IzopE2mWeNJjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODExMTUwMDAwMDBaFw0xOTEyMTUx
MjAwMDBaMBoxGDAWBgNVBAMTD3Blb3BsZWFkbWluLmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBAONkG23nhWYKwLjfOnan9U6PO8EozhOxKLJPDLWr
CWcP8vBxW20vU5uXRhzrNBYjk66tHmG3RQtZoSk52gi8XRVpvTLJfgHTMunwF1w4
DenqjvSZvJvCATU/cGICifAyBmU8ANwAtq1DDMe2DTUjmJo6IWEgsv7s2pBw4+O+
BlBSWTozZ1+eoJ4dv+3Hm5u+HSbvKRroyRd0JtQIh4lJ0NIBgsXhoUqPsypg927F
IaBps6fDjWnTIU3e6I6C/IOw0spE1SoarJYR2yJuBCwx4HS0P8FxR+uMWugvQkGg
cyR9WjtJ6Ou2HZB1dNQQwNhvp0s7CYqxIMGZ1K38f+zlYXcCAwEAAaOCAtIwggLO
MB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQWBBTdRL+o
ZlBSROdbksAhpMAudwfKIDBxBgNVHREEajBogg9wZW9wbGVhZG1pbi5jb22CESou
cGVvcGxlYWRtaW4uY29tgg90YWxlbnRlZGsxMi5jb22CESoudGFsZW50ZWRrMTIu
Y29tgg1wYXN0YWdpbmcuY29tgg8qLnBhc3RhZ2luZy5jb20wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmww
IAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z
Y2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3
AO5Lvbd1zmC64UJpH6vhnmajD35fsHLYgwDEe4l6qP3LAAABZxSyNyUAAAQDAEgw
RgIhANgAmzv8WkCovJWtMsVueWQOJVhwlmqXHb+lTjnJWJ80AiEAr8iBTeEthJnj
yQ5slzpGTdH29QgFsMQgK9bSjq9DLlQAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9K
tWDBtOr/XqCDDwAAAWcUsjfFAAAEAwBGMEQCIAuXa8sq/OA4ggHIMkCI4puq+ikU
63RJeb+qoJxDBAy+AiAntweVP9Pafac7YK0MNfL4H6v28I40pMEbqxgl9tmelDAN
BgkqhkiG9w0BAQsFAAOCAQEAjsNI1f273HUJbXEfxljoilNe6AiORP9TFj2x16Lo
e2yK/S3se/Pv3iCyTfu0Cao/lVs1c3wAKLYUrlocr362e4cjB7OCX68Mh0+a3wT0
MDN+mifrzEh6MPEalXB9sb3u+4/U7RduBbmLJErrfFoO0CQH37HBsPUj77B9r8Zo
2vNGh1WOD/YHNtBBTGF1sR4k4KnC7AHKo7kq2hvXwV07GQ4Tme+ewOTcwyv3WDfE
n6dfyzxGprSkGCyOec3fybNawnVTAbJD/RyFhJ5nclBlMW2xRlafePPTfvFb1PjP
2s0IAB2p+f5Cc2nA+P1dFgF74KLlnGHws7NXoAH5019fMg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA42QbbeeFZgrAuN86dqf1
To87wSjOE7Eosk8MtasJZw/y8HFbbS9Tm5dGHOs0FiOTrq0eYbdFC1mhKTnaCLxd
FWm9Msl+AdMy6fAXXDgN6eqO9Jm8m8IBNT9wYgKJ8DIGZTwA3AC2rUMMx7YNNSOY
mjohYSCy/uzakHDj474GUFJZOjNnX56gnh2/7cebm74dJu8pGujJF3Qm1AiHiUnQ
0gGCxeGhSo+zKmD3bsUhoGmzp8ONadMhTd7ojoL8g7DSykTVKhqslhHbIm4ELDHg
dLQ/wXFH64xa6C9CQaBzJH1aO0no67YdkHV01BDA2G+nSzsJirEgwZnUrfx/7OVh
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15108083282013605172211840291921431846
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'peopleadmin.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28705459900715023147763290054860267687752295801354123136971206937655774298738779550698805910337875641442372339894456206613255238990884565311949799970477879297442555849971252841585525972811471976267764982657884091589068717885695181900295618889904733516353415705625438933554949590201200946839286734881295023743820092304720382568049049589590535044615643011785462857098062013066287417863367015472734266066935007126776586470704630605989838223611272979407005695708760336981194147612782228777755733765437504327754292749815033926133351976649404026525470598019882628387638211922936172737116400714646520086058270288804156105079
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd44bfa866505244e75b92c021a4c02e7707ca20
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.peopleadmin.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.talentedk12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pastaging.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.pastaging.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016714b237250000040300483046022100d8009b3bfc5a40a8bc95ad32c56e79640e255870966a971dbfa54e39c9589f34022100afc8814de12d8499e3c90e6c973a464dd1f6f50805b0c4202bd6d28eaf432e540075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016714b237c5000004030046304402200b976bcb2afce0388201c8324088e29baafa2914eb744979bfaaa09c43040cbe022027b707953fd3da7da73b60ad0c35f2f81fabf6f08e34a4c11bab1825f6d99e94
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008ec348d5fdbbdc75096d711fc658e88a535ee8088e44ff53163db1d7a2e87b6c8afd2dec7bf3efde20b24dfbb409aa3f955b35737c0028b614ae5a1caf7eb67b872307b3825faf0c874f9adf04f430337e9a27ebcc487a30f11a95707db1bdeefb8fd4ed176e05b98b244aeb7c5a0ed02407dfb1c1b0f523efb07dafc668daf34687558e0ff60736d0414c6175b11e24e0a9c2ec01caa3b92ada1bd7c15d3b190e1399ef9ec0e4dcc32bf75837c49fa75fcb3c46a6b4a4182c8e79cddfc9b35ac2755301b243fd1c85849e67725065316db146569f78f3d37ef15bd4f8cfdacd08001da9f9fe427369c0f8fd5d16017be0a2e59c61f0b3b357a001f9d35f5f32