acs.newsint.co.uk

- News UK and Ireland Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 09:a6:b1:43:92:30:12:00:c9:e0:26:d3:22:7a:27:9a was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

News UK and Ireland Limited

Organization: News UK and Ireland Limited
Organization unit: PROD_ACS
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:a6:b1:43:92:30:12:00:c9:e0:26:d3:22:7a:27:9a
Serial Number (int): 12828568580610683934247226736578799514
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 3f:1a:91:2d:0e:df:52:c4:8f:84:b8:95:77:a3:a6:54:5d:74:a4:8d
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 85:c4:1a:d4:fe:ff:51:83:09:f4:e9:2d:8a:84:f5:25:d2:af:be:1f
Fingerprint (sha256): 06:97:07:41:a8:17:55:00:33:67:92:52:e6:04:b1:f4:31:76:d4:01:ec:33:3d:37:79:0f:cb:9a:53:35:49:9a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate acs.newsint.co.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acs.newsint.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acs.newsint.co.uk
login.thetimes.co.uk
login.the-tls.co.uk
api.news.co.uk
login.timesmembership.com
login.0x69416d.co.uk
login.thesun.co.uk
login.thesun.ie
login.thesundaytimes.co.uk
capi.newsint.co.uk
login.thescottishsun.co.uk
login.mytimesplus.co.uk
login.dreamteamfc.com
login.page3.com

Other certificates including the domain name newsint.co.uk

(limited to 100 certificates)
remote.newsint.co.uk
newserpqas.newsint.co.uk
pim.newsint.co.uk
feeds.newsint.co.uk
ref.newsint.co.uk
newseccqas.newsint.co.uk
acs.newsint.co.uk
acs.newsint.co.uk
wfh.newsint.co.uk
training-xchange.newsint.co.uk
*.dev.nukcdn.com
pvlomspac03-pim.newsint.co.uk
datafeeds.newsint.co.uk
*.newsint.co.uk
wfh.newsint.co.uk
acs-staging.newsint.co.uk
capi-dev.newsint.co.uk
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
feeds.newsint.co.uk
newseccdev.newsint.co.uk
feeds.newsint.co.uk
*.dev.nukcdn.com
iam.wpng.newsint.co.uk
join.newsint.co.uk
newsint.co.uk
diy.newsint.co.uk
remote.newsint.co.uk
acs.newsint.co.uk
ref.newsint.co.uk
ref.newsint.co.uk
*.stag.nukcdn.com
acs-staging.newsint.co.uk
acs-staging.newsint.co.uk
newserpqasec.newsint.co.uk
join.newsint.co.uk
mogel.newsint.co.uk
feeds.newsint.co.uk
acs.newsint.co.uk
acs-staging.newsint.co.uk
newsportal.newsint.co.uk
newsecc.newsint.co.uk
*.dev.nukcdn.com
adfs1.auth.newsint.co.uk
newserpqasec.newsint.co.uk
*.dev.nukcdn.com
newserpqasec.newsint.co.uk
join.newsint.co.uk
www.newsint.co.uk
stg-chp.newsint.co.uk
www.advertising.newsint.co.uk
www.advertising.newsint.co.uk
remote.newsint.co.uk
newsportalqas.newsint.co.uk
tvlolxaise01.newsint.co.uk
join.newsint.co.uk
tvlolxaise02.newsint.co.uk
secure.newsint.co.uk
acs-staging.newsint.co.uk
chef-prod.newsint.co.uk
acs-staging.newsint.co.uk
*.newsint.co.uk
pim.newsint.co.uk
remote.newsint.co.uk
pvlolxpisn04.newsint.co.uk
*.dev.nukcdn.com
*.nukcdn.com
newserpdev.newsint.co.uk
pvlolxpisn06.newsint.co.uk
join.newsint.co.uk
crmso-staging.newsint.co.uk
*.dev.nukcdn.com
acs.newsint.co.uk
*.newsint.co.uk
ak-crmso-hotfix.se.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
newsportaldev.newsint.co.uk
newskey.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
acs.newsint.co.uk
afp.newsint.co.uk
newseccqas.newsint.co.uk
newserpqasec.newsint.co.uk
feeds.newsint.co.uk
newseccdev.newsint.co.uk
crmso.newsint.co.uk
ref.newsint.co.uk
mogel.dev.newsint.co.uk
acs.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
newserp.newsint.co.uk
acs.newsint.co.uk
chefauto-prod.newsint.co.uk
*.dev.nukcdn.com
join.newsint.co.uk
newserpdevec.newsint.co.uk

Certificate

The complete raw certificate details for acs.newsint.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOVgY3l3aNRctOr+RAAR
Q9mEP2hoA5YSPT7eQX/SCdee1T6wybqh1TjMb217+ZH2wA4X4jTV5I7fvUKhjCYs
oc0ldido4bO3tgVEJXpKGeGHT7RVNoy8pdaIohGjideK97VlRjem3c9S3eQTMYJy
kIr19wyQ63PhAtxAqYCAnAZyIPtuyJ1Zas+B8mhSJSg31h1t2asaVbJQKTtSJCrf
g28xthUwVWndQW6dETC7x7ijQHqGpEa6aU70GemxNOOcUG87NUNbmDk7w7UfHKLB
RtAvtrUKpPxCMFXiYvtWOBp4uKn72wvaBtnQK5G4YhRxxktHuiROdbyknxA412N9
awIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12828568580610683934247226736578799514
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-20 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'News UK and Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PROD_ACS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acs.newsint.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20816191791049526346096368427134343120147537563004999851676619377921099126163179310864503315569523495076133342450757132971417034976804279774346788569683883721803287843477432396241993728611116053251612736662374120735960330067178863607811045226108528837761693217668612711024878048778752213999245701710847867694139303183373716584824058319150348565677394320291642410471983741374755647114713322501996175750576887084141559550101569070903613937208045136653496737478574039339029740718587055009772121197967855746250712264166440666488994420213901474488626328440617406065880485344506134755222459701144639708597480029052056337771
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3f1a912d0edf52c48f84b89577a3a6545d74a48d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.the-tls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.timesmembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.0x69416d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesundaytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dreamteamfc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.page3.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001637ca4253c0000040300473045022100b8124831a89acad26195952402f237a1053651b74d1d24458853a05608d63b6a02201c29aa2972a2a3485c48af69df75b3573578129c555d97bbd700916fc0d4b7070075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001637ca426fb000004030046304402200d990fa13bec58e05842c53b213c12dbfa386d425808151ebe15fdf745ac334302207a68f06e54c03dd97e734ebfab1f88a98dd4c39c2874a9e355edc2ec09537b8f
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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