FEF.cnpasu01.manage.microsoftonline.cn

- Shanghai Blue Cloud Technology Co., Ltd. -

Issued by DigiCert Basic RSA CN CA G2

About this certificate

This digital certificate with serial number 03:e2:f9:34:99:5d:07:1d:ca:b0:0d:7a:d9:4a:21:b4 was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Shanghai Blue Cloud Technology Co., Ltd.

Organization: Shanghai Blue Cloud Technology Co., Ltd.
State / Province: Shanghai
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 03:e2:f9:34:99:5d:07:1d:ca:b0:0d:7a:d9:4a:21:b4
Serial Number (int): 5166197564703048880456533747178283444
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: c9:0d:b1:fc:68:d8:a8:01:f6:c0:ab:c0:eb:22:2b:44:e8:62:4e:54
AuthorityKeyId: 06:bd:a6:9b:60:79:50:31:be:d5:a9:02:4a:a0:d0:95:53:8b:2f:34

Fingerprint (sha1): 24:d0:25:0e:73:52:ee:74:45:09:8a:b5:73:28:6b:de:91:b2:8f:2e
Fingerprint (sha256): 06:f0:37:00:30:48:6f:2e:48:dd:f1:46:22:63:5f:75:47:72:c0:ca:78:2c:4a:92:d9:3c:6a:5b:b0:3c:20:1b

Issuing Certificate URL: http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.cn
CRL Distribution Point: http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl

Check the revocation status for certificate FEF.cnpasu01.manage.microsoftonline.cn

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for FEF.cnpasu01.manage.microsoftonline.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

FEF.cnpasu01.manage.microsoftonline.cn
FEF.manage.microsoftonline.cn
Enrollment.manage.microsoftonline.cn
EnterpriseEnrollment-s.manage.microsoftonline.cn
EnterpriseEnrollment.manage.microsoftonline.cn
EnterpriseEnrollment-test.manage.microsoftonline.cn

Other certificates including the domain name microsoftonline.cn

(limited to 100 certificates)
IntuneDeviceUnlockAADSP.manage-ppe.microsoftonline.cn
acmsportal.infra.teams.microsoftonline.cn
usage.cp.microsoftonline.cn
acms.infra.teams.microsoftonline.cn
suite.partner.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
Portal.chinanorth2.manage-ppe.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
mam.manage.microsoftonline.cn
adminwebservice.partner.microsoftonline.cn
test.microsoftonline.cn
msm-int-provision.partner.microsoftonline.cn
dms.partner.microsoftonline.cn
mambackendsp.mam.manage-ppe.microsoftonline.cn
msm.partner.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
JwtTokenSigning.manage.microsoftonline.cn
toolsclient.cp.partner.microsoftonline.cn
mosiot.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
IntuneServiceDiscoveryAADSP.manage.microsoftonline.cn
signupprd.partner.microsoftonline.cn
LogManagerService.manage.microsoftonline.cn
ocpmonitor.partner.microsoftonline.cn
onboarding-stx.partner.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
dmsreadaccess.partner.microsoftonline.cn
dev.login.partner.microsoftonline.cn
becread.partner.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
aadg.chinacloudapi.cn
mospop.partner.microsoftonline.cn
provisioningapi.partner.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
AdminWebService.partner.microsoftonline.cn
companymanager.partner.microsoftonline.cn
*.iga.azure.cn
client.kst.cp.partner.microsoftonline.cn
mygroups.microsoftonline.cn
CompanyManager.partner.microsoftonline.cn
myapplications.microsoftonline.cn
myoffer365elf.partner.microsoftonline.cn
HeadSecurityTokenServiceForOAuth.manage.microsoftonline.cn
UITailSTS.manage.microsoftonline.cn
FEF.cnpasu01.manage.microsoftonline.cn
KeyRecoveryAgent.manage-ppe.microsoftonline.cn
azurerdp.enterpriseregistration.partner.microsoftonline.cn
*.mdmrp-mooncake.msftcloudes.cn
drs.cp.partner.microsoftonline.cn
client.commercerestauthorization.partner.microsoftonline.cn
tools.cp.partner.microsoftonline.cn
api.scheduler.teams.microsoftonline.cn
Portal.manage-ppe.microsoftonline.cn
*.partner.microsoftonline.cn
bapkvsecretencryption.api.bap.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
pgw.cp.partner.microsoftonline.cn
IntuneAccountRunnermooncakeProd.manage-ppe.microsoftonline.cn
api.myapps.microsoftonline.cn
partner.partnercenter.microsoftonline.cn
FEAADCertClient.CNPASU01.manage.microsoftonline.cn
FCS1.CNBASU01.manage-ppe.microsoftonline.cn
syncservice-stx.partner.microsoftonline.cn
buildtimepackage.dummy.partner.microsoftonline.cn
docret.wh.records.infra.teams.microsoftonline.cn
aadg.chinacloudapi.cn
tdsencryt.configure.partner.microsoftonline.cn
acisclient.cnpmsua01.manage.microsoftonline.cn
XLens.manage-ppe.microsoftonline.cn
deployment.usagesyncagent.cp.microsoftonline.cn
iwazprd.partner.microsoftonline.cn
myprofile.microsoftonline.cn
SCOnlinePREncryptionCert.manage.microsoftonline.cn
companymanager.partner.microsoftonline.cn
client.commercerestentitlement.partner.microsoftonline.cn
sps-archive.cp.partner.microsoftonline.cn
spssmoketest.cp.partner.microsoftonline.cn
commerce.partner.microsoftonline.cn
aadonboardingtest.bec.microsoftonline.cn
boxshellclient.partner.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
vlp-test-client.partner.microsoftonline.cn
AdminApiService.manage.microsoftonline.cn
FCC1.CNPASU01.manage.microsoftonline.cn
aadg.chinacloudapi.cn
partner.partnercenter.microsoftonline.cn
dataagent.portal.partner.microsoftonline.cn
syncservice.partner.microsoftonline.cn
wip.mam.manage.microsoftonline.cn
GPAnalyticsStorage.manage.microsoftonline.cn
dcscheduler.partner.microsoftonline.cn
suite.partner.microsoftonline.cn
uidelegationclient.partner.microsoftonline.cn
commercepaycallback.cp.partner.microsoftonline.cn
signupprd.partner.microsoftonline.cn
DEServerAuthCert.cnpmsua01.manage.microsoftonline.cn
PcfAgent.ngpproxy.microsoftonline.cn

Certificate

The complete raw certificate details for FEF.cnpasu01.manage.microsoftonline.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bzVSDBfj0uhWrghcQd9
6WNPB8yZcqkdnR9rRbQIJs9b7ybi+mR5/N/yrzA0MUHJWqy4M+WZuO7qWOtN8oy/
rHcC6LYtfD8qriv/FodafekTTyEHBaZ7dBfT4Ll3woAY3q6mYZLcE4g/sDXvnxiw
q8ZPbANZS8dCFPhTprBel7JRn0kxIlen6Bu/TjBR+fzbgrQAVxfh9+UXphTiMXs0
yxtGLjUlZZNayDAy79rE8wmgPTVvHjiVu9Qf/1roYpxVWo0/ZPnTiNG9nRtWipTa
vyv0xx2fZ01v4cN+FsuUWeyqkyifo0MkUommd/EZhoK2o/fm5engAn44pvRO2Zng
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5166197564703048880456533747178283444
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Basic RSA CN CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-29 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shanghai Blue Cloud Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FEF.cnpasu01.manage.microsoftonline.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27991782485787319723120112088282266660293504729053717418703264019120826309116652397444043877992247456520415571071648846108271661026585430918516976594652396433790725421920267660781711042468116769964060101771603102604450837185451217614466854920850569840695566174376607680784730318329911992909980883156618925138275446487516493965773765746322576699914765941341900885890438730426054563302999367916419948736803720258782219660443842779653326918132085802726644144800792133480604832238286249205443596344127579180313549219901339321964545850503625027675864460915463668832618674375246757193638712925376362734731636541262669668493
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 06bda69b60795031bed5a9024aa0d095538b2f34
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c90db1fc68d8a801f6c0abc0eb222b44e8624e54
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (264 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FEF.cnpasu01.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FEF.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Enrollment.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EnterpriseEnrollment-s.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EnterpriseEnrollment.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'EnterpriseEnrollment-test.manage.microsoftonline.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert.cn/DigiCertBasicRSACNCAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.cn/DigiCertBasicRSACNCAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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