bi-webpdext-pd.travelers.com

- The Travelers Companies Inc -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 85:e6:04:06:c7:14:09:e3:00:00:00:00:54:cd:e9:57 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

The Travelers Companies Inc

Company registration number: 12-AA
Organization: The Travelers Companies Inc
State / Province: Connecticut
Locality: Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 85:e6:04:06:c7:14:09:e3:00:00:00:00:54:cd:e9:57
Serial Number (int): 177981633383475953302585286343298771287
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: dc:33:ef:de:9c:a4:e4:9f:8a:9f:39:06:98:06:5c:55:f7:94:2f:51
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 9a:a9:85:57:56:4e:94:06:b4:a1:58:51:13:3c:9c:9e:1a:24:53:51
Fingerprint (sha256): 07:d0:c5:28:f6:14:f9:17:18:0a:c7:7e:dd:9a:7e:06:b3:63:94:7b:d3:5a:16:4c:bb:51:16:bb:15:2a:bc:a6

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate bi-webpdext-pd.travelers.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bi-webpdext-pd.travelers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bi-webpdext-pd.travelers.com

Other certificates including the domain name travelers.com

(limited to 100 certificates)
travelers.com
rmisui-qa.travelers.com
agent-qa.travelers.com
uat3-selfservice.dev.travelers.com
secureamp.travelers.com
mylogon.travelers.com
biepwjas.travelers.com
rmdquote.travelers.com
eclaimreporting.travelers.com
secure.travelers.com
riskcontrol.travelers.com
piepwjas.travelers.com
careers.travelers.com
agencyonboarding-status.travelers.com
lyftclaim-auth.travelers.com
federationcert-mo.travelers.com
piwas-qa.travelers.com
foragents.travelers.com
piwas-qa.travelers.com
businessinsured-api-auth.travelers.com
cat-acct-uw-pricing-dev2-test-harness.travelers.com
thirdpartyclaim-api-auth.travelers.com
employees.travelers.com
umumedia.travelers.com
epw.travelers.com
timetrak.travelers.com
appsmytpi.travelers.com
bondservices.qa.travelers.com
claimregistration.travelers.com
printselection.travelers.com
pdfweb.travelers.com
bi-agclaar.travelers.com
bi-digital-assessment-ui-auth.travelers.com
bi-customize-quote-pt-auth.travelers.com
thirdpartymedical-api-mo-auth.travelers.com
paymentcontainer.dr.travelers.com
qaagentauth.travelers.com
qavendorregistration.travelers.com
xapi-router-service-dev.dev.travelers.com
akamai-san69.exacttarget.com
accessclaim.travelers.com
mi.travelers.com
bi-webpdext-pt.travelers.com
iexmlepv.travelers.com
travalert.travelers.com
polarissalesforceservice-poc.dev.travelers.com
biws-pt.travelers.com
bi-guidewire-proxy-dev.travelers.com
clocp.travelers.com
bi-trvpas-pt.travelers.com
bi-platform-pt.travelers.com
autopay-cfpwzn.travelers.com
accessclaim.travelers.com
asguide.travelers.com
agenthq.travelers.com
biwas.travelers.com
voltage-pp-0000.travelers.com
myquote-mo.travelers.com
mo-edaxfilescan-auth.travelers.com
view.ems.travelers.com
www.travelers.com
rmisui.travelers.com
secureemail.travelers.com
p2p-qa.travelers.com
plgateway.travelers.com
connectwcforagents.travelers.com
epay-cl.travelers.com
subrogation-api-auth.travelers.com
servicesqa.travelers.com
agentdocs.travelers.com
socialplus.travelers.com
cct-gms-prod.travelers.com
transpnluwguide-pt-auth.travelers.com
aimmytpiregistration.travelers.com
esri-mo-ext.travelers.com
secureeft.travelers.com
epw.travelers.com
oplquote.travelers.com
piwas-qa.travelers.com
epwjas.travelers.com
securemail.travelers.com
egeico.travelers.com
apps.travelers.com
premiumauditreg.travelers.com
biwas-pt.travelers.com
internal.learning.dev2.travelers.com
pt-iexml.travelers.com
boa.travelers.com
qafederatedsso.travelers.com
sfscgateway-proxy-ext-mo-auth.travelers.com
esignws.dev.travelers.com
plagt.travelers.com
bi-webpdext-pd.travelers.com
pijas-ocf.travelers.com
www.travelers.com
equote.travelers.com
vendorregistration.travelers.com
mytbiconversion-auth.travelers.com
api-qa.travelers.com
p2p.travelers.com

Certificate

The complete raw certificate details for bi-webpdext-pd.travelers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDjQze6gM53JcbEf/ywX
ETtuUdKaRWVCAD4BsqLUfN8Ox2OLy7/DvF+Hmvko1x9EEyZbp4WNKLuSpZFT3N8B
Oq6snXeXq6PzOybAYSEydCRJzcbftAm75kbzpGR5Oqz3VQO/IOy6psCY98KDFHzZ
7gt6ZokJFd20b87Z4bfjisLEZnXpF6FBJ9HdmepE3Ao9bA2vhzZpT4aDQPg8Jjnl
y/gKQGUtk6ShErnEkwkL1Neds8MdSSgGqzHjeDFBdq/ybbBaJlsAgmCsz3SiGbye
QSJNb3b7fqOAHC9IEOvQC2g6nueG2JofyKFN+jcxPw9iUoMC2H+iZIeB4OB5Mata
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 177981633383475953302585286343298771287
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-22 16:21:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-22 16:51:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Minnesota'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Travelers Companies Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '12-AA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bi-webpdext-pd.travelers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24770724610755104365510202598050004270855806507412157220935793463456153121581071527306543900361353415243257989116382807294026693965206416738807403769047043992075961879680943566965523946686069682738825729879257230091966163101021570951502746002996348632995441528176367280713281544247052712194664756796877557524473091083984762557894137547999060038609522099176816347580907463041334740012462226692897191713477457694833976212874578483703283071846668962789008678811680535660714130126699128974484576993368577056813825107585353510140273476523370578282877796466541335268481094531089352487763934795293502408216796968604498876987
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bi-webpdext-pd.travelers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dc33efde9ca4e49f8a9f390698065c55f7942f51
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0086ab5461b10bc8609ce26029930fe0b67b4a338360136af94a879d44bdf416c12ea5897c13951efa8e056be919956615c723036fdb3f412cd89722d3eeb1a812dcd2271264e245fc196cf74ffe34fa2688bc41256ecc4440b1003493aeb52b6c62443699ff454130c5d0a0014b5f1cb4537526e3de78b0e8fb350c41157c978a5389cc12a19dc1b53c76e8d1bfcee8e698b40ac530bf853019c0a45352827b9344c9d5ac8f0c508d771cec1eedd0bc733bd473439b4c934a3f63de2dfb86151b5fa8e888885d618e9ed454b5a71063e9da9a35b1e69bc977917223128f4d5971c099dc45a4f8160d043e730b27c4dff3f5cccb5a7cff318e5c7e205fb7565ce1