naturalmotion.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 07:64:d0:d0:b0:0a:c7:0a:77:3e:a6:ea:17:0d:5e:d3 was issued on by Amazon.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=naturalmotion.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:64:d0:d0:b0:0a:c7:0a:77:3e:a6:ea:17:0d:5e:d3
Serial Number (int): 9828060931485647318352998387503947475
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 10:cb:d0:6a:4a:16:95:79:90:79:bb:7c:ba:dc:17:3e:de:16:67:39
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): 3d:cc:85:3b:9b:10:7f:f3:ad:5c:ba:8a:84:dd:0e:b8:7b:71:ff:0a
Fingerprint (sha256): 08:a3:6b:bb:0a:7f:51:f9:92:05:13:01:bc:2f:b0:13:40:f7:c9:45:e5:91:19:0e:f0:47:80:f0:ff:6f:c0:01

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate naturalmotion.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for naturalmotion.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

naturalmotion.com
*.naturalmotiongames.com
naturalmotion.co.uk
naturalmotiongames.com
*.naturalmotion.co.uk
*.naturalmotion.com

Other certificates including the domain name naturalmotion.com

(limited to 100 certificates)
ssl277858.cloudflaressl.com
accessallareas.naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
files.naturalmotion.com
naturalmotion.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
jira.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
exchange.naturalmotion.com
jira.naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
accessallareas.naturalmotion.com
ssl277856.cloudflaressl.com
naturalmotion.com
ssl3087.cloudflare.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
testrail.naturalmotion.com
testrail.naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
naturalmotion.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
naturalmotion.com
accessallareas.naturalmotion.com
ssl277858.cloudflaressl.com
confluence.naturalmotion.com
ssl3087.cloudflare.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
naturalmotion.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
ssl3087.cloudflare.com
docs.naturalmotion.com
fb.naturalmotion.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl277858.cloudflaressl.com
support.naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391883.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
naturalmotion.com
ssl277858.cloudflaressl.com
ssl391881.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
ssl391883.cloudflaressl.com
ssl391881.cloudflaressl.com
naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
accessallareas.naturalmotion.com
*.naturalmotion.com
naturalmotion.com
ssl3087.cloudflare.com
ssl277858.cloudflaressl.com
ssl391882.cloudflaressl.com
ssl277858.cloudflaressl.com
ssl3087.cloudflare.com
ssl391882.cloudflaressl.com
ssl391882.cloudflaressl.com
accessallareas.naturalmotion.com

Certificate

The complete raw certificate details for naturalmotion.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIQB2TQ0LAKxwp3PqbqFw1e0zANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAxMB4XDTIzMDQyODAwMDAwMFoXDTI0MDUyNjIzNTk1OVowHDEa
MBgGA1UEAxMRbmF0dXJhbG1vdGlvbi5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCy32o52F/ikn5IhwDaEVQTnivUiXuho10U73N948cHgbuoa8Ht
0dB9l4B19AP2awsiQPhaYgcsdLJZ68nObZwYjqvTu+LAh6YSAZ8Dby+vAhrm4bVx
ssKBDEVVCjOIIOTGY1+t+NyswPVV+u2AFCWWR4/T52x1aUsx1mDXj5hIkuTEbvOt
G8uMw/O6skFdqeSCXGF23tMGH6hL2w9O5Wk1kZ6CooU43Vsu3A7p9LJt1YlHnNTi
KgI6m15clZO2tKeU1/3iCp3E3T58cN5gbpDlmpvn+V0xHGUuYcE8EYx1sePZJ/q3
y4eqHxdGVlByskgR/3JQkNyFJNZuWILLrudFAgMBAAGjggNfMIIDWzAfBgNVHSME
GDAWgBSBuA5jiokSGOX6OztQlZ/m5ZAThTAdBgNVHQ4EFgQUEMvQakoWlXmQebt8
utwXPt4WZzkwgZEGA1UdEQSBiTCBhoIRbmF0dXJhbG1vdGlvbi5jb22CGCoubmF0
dXJhbG1vdGlvbmdhbWVzLmNvbYITbmF0dXJhbG1vdGlvbi5jby51a4IWbmF0dXJh
bG1vdGlvbmdhbWVzLmNvbYIVKi5uYXR1cmFsbW90aW9uLmNvLnVrghMqLm5hdHVy
YWxtb3Rpb24uY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5yMm0wMS5h
bWF6b250cnVzdC5jb20vcjJtMDEuY3JsMBMGA1UdIAQMMAowCAYGZ4EMAQIBMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDEuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAxLmFtYXpv
bnRydXN0LmNvbS9yMm0wMS5jZXIwDAYDVR0TAQH/BAIwADCCAX0GCisGAQQB1nkC
BAIEggFtBIIBaQFnAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsA
AAGHxbFK6gAABAMARjBEAiALwCXXKfm6FkaMRsLVwTq22bQQY6J57szjO5YywKxT
fwIgS9FNjcyAnJ5pm6UetioVA5gcTHFUeaBhxFo5VnrnkzIAdQBIsONr2qZHNA/l
agL6nTDrHFIBy1bdLIHZu7+rOdiEcwAAAYfFsUspAAAEAwBGMEQCID8HbfsjIXga
cviRsyrWlmf9miHA6EZw7K5RL18DVicWAiBEkGc7giCf7yZBiN6gI8OIuUzQgsY+
0MRdaZOPvrMGFAB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAAB
h8WxSt8AAAQDAEgwRgIhAJrfkm4CFTjXtToTBN//5n+4ajFEHyW1K4qM0/0oKM+R
AiEAiseBU7MllbuB87mp6HPC+WPSFHbHSHHx7esJ0s1U59QwDQYJKoZIhvcNAQEL
BQADggEBAHncsnRP1GkeFbO8v2hZV7419QmcG9Fxwjk6z2IhPKFKbOX6sNeL/5yM
m2IlUk17HZtqLVCSJLeka1GRvuIntcGI0VkLwzf0qDNMXJGB6DAzT4bVXp8LrJTm
0IJgs7w8C0J8FWCucnJ/5WHqOFwUgotteMPsMAP+pLcaw3qRdHf6WHr1wVDb2a6F
to3f1F+egeeTlCPq669oQaIVnLDESCPpPOEVutS8tXxn7zXT8KgNqCE9iBXDGVAy
H8t5uGMCHDLQ1x/zHCMj9JIGdDe92PYollIDGtxcZeIY3O7pm8djZEejNotkZcDy
QF2Gu3PSZnemlRttAlINwP0PAhjRvcs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAst9qOdhf4pJ+SIcA2hFU
E54r1Il7oaNdFO9zfePHB4G7qGvB7dHQfZeAdfQD9msLIkD4WmIHLHSyWevJzm2c
GI6r07viwIemEgGfA28vrwIa5uG1cbLCgQxFVQoziCDkxmNfrfjcrMD1VfrtgBQl
lkeP0+dsdWlLMdZg14+YSJLkxG7zrRvLjMPzurJBXankglxhdt7TBh+oS9sPTuVp
NZGegqKFON1bLtwO6fSybdWJR5zU4ioCOpteXJWTtrSnlNf94gqdxN0+fHDeYG6Q
5Zqb5/ldMRxlLmHBPBGMdbHj2Sf6t8uHqh8XRlZQcrJIEf9yUJDchSTWbliCy67n
RQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9828060931485647318352998387503947475
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-26 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'naturalmotion.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22580588299503577211614900606884858237561632636083020501297370703672061368930651245628293392620270365800361425395184990992607918526080821310662118858947401944784791425505642631919563936257055361584461085771320450118463077016800636396492767466994131933999357973265302055435196640431525774545840942864412235493707012991414310950728112631667855235075865574108762119500366021097499411289786583015863037397128118195245122318085893846257061761139715788355080881474159463078167171101381736760146268646267300826688816862857628539405882602351778148386275161047610251463900901625683626943534977815419577821257292778512176834373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							10cbd06a4a1695799079bb7cbadc173ede166739
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'naturalmotiongames.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.naturalmotion.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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