qsnaapy.otiselevator.com

- Otis -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 5a:d1:3c:3d:81:49:1c:53:00:00:00:00:50:f9:b4:a9 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Otis

Organization: Otis
Organization unit: United Technologies
State / Province: Connecticut
Locality: East Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5a:d1:3c:3d:81:49:1c:53:00:00:00:00:50:f9:b4:a9
Serial Number (int): 120716931481582291615182199463863760041
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: d5:a6:ad:a6:c9:a6:48:30:d1:ef:13:58:dd:a8:fb:9d:30:c5:d3:b3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 03:c8:61:a0:49:27:db:3b:92:26:d6:e2:28:c4:bb:7c:34:f5:6a:43
Fingerprint (sha256): 09:cb:00:fe:2c:28:2c:24:e1:7f:57:42:af:a2:2a:53:ef:48:de:56:05:44:67:11:f4:d3:11:f1:6b:88:22:63

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate qsnaapy.otiselevator.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qsnaapy.otiselevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qsnaapy.otiselevator.com

Other certificates including the domain name otiselevator.com

(limited to 100 certificates)
cms-naa-stag.otiselevator.com
ceros2.map.fastly.net
oxp-apac-oft.otiselevator.com
oxp-emea-oft.otiselevator.com
diagnostics-emea-stag.otiselevator.com
cpconfigservice-api-naa-stag.otiselevator.com
eServiceAPI.QA.otiselevator.com
oxp-apac-stag.otiselevator.com
*.dev.otisone.otiselevator.com
oxp-naa.otiselevator.com
GlobalMobilenl-stg.otiselevator.com
otis-iot-stg.otiselevator.com
*.otiselevator.com
auth-api-naa-stag.otiselevator.com
oxpr-apac.otiselevator.com
ceros2.map.fastly.net
qswhqpy.otiselevator.com
reachsurvey.otiselevator.com
datapipeline-emea-oft.otiselevator.com
oxpr-emea-oft.otiselevator.com
gds1.otiselevator.com
diagnostics-naa.otiselevator.com
oxp.otiselevator.com
developers.qa.otiselevator.com
gds2.otiselevator.com
qsnaapy.otiselevator.com
GlobalMobileOtisFR-STG.otiselevator.com
cv-chn.otiselevator.com
fc-naa-stag.otiselevator.com
diagnostics-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
cv-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
*.dlrgroup.com
ota-mm-stg-apac.otiselevator.com
rtv.otiselevator.com
oxp-chn.otiselevator.com
diagnostics-naa.otiselevator.com
ceros2.map.fastly.net
voiceotisline-naa-stag.otiselevator.com
GlobalMobilenl-Devqc.otiselevator.com
oxpr-emea-oft.otiselevator.com
datapipeline-chn-keycloak.otiselevator.com
diagnostics-emea-stag.otiselevator.com
gdsemda006.otiselevator.com
otis-iot-qa.otiselevator.com
ruTTA-prd.otiselevator.com
campusview-emea-stag.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
cms-naa.otiselevator.com
diagnostics-apac-stag.otiselevator.com
smartservice-api-apac-stag.otiselevator.com
connect-api-apac.otiselevator.com
cloudservice-naa.otiselevator.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
bitbucket.otiselevator.com
brandhub.stage.otiselevator.com
globalmobileotisUKtkitapp-prd.otiselevator.com
ruTTA-stg.otiselevator.com
decisions-dev-int.otiselevator.com
cms-apac-stag.otiselevator.com
qlikcrmEMEAstage.otiselevator.com
deviceportal-naa-stag.otiselevator.com
GlobalMobileNL-PRD.otiselevator.com
globalmobileotisauttkitapp-prd.otiselevator.com
deviceportal-apac.otiselevator.com
oxpr-qa.otiselevator.com
cv-emea-stag.otiselevator.com
ceros2.map.fastly.net
decisions-emea.otiselevator.com
gds1.otiselevator.com
oap-emea.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
oxp-emea.otiselevator.com
hipchat.otiselevator.com
cms-naa-stag.otiselevator.com
oxpr-emea.otiselevator.com
jira.otiselevator.com
oxp-naa-stag.otiselevator.com
oap-emea.otiselevator.com
ceros2.map.fastly.net
oxpr-apac-oft.otiselevator.com
remrda.otiselevator.com
cv-apac-stag.otiselevator.com
globalmobileotisEStkitapp-prd.otiselevator.com
ceros2.map.fastly.net
apip-devloper-dev.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
Decisions-dev.otiselevator.com
oxpr-qa.otiselevator.com
developer-studio-dev-emea.otiselevator.com
LinePulseMagentoUAT.otiselevator.com
cv-apac.otiselevator.com
datapipeline-chn-oft.otiselevator.com
ceros2.map.fastly.net
developer-studio-dev-naa.otiselevator.com
datapipeline-apac.otiselevator.com
deviceportal-naa-stag.otiselevator.com

Certificate

The complete raw certificate details for qsnaapy.otiselevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnaVYdcnAYI/tv3eZmLcd
NSw0g4K+5Le7UTQDNx4RZusCYZWG74zjbE1O2CDFw0zbWLjfLFRzSO8ifvrAP9OM
S5OlxDqF4v+G6lnWsueGaKk3fZd83OLJqL6nDhmHoD0elDEp6iwAAIRplVD295jD
+Ef5eD0J466qz54WIYvMwJ+3SJ4spwVG4rlnPI1U7yPL8pQX+ECLFxc48bLTk9gt
md1HvF8ZSPEkNdiEq3NfWTB125WN3Ire7G88FDBhcCu1RAouuI/ji0uTOOb4MVRA
lOYKiIdOeH1M5n6EN2a3MFHr7XZbR3FpN1eBCTLBifTvOtZIG+oUaRfPEOCKlzfF
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 120716931481582291615182199463863760041
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-06 13:04:41 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-05 13:34:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Otis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qsnaapy.otiselevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19900948807895021809660454329520633679093730392874168621898174724364848750195866487003246863281214934926668638729509846054815589374004137423778244971285436539082200740062972570841836340647690706706978582517367812799864818998325532390139927959762744421360994862428442700664841783533085514134383892945586995937831080956178511362628718253755430699525975150875573831291636128564359193959380915717914348494786071075587145755974952778756899289540973137321032476173093848484699610190129291423562399427698208313665402161093383018120827603191094650203631865188807574088258542334476224099807102834421017283548893107153677043099
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qsnaapy.otiselevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d5a6ada6c9a64830d1ef1358dda8fb9d30c5d3b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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