adfs.dpisd.org

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 06:1d:dd:8f:d0:eb:82:3c:0d:77:7d:c3:5d:6a:8d:39 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=adfs.dpisd.org

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:1d:dd:8f:d0:eb:82:3c:0d:77:7d:c3:5d:6a:8d:39
Serial Number (int): 8130438390414246423481207124570836281
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: b5:80:d0:b1:9a:65:54:40:00:bb:4a:42:88:70:0e:71:e1:49:eb:fc
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): d9:2e:a3:0f:29:b2:79:72:70:d4:03:9f:a5:0e:56:bf:44:8e:3b:b5
Fingerprint (sha256): 0a:42:65:8a:77:52:49:d4:51:76:7c:06:25:72:c2:19:ef:6c:1e:b4:71:ce:af:70:53:2c:7c:13:b6:9d:7e:d2

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate adfs.dpisd.org

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for adfs.dpisd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

adfs.dpisd.org
uhura.dpisd.org
kirk.dpisd.org
spock.dpisd.org

Other certificates including the domain name dpisd.org

(limited to 100 certificates)
cppm.dpisd.org
admin.bjh.dpisd.org
cppm.dpisd.org
adfs.dpisd.org
www.dpisd.org
skyward.dpisd.org
hrserv.dpisd.org
admin.dpjh.dpisd.org
mail.dpisd.org
cppm.dpisd.org
dpselfserve.dpisd.org
dpisd.org
sc.dpisd.org
schoolobjects.dpisd.org
*.dpisd.org
dpjh.dpisd.org
webmail.dpisd.org
*.dpisd.org
www.dpisd.org
casper.dpisd.org
webmail.dpisd.org
admin.ce.dpisd.org
adfs.dpisd.org
adfs.dpisd.org
www.dpisd.org
portal.dpisd.org
skyward.dpisd.org
dpisd.org
casper.dpisd.org
admin.nc.dpisd.org
dpselfserve.dpisd.org
www.dpisd.org
www.sanmiguelcristorey.org
dwjh.dpisd.org
dwe.dpisd.org
ecc.dpisd.org
dpisd.org
hrserv.dpisd.org
admin.bjh.dpisd.org
dpisd.org
*.dpisd.org
dpe.dpisd.org
admin.painesville-city.k12.oh.us
daep.dpisd.org
admin.dpisd.org
www3.dpisd.org
*.dpisd.org
dpisd.org
admin.bjh.dpisd.org
dplibrary.dpisd.org
admin.bjh.dpisd.org
adfs.dpisd.org
adfs.dpisd.org
dpisd.org
bjh.dpisd.org
dplibrary.dpisd.org
dpisd.org
www.dpisd.org
www.dpisd.org
tyler.dpisd.org
mail.dpisd.org
webmail.dpisd.org
admin.bjh.dpisd.org
dpisd.org
office.dpisd.org
vpn.dpisd.org
*.dpisd.org
dpisd.org
casper.dpisd.org
webmail.dpisd.org
casper.dpisd.org
skyward.dpisd.org
admin.pwe.dpisd.org
admin.de.dpisd.org
admin.goliadisd.org
dpisd.org
chestnut.painesville-city.k12.oh.us
dwjh.dpisd.org

Certificate

The complete raw certificate details for adfs.dpisd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIQBh3dj9DrgjwNd33DXWqNOTANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODAzMjYwMDAwMDBaFw0yMDA2MjQxMjAwMDBaMBkxFzAVBgNVBAMTDmFkZnMu
ZHBpc2Qub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDmv4Vm5
QtzwTYh8sG0+vWMe3U1Srn7IugRC4ZC4OfnlFJYxFjJdODA5EIpIwxaVKwIFVK/u
VVg/nJXIysU8INfo3ID5NFYgsxzWRM3U0WF/ioZokTm7O4PP1z3b5pxLCPFrSLzV
Kb9Sm/JPplr7++FUCAmuiVMYnRKAGAHcZ0JO02LGxHg3ynKLCjQN27D/bBsssr7U
QZ88R1XEt6/45/mUTWP28hzUMNU3Fsx1lEX8YOqo2IAunY4Yi/1JrhWUZ5QAreaF
Th3dSHn7LwvAhBBrQlHk1GxFgOr1uF/xYKkKQI9iMFs8f5lIQZOqXWnTAMeknr8W
GjMhXm1fjuEfhwIDAQABo4IDVDCCA1AwHwYDVR0jBBgwFoAUkFj/sJx1qFFUd7Ht
8qNDFjiebMUwHQYDVR0OBBYEFLWA0LGaZVRAALtKQohwDnHhSev8MEsGA1UdEQRE
MEKCDmFkZnMuZHBpc2Qub3Jngg91aHVyYS5kcGlzZC5vcmeCDmtpcmsuZHBpc2Qu
b3Jngg9zcG9jay5kcGlzZC5vcmcwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG
CCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2Rw
Lmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3
BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQu
Y29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpo
dHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2Nh
Y2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRME
AjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdwCkuQmQtBhYFIe7E6LMZ3AK
PDWYBPkb37jjd80OyA3cEAAAAWJjOh9pAAAEAwBIMEYCIQCkks2D7tAUs0gvgXEb
+3OzUQsG7F28GUAnZ5Ij7KxqZQIhAP1dwMr+7kLwIyKgUqcw1/kgfUBZb5iSnkVk
7xem4wQ6AHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFiYzog
3AAABAMARzBFAiEA8SJF030+AfnKY70/G9YrrVkuDH95XZ7eit8s4qcDh3QCIAUB
/7hM1FdbMwfvtxpBCG4ePwNAINVIEL2zd9i3IsNnAHcAu9nfvB+KcbWTlCOXqpJ7
RzhXlQqrUugakJZkNo4e0YUAAAFiYzogpAAABAMASDBGAiEAntseO8W3qntj9c1I
JuRR4Y7Vk/MbozX9VNgpX9yu5SgCIQDuC4bjxB2sOt9BjfstAYIdfrw256yW/dkG
2rSY6Q3QdjANBgkqhkiG9w0BAQsFAAOCAQEAGx3p42KKm+6pR7rl26NzVinsSH5j
KDkujizwN+j8g2n8oFSpt3h1+HNYcqgFht6OkOnRKM8YmDSXQN+wqoeOmX12BSqT
Hjx0JMpEfffoIMmbIZSC0vbiXk3GANbBxwuiv7TMoNBSZ5HwwF8pd39/LT+C5XBC
L38g73GaIMlZPWONFGj0l5SNIRyxEH6gRTjOPw6jifkce4mRZtdwkErAHOFf2vl0
/hQ+5ewY8yFOPSqDGiSv1yCvod02lqNi53hmU0BhN6/lGVyQFrZVYyfTKHw99mVv
G9tjhejZJ8zygBfm87b46HqnJ4MW+jsqWJsus+hEMLaM+Iuzdw9nRMT01A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDmv4Vm5QtzwTYh8sG0+
vWMe3U1Srn7IugRC4ZC4OfnlFJYxFjJdODA5EIpIwxaVKwIFVK/uVVg/nJXIysU8
INfo3ID5NFYgsxzWRM3U0WF/ioZokTm7O4PP1z3b5pxLCPFrSLzVKb9Sm/JPplr7
++FUCAmuiVMYnRKAGAHcZ0JO02LGxHg3ynKLCjQN27D/bBsssr7UQZ88R1XEt6/4
5/mUTWP28hzUMNU3Fsx1lEX8YOqo2IAunY4Yi/1JrhWUZ5QAreaFTh3dSHn7LwvA
hBBrQlHk1GxFgOr1uF/xYKkKQI9iMFs8f5lIQZOqXWnTAMeknr8WGjMhXm1fjuEf
hwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8130438390414246423481207124570836281
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'adfs.dpisd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 16691902791376346345513932031810575775107266458826615752805162223294683972989279134325027021343888316508278030213023372315916860143410710186258073931975462748031864106299665669878836666497050833724660745807778248203277371724515493502490661726200106819337648164374827786997801593463054434724595467963847313117702771810423117091056582085458920669517152437481049538303079042820786799929539625323687668559216174875432665228356084295967125252663566161573575047512385139805122741421502810294387645339327133058425995391786213484382621301388674732510483421912652693446125172745831341807940000784698993732678559486868031872903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b580d0b19a65544000bb4a4288700e71e149ebfc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adfs.dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'uhura.dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kirk.dpisd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spock.dpisd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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