www.humanamarketpoint.com

- Humana Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 48:ea:14:99:8b:e3:85:0c:00:00:00:00:50:f3:39:e4 was issued on by Entrust, Inc..

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Humana Inc.

Organization: Humana Inc.
Organization unit: HUM
State / Province: Kentucky
Locality: Louisville
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 48:ea:14:99:8b:e3:85:0c:00:00:00:00:50:f3:39:e4
Serial Number (int): 96919830974805501052325011162561460708
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0a:c0:ad:f7:e3:29:ec:8b:7e:61:ce:29:80:28:37:a4:90:a1:11:63
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9a:7f:e7:80:f6:ac:ee:f9:7d:dd:f1:1d:d9:5e:7a:83:d7:04:dc:94
Fingerprint (sha256): 0a:54:02:e7:3c:21:f4:b6:e4:da:07:ad:0c:df:4f:bb:86:3a:d0:a7:f0:5a:fb:b9:f0:4e:60:a8:b6:28:54:a1

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.humanamarketpoint.com

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.humanamarketpoint.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.humanamarketpoint.com
moxie1.humana-military.com
medcoaching.humana.com
pws.careplus-hp.com
ebi.humana-military.com
eir.humana-veterans.com
wkdgcomm.humana.com
our.humana.com
eir.humana-military.com
moxie4.humana-military.com
ecaservices.humana-military.com
mail.onlinesecuremail.com
myhealthinformation.fromyourdoctorsoffice.com
www.humanamemberassistanceprogram.com
moxie3.humana-military.com
www.humanafoundation.org
www.saia.infonowweb.com
www.careplushealthplans.com
sales.humana.com
www.marketplace.humana.com

Other certificates including the domain name humanamarketpoint.com

(limited to 100 certificates)
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
s3.humana.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com
www.humanamarketpoint.com

Certificate

The complete raw certificate details for www.humanamarketpoint.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5i5+EeITK/aJBBFwSbTz
MVJqw8UTC+rugmL8wN+dwOo8GO1rn44z5ZDa2TcFe3UarsJqEK+QhfpQH4GtCueF
yUxOlDqjb4QVUUB2IIBx1sMvJSpxeSPXncRYw0skwJVt72Zmv+VqwU2aBmRCiVdg
FMUThS0YMETrYfRIbEE50edo3EWcfB6GZi9tdLXpUCCdJAh2rc6zAZcqlrlEzkWY
Uybp5O4eRzmgTTMRkCav3aCOI/qD+c7xPgBiAsbEhTScl83bOAnr0FkrwNUyv4Ax
ouwNDK/pZtgttcJ/6wUGvQHqjxtiUeCjduvAsDhK5vo8QRaAIysZlRIYqCoXmnco
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 96919830974805501052325011162561460708
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-18 13:08:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-18 13:38:27 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kentucky'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Louisville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Humana Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HUM'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.humanamarketpoint.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29057736428878569077555686012646647322962453202241748348034386739985193514691035434846295329167859318194743431338521914351537078217046940393736508973227485234690428633227092055699107566528791879923822202558828755690063043646393291365288351827156499093543293560040896427384392323195799820686394278917047100048186614570130217135991034416577669359361746618000888769773795935459647464926080532885765113187218894223141014601894700561363697299241684826426778463580157738407514594741110751112409251489419974384034334213772114543504816719177424642104147643368914786068745574999711169133515303139232400373065825119671332317343
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (544 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanamarketpoint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie1.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'medcoaching.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pws.careplus-hp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ebi.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eir.humana-veterans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wkdgcomm.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'our.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eir.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie4.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecaservices.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.onlinesecuremail.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myhealthinformation.fromyourdoctorsoffice.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanamemberassistanceprogram.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'moxie3.humana-military.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.humanafoundation.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.saia.infonowweb.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careplushealthplans.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sales.humana.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.marketplace.humana.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							01670075005ea773f9df56c0e7b536487dd049e0327a919a0c84a1121284187596817145580000016b6acf7835000004030046304402206bb64c0911763e1568c97b3051ff300bc610ea0efcc8554d2d8b2b8cc3f8a4a502206014952dff7beac9305cbbb5c32bd4f06e9c11cf772a92082872efd922ba556c0077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016b6acf78970000040300483046022100e09b8d5b2a0c142fc9d03ba84074f88a58c140f7a23422f084bfd9ddae5f2359022100b8a1bdb86997e31e20e34b58609b3e865b3e69bb1df65352f597878e31db7eba007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016b6acf783c000004030046304402202306730f7917ae9536d165a6da7738519b5325f7d33220588c6a91ecd21611040220777ac7137ee5244e0e3d3c72df307c6b66a13f5bbbaeed71b74afdf133e0a480
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0ac0adf7e329ec8b7e61ce29802837a490a11163
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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