ssl.fioport.de

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:ba:c4:15:ea:40:d8:f1:66:33:74:5a:e4:c3:a0:90 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=ssl.fioport.de

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ba:c4:15:ea:40:d8:f1:66:33:74:5a:e4:c3:a0:90
Serial Number (int): 4957428291613842119412338329313845392
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 10:95:ef:18:b1:d9:fb:ce:96:38:69:e4:88:ab:74:67:7f:4b:5f:52
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): bc:fc:ee:e4:fb:d5:0e:51:d6:61:08:81:e8:d1:f3:19:1d:40:68:5e
Fingerprint (sha256): 0a:5e:c8:53:6f:b7:f8:ab:02:60:69:d0:d4:72:3f:38:0f:1d:78:c6:8a:45:95:76:4e:4b:4e:29:67:5a:0d:08

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate ssl.fioport.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssl.fioport.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssl.fioport.de

Other certificates including the domain name fioport.de

(limited to 100 certificates)
ssl.fioport.de
ssl2.fioport.de
*.fioport.de
*.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl5.fioport.de
*.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl4.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl3.fioport.de
ssl2.fioport.de
ssl5.fioport.de
ssl2.fioport.de
ssl2.fioport.de
ssl.fioport.de
ssl5.fioport.de
ssl3.fioport.de
ssl5.fioport.de
ssl.fioport.de

Certificate

The complete raw certificate details for ssl.fioport.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGoTCCBYmgAwIBAgIQA7rEFepA2PFmM3Ra5MOgkDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0xODA0MDQwMDAwMDBaFw0xODEwMTUxMjAwMDBaMBkxFzAVBgNVBAMTDnNzbC5m
aW9wb3J0LmRlMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAhcOaEKSJ
E3s0IMmZXbSUZ4OlmCuKFtDYT5PBFJxXC/iyeSnzFrAFDFRYpxjemde/3OJ4vp2R
nmqnFUo7kNWLrfBvvYq4M6tVbDo1gpJUdhDtw9q/6aoVn2lUkV3s+KnVP7UIWzd2
B8rA9OsIS30idq4QSsUz86i3ELm0Zwlc6MkffOdWlDfjpAyNXywqG7jyEVF7dTAX
Of3hCdUKVc1C+NiSseIJP3RpRKEeG24bzRYf+MTeES+L/jHUKzhXsWgzZjFiuCXx
G21807vto+9qBSKI6Ceb5hXWpwPiJXT64I1S46HN8HyK3IknI4FgcteLQXwTI3Hw
TyV0YVua610N8l5grdgumHipGrpFb/SkFUftxq95Bo7cfkaGBZsdsXPCZpdOBNTp
v6W1AAOdQSjzmMxm2J/8jC9wE0vTPx0qlc2DV1NOxf+PF7/OXqhDFzRg/VUZk9pB
xX9ng0+FFCdk2WwQK8cqNbZRMPqqSOvIDW1pe6ekCFfvtr9HVXooy94nb3YW3MPh
98Wd6O1u6Y/jCHwJfvm0IrK70rD5UfzrKeZKX2gpmyk7ZtRXxhnfLCuei5iabOwU
/IRGqeOQ5YJlKr3BAVeGX45A2IwDFlHZO3/DxK87cTdyHg4LX4LANBXjvKGxnNCs
A5ZfymFD0gOL3AJemc9GRHo7bfuefeUb23sCAwEAAaOCAp4wggKaMB8GA1UdIwQY
MBaAFKWM/jLM6w8s1BnGCLgAJIhdw8W3MB0GA1UdDgQWBBQQle8Ysdn7zpY4aeSI
q3Rnf0tfUjAZBgNVHREEEjAQgg5zc2wuZmlvcG9ydC5kZTAOBgNVHQ8BAf8EBAMC
BaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAu
oCyGKmh0dHA6Ly9jZHAudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNybDBM
BgNVHSAERTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3
dy5kaWdpY2VydC5jb20vQ1BTMAgGBmeBDAECATBwBggrBgEFBQcBAQRkMGIwJAYI
KwYBBQUHMAGGGGh0dHA6Ly9zdGF0dXMudGhhd3RlLmNvbTA6BggrBgEFBQcwAoYu
aHR0cDovL2NhY2VydHMudGhhd3RlLmNvbS9UaGF3dGVUTFNSU0FDQUcxLmNydDAJ
BgNVHRMEAjAAMIIBBAYKKwYBBAHWeQIEAgSB9QSB8gDwAHYAu9nfvB+KcbWTlCOX
qpJ7RzhXlQqrUugakJZkNo4e0YUAAAFikP52vAAABAMARzBFAiBk+b1EphpUNr4m
NxMQlDgqdbOhW5eswxAK0pJp678gZAIhAIFsQy7pIAy7p8RRkmQadJEf0wmbX5aT
GhOqOupxKKrSAHYAb1N2rDHwMRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFi
kP53KwAABAMARzBFAiEAuBh/MFz3ylF0yS3pjaH98BWEY/PVLKNSDiqV2sMCvx0C
IEx7gzeNJwm2bpA4ekMihOQkXtUJ2xV5sj7w8XsgByDJMA0GCSqGSIb3DQEBCwUA
A4IBAQB3D7QTiADfprIKmSY03EEczfhfFc+gDQXPo6Zo/hK+mZgzm6pckKqTGVqP
rXE3T0WltgtabWs7zwSUSpkQd80T9dVApgNBZU2EmV+Z/4vttaiXqoHqxqhTgClf
ZoFnwGtSZl8+CID03bJ8gGStSOCZ7BG6mubGuMCykDnmOBxUN1TXbKJFxWYm4jQG
k+DkfJX8CKYzOY2KWh2Cemu4DFXrxZwUv/BIwsruLz0c02zys1EcRw4FdT3t+j1F
DETWiZbU+IHnti0bBLInYAOzDvtxvTq9An3LIsxVo7uuzDhjBZKmKAc/COlANybh
IG7qATUen5ETirw8gPyUhPI2eB3o
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAhcOaEKSJE3s0IMmZXbSU
Z4OlmCuKFtDYT5PBFJxXC/iyeSnzFrAFDFRYpxjemde/3OJ4vp2RnmqnFUo7kNWL
rfBvvYq4M6tVbDo1gpJUdhDtw9q/6aoVn2lUkV3s+KnVP7UIWzd2B8rA9OsIS30i
dq4QSsUz86i3ELm0Zwlc6MkffOdWlDfjpAyNXywqG7jyEVF7dTAXOf3hCdUKVc1C
+NiSseIJP3RpRKEeG24bzRYf+MTeES+L/jHUKzhXsWgzZjFiuCXxG21807vto+9q
BSKI6Ceb5hXWpwPiJXT64I1S46HN8HyK3IknI4FgcteLQXwTI3HwTyV0YVua610N
8l5grdgumHipGrpFb/SkFUftxq95Bo7cfkaGBZsdsXPCZpdOBNTpv6W1AAOdQSjz
mMxm2J/8jC9wE0vTPx0qlc2DV1NOxf+PF7/OXqhDFzRg/VUZk9pBxX9ng0+FFCdk
2WwQK8cqNbZRMPqqSOvIDW1pe6ekCFfvtr9HVXooy94nb3YW3MPh98Wd6O1u6Y/j
CHwJfvm0IrK70rD5UfzrKeZKX2gpmyk7ZtRXxhnfLCuei5iabOwU/IRGqeOQ5YJl
Kr3BAVeGX45A2IwDFlHZO3/DxK87cTdyHg4LX4LANBXjvKGxnNCsA5ZfymFD0gOL
3AJemc9GRHo7bfuefeUb23sCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4957428291613842119412338329313845392
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-04-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-15 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssl.fioport.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 545709793039508256323074575685632000901106609098711388014434636824780469433255651952179200038382047132265630360391938051292559353654688371866784285918298583983569980569574405300859579836800756419438377136214988226160118475928825945331436626221483379708891785439779322502600925405281178308820853364154743113442937481610829419267954975742773089671278798160736338239195465094928331087257098958207647603527873237185558595817297411839517101053378426870080154026272312859563487219715323769015169125419959466625940371225965229133956090595148708119206672637716890990608901806490053577119591697080304142823604776575180224038881355296685948749638677928462490246442728970402893615931088902475783800612595485281061955168894613521637614919477278043052845352548638388275808695156693723151380857362511364013002529369122659093179822347849228741705819311093137786918548989388686040629498772272072418308043246887506118452910457108826270714431909765886806834070333838722396420048137884686805819602260786702301899117420246301107458426216745564290050301414111493936639209234257991675159237079749316437716782367336013937835808752167311981833900017173769552929032408663218827462903675983777686224930993607007182082983716026690760335101184312876899164216187
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1095ef18b1d9fbce963869e488ab74677f4b5f52
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssl.fioport.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016290fe76bc0000040300473045022064f9bd44a61a5436be2637131094382a75b3a15b97acc3100ad29269ebbf2064022100816c432ee9200cbba7c45192641a74911fd3099b5f96931a13aa3aea7128aad20076006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016290fe772b0000040300473045022100b8187f305cf7ca5174c92de98da1fdf0158463f3d52ca3520e2a95dac302bf1d02204c7b83378d2709b66e90387a432284e4245ed509db1579b23ef0f17b200720c9
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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