www.averydennison.com

- Avery Dennison Corporation -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:f1:e5:f1:3d:ad:73:06:37:f9:ff:5c:47:73:57:d9 was issued on by DigiCert Inc.

With 88 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Avery Dennison Corporation

Organization: Avery Dennison Corporation
State / Province: California
Locality: Pasadena
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:f1:e5:f1:3d:ad:73:06:37:f9:ff:5c:47:73:57:d9
Serial Number (int): 15877515281415643183405081447042865113
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 22:ea:5b:7d:94:16:37:21:e9:69:c7:86:b2:aa:80:8a:08:de:e8:85
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 3f:43:ba:ab:db:3e:6a:7a:1b:13:8d:fd:e9:73:42:b6:b6:f4:2c:cc
Fingerprint (sha256): 0a:85:99:87:b3:39:5a:e3:5e:56:46:d9:86:af:39:d3:e9:82:8a:69:9d:5a:c2:aa:e8:f6:82:70:29:a6:de:65

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.averydennison.com

88

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.averydennison.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.averydennison.com
adcircular.averydennison.com.br
averydennison.com
averydennison.com.cn
conference.averydennison.com
dev.mactacgraphics.eu
graphics.averydennison.bz
graphics.averydennison.cl
graphics.averydennison.com.ar
graphics.averydennison.com.br
graphics.averydennison.com.cn
graphics.averydennison.com.co
graphics.averydennison.com.mx
graphics.averydennison.de
graphics.averydennison.es
graphics.averydennison.eu
graphics.averydennison.fr
graphics.averydennison.hk
graphics.averydennison.it
graphics.averydennison.jp
graphics.averydennison.kr
graphics.averydennison.la
graphics.averydennison.mx
identificationsolutions.averydennison.com
ids.averydennison.com
idsolutions.averydennison.com
intelligent-label.com
jacgraphics.com
label.averydennison.asia
label.averydennison.cl
label.averydennison.cn
label.averydennison.co.za
label.averydennison.com.ar
label.averydennison.com.au
label.averydennison.com.br
label.averydennison.com.co
label.averydennison.de
label.averydennison.es
label.averydennison.eu
label.averydennison.fr
label.averydennison.hk
label.averydennison.in
label.averydennison.it
label.averydennison.jp
label.averydennison.kr
label.averydennison.mx
label.sapssa.averydennison.com
mactacgraphics.eu
my-muse.com
pds-label.averydennison.eu
performancepolymers.averydennison.eu
reflectives.averydennison.bz
reflectives.averydennison.de
reflectives.averydennison.es
reflectives.averydennison.eu
reflectives.averydennison.fr
reflectives.averydennison.hk
reflectives.averydennison.it
reflectives.averydennison.jp
rfid.averydennison.cn
rfid.averydennison.fr
rfid.averydennison.jp
tapes.averydennison.co.uk
tapes.averydennison.com
tapes.averydennison.com.au
tapes.averydennison.com.cn
tapes.averydennison.de
terms.europe.averydennison.com
test-adcircular.averydennison.com.br
test.mactacgraphics.eu
test.my-muse.com
valuesandethics.averydennison.com
www.averydennison.com.cn
www.fastener.averydennison.com
www.graphics.averydennison.com.mx
www.graphicsap.averydennison.com
www.hanita.averydennison.com
www.identificationsolutions.averydennison.com
www.intelligent-label.com
www.jacgraphics.com
www.jdcinc.com
www.mactacgraphics.eu
www.my-muse.com
www.smartrac-group.com
www.tapes.averydennison.com
www.terms.europe.averydennison.com
www.test.mactacgraphics.eu
www.valuesandethics.averydennison.com

Other certificates including the domain name averydennison.com

(limited to 100 certificates)
gps.averydennison.com
leapfrog-ssl-15.gcs-web.com
mediacentral.averydennison.com
ceros2.map.fastly.net
vdtuat.averydennison.com
iceweb2.averydennison.com
SmartSD.averydennison.com
www.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.witinnovate.averydennison.com
products.averydennison.com
www.ntp.averydennison.com
SmartSD.averydennison.com
webservices3.averydennison.com
cwa.averydennison.com
msf.averydennison.com
san-004.ceros.com
san-003.ceros.com
san-004.ceros.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
*.averydennison.com
supplychain.averydennison.com
mgll.averydennison.com
san-004.ceros.com
edwcognosproduction.averydennison.com
uk.sport.averydennison.com
visualize.averydennison.com
san-004.ceros.com
www.retailcompliance.averydennison.com
san-002.ceros.com
ceros2.map.fastly.net
san-004.ceros.com
cognonprodportal.averydennison.com
askted.averydennison.com
san-003.ceros.com
san-004.ceros.com
mgll.averydennison.com
icswarranty.averydennison.com
*.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
embelex.averydennison.com
freshmarxconnect.averydennison.com
san-003.ceros.com
jobs.averydennison.com
idmmobproxy.averydennison.com
www.retailcompliance.averydennison.com
cwp.averydennison.com
www.averydennison.com
san-003.ceros.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
vanciveproductfinder.averydennison.com
san-003.ceros.com
beta.paxar-europe.com
san-004.ceros.com
test-la.averydennison.com
*.dlrgroup.com
webservices.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.compliancexprs.averydennison.com
san-003.ceros.com
leapfrog-ssl-15.gcs-web.com
webservices3.averydennison.com
leapfrog-ssl-15.gcs-web.com
ceros2.map.fastly.net
san-004.ceros.com
intelligent-solutions.averydennison.com
crp.ap.averydennison.com
remoteapps.averydennison.com
san-004.ceros.com
broadcast.averydennison.com
ilab.averydennison.com
leapfrog-ssl-15.gcs-web.com
www.retailcompliance.averydennison.com
gwp-test.averydennison.com
san-002.ceros.com
san-004.ceros.com
askted.averydennison.com
coreseries.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-004.ceros.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
san-003.ceros.com
www.ntp.averydennison.com
www.ntp.averydennison.com
san-003.ceros.com
www.ntp.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-002.ceros.com
vdt.averydennison.com
leapfrog-ssl-15.gcs-web.com
san-003.ceros.com
www.myrbis.averydennison.com
*.averydennison.com

Certificate

The complete raw certificate details for www.averydennison.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIPzTCCDrWgAwIBAgIQC/Hl8T2tcwY3+f9cR3NX2TANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMzA0MDYwMDAwMDBaFw0yNDAzMjMyMzU5NTlaMHoxCzAJBgNVBAYTAlVTMRMw
EQYDVQQIEwpDYWxpZm9ybmlhMREwDwYDVQQHEwhQYXNhZGVuYTEjMCEGA1UEChMa
QXZlcnkgRGVubmlzb24gQ29ycG9yYXRpb24xHjAcBgNVBAMTFXd3dy5hdmVyeWRl
bm5pc29uLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANwb+thq
9ecfM0yXxe5hgczhuQLWGeoz2EZOK5J0TSpDasgCaMRDVOO0Wym2Xjtw+y3rG/eE
S6ycfKru5x/LYzbolu7gTLchbexo5zSv+SbMkIE30peWYnf/Z3PSaDH9J9ycEZMd
UwX3vfpmIMSpjxo9tRItr+vn22D91xLfuxBAz2e0ewT0kKWqsa6JYPSJfxSMeGEw
UrpQbG1/eFDTwmhN1ILRXYkrOfJAOhQA+W9epn4UapZDTI0MCuUa3uGNsLUnA7rR
vnT7nyGYOyxwLgNegK5HlX+Ycf6Uh3vcYxKPtSZTknwDf/BtIrjBDYtF4OhNkLcc
oi4kR8AeCxoevA8CAwEAAaOCDGkwggxlMB8GA1UdIwQYMBaAFJBY/7CcdahRVHex
7fKjQxY4nmzFMB0GA1UdDgQWBBQi6lt9lBY3Ielpx4ayqoCKCN7ohTCCCW4GA1Ud
EQSCCWUwgglhghV3d3cuYXZlcnlkZW5uaXNvbi5jb22CH2FkY2lyY3VsYXIuYXZl
cnlkZW5uaXNvbi5jb20uYnKCEWF2ZXJ5ZGVubmlzb24uY29tghRhdmVyeWRlbm5p
c29uLmNvbS5jboIcY29uZmVyZW5jZS5hdmVyeWRlbm5pc29uLmNvbYIVZGV2Lm1h
Y3RhY2dyYXBoaWNzLmV1ghlncmFwaGljcy5hdmVyeWRlbm5pc29uLmJ6ghlncmFw
aGljcy5hdmVyeWRlbm5pc29uLmNsgh1ncmFwaGljcy5hdmVyeWRlbm5pc29uLmNv
bS5hcoIdZ3JhcGhpY3MuYXZlcnlkZW5uaXNvbi5jb20uYnKCHWdyYXBoaWNzLmF2
ZXJ5ZGVubmlzb24uY29tLmNugh1ncmFwaGljcy5hdmVyeWRlbm5pc29uLmNvbS5j
b4IdZ3JhcGhpY3MuYXZlcnlkZW5uaXNvbi5jb20ubXiCGWdyYXBoaWNzLmF2ZXJ5
ZGVubmlzb24uZGWCGWdyYXBoaWNzLmF2ZXJ5ZGVubmlzb24uZXOCGWdyYXBoaWNz
LmF2ZXJ5ZGVubmlzb24uZXWCGWdyYXBoaWNzLmF2ZXJ5ZGVubmlzb24uZnKCGWdy
YXBoaWNzLmF2ZXJ5ZGVubmlzb24uaGuCGWdyYXBoaWNzLmF2ZXJ5ZGVubmlzb24u
aXSCGWdyYXBoaWNzLmF2ZXJ5ZGVubmlzb24uanCCGWdyYXBoaWNzLmF2ZXJ5ZGVu
bmlzb24ua3KCGWdyYXBoaWNzLmF2ZXJ5ZGVubmlzb24ubGGCGWdyYXBoaWNzLmF2
ZXJ5ZGVubmlzb24ubXiCKWlkZW50aWZpY2F0aW9uc29sdXRpb25zLmF2ZXJ5ZGVu
bmlzb24uY29tghVpZHMuYXZlcnlkZW5uaXNvbi5jb22CHWlkc29sdXRpb25zLmF2
ZXJ5ZGVubmlzb24uY29tghVpbnRlbGxpZ2VudC1sYWJlbC5jb22CD2phY2dyYXBo
aWNzLmNvbYIYbGFiZWwuYXZlcnlkZW5uaXNvbi5hc2lhghZsYWJlbC5hdmVyeWRl
bm5pc29uLmNsghZsYWJlbC5hdmVyeWRlbm5pc29uLmNughlsYWJlbC5hdmVyeWRl
bm5pc29uLmNvLnphghpsYWJlbC5hdmVyeWRlbm5pc29uLmNvbS5hcoIabGFiZWwu
YXZlcnlkZW5uaXNvbi5jb20uYXWCGmxhYmVsLmF2ZXJ5ZGVubmlzb24uY29tLmJy
ghpsYWJlbC5hdmVyeWRlbm5pc29uLmNvbS5jb4IWbGFiZWwuYXZlcnlkZW5uaXNv
bi5kZYIWbGFiZWwuYXZlcnlkZW5uaXNvbi5lc4IWbGFiZWwuYXZlcnlkZW5uaXNv
bi5ldYIWbGFiZWwuYXZlcnlkZW5uaXNvbi5mcoIWbGFiZWwuYXZlcnlkZW5uaXNv
bi5oa4IWbGFiZWwuYXZlcnlkZW5uaXNvbi5pboIWbGFiZWwuYXZlcnlkZW5uaXNv
bi5pdIIWbGFiZWwuYXZlcnlkZW5uaXNvbi5qcIIWbGFiZWwuYXZlcnlkZW5uaXNv
bi5rcoIWbGFiZWwuYXZlcnlkZW5uaXNvbi5teIIebGFiZWwuc2Fwc3NhLmF2ZXJ5
ZGVubmlzb24uY29tghFtYWN0YWNncmFwaGljcy5ldYILbXktbXVzZS5jb22CGnBk
cy1sYWJlbC5hdmVyeWRlbm5pc29uLmV1giRwZXJmb3JtYW5jZXBvbHltZXJzLmF2
ZXJ5ZGVubmlzb24uZXWCHHJlZmxlY3RpdmVzLmF2ZXJ5ZGVubmlzb24uYnqCHHJl
ZmxlY3RpdmVzLmF2ZXJ5ZGVubmlzb24uZGWCHHJlZmxlY3RpdmVzLmF2ZXJ5ZGVu
bmlzb24uZXOCHHJlZmxlY3RpdmVzLmF2ZXJ5ZGVubmlzb24uZXWCHHJlZmxlY3Rp
dmVzLmF2ZXJ5ZGVubmlzb24uZnKCHHJlZmxlY3RpdmVzLmF2ZXJ5ZGVubmlzb24u
aGuCHHJlZmxlY3RpdmVzLmF2ZXJ5ZGVubmlzb24uaXSCHHJlZmxlY3RpdmVzLmF2
ZXJ5ZGVubmlzb24uanCCFXJmaWQuYXZlcnlkZW5uaXNvbi5jboIVcmZpZC5hdmVy
eWRlbm5pc29uLmZyghVyZmlkLmF2ZXJ5ZGVubmlzb24uanCCGXRhcGVzLmF2ZXJ5
ZGVubmlzb24uY28udWuCF3RhcGVzLmF2ZXJ5ZGVubmlzb24uY29tghp0YXBlcy5h
dmVyeWRlbm5pc29uLmNvbS5hdYIadGFwZXMuYXZlcnlkZW5uaXNvbi5jb20uY26C
FnRhcGVzLmF2ZXJ5ZGVubmlzb24uZGWCHnRlcm1zLmV1cm9wZS5hdmVyeWRlbm5p
c29uLmNvbYIkdGVzdC1hZGNpcmN1bGFyLmF2ZXJ5ZGVubmlzb24uY29tLmJyghZ0
ZXN0Lm1hY3RhY2dyYXBoaWNzLmV1ghB0ZXN0Lm15LW11c2UuY29tgiF2YWx1ZXNh
bmRldGhpY3MuYXZlcnlkZW5uaXNvbi5jb22CGHd3dy5hdmVyeWRlbm5pc29uLmNv
bS5jboIed3d3LmZhc3RlbmVyLmF2ZXJ5ZGVubmlzb24uY29tgiF3d3cuZ3JhcGhp
Y3MuYXZlcnlkZW5uaXNvbi5jb20ubXiCIHd3dy5ncmFwaGljc2FwLmF2ZXJ5ZGVu
bmlzb24uY29tghx3d3cuaGFuaXRhLmF2ZXJ5ZGVubmlzb24uY29tgi13d3cuaWRl
bnRpZmljYXRpb25zb2x1dGlvbnMuYXZlcnlkZW5uaXNvbi5jb22CGXd3dy5pbnRl
bGxpZ2VudC1sYWJlbC5jb22CE3d3dy5qYWNncmFwaGljcy5jb22CDnd3dy5qZGNp
bmMuY29tghV3d3cubWFjdGFjZ3JhcGhpY3MuZXWCD3d3dy5teS1tdXNlLmNvbYIW
d3d3LnNtYXJ0cmFjLWdyb3VwLmNvbYIbd3d3LnRhcGVzLmF2ZXJ5ZGVubmlzb24u
Y29tgiJ3d3cudGVybXMuZXVyb3BlLmF2ZXJ5ZGVubmlzb24uY29tghp3d3cudGVz
dC5tYWN0YWNncmFwaGljcy5ldYIld3d3LnZhbHVlc2FuZGV0aGljcy5hdmVyeWRl
bm5pc29uLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly9jZHAuZ2VvdHJ1c3Qu
Y29tL0dlb1RydXN0UlNBQ0EyMDE4LmNybDA+BgNVHSAENzA1MDMGBmeBDAECAjAp
MCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwdQYIKwYB
BQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNv
bTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1Ry
dXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4E
ggFqAWgAdgDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYdXHrwr
AAAEAwBHMEUCIQCYGTGStyPoYcqSYuBupabYUO2gdafrFgsCrwfoMrt15QIgfNuQ
4NDPOzsbb9pE0le+grp0zCHxf5i7KEVuf1PU6s0AdQBIsONr2qZHNA/lagL6nTDr
HFIBy1bdLIHZu7+rOdiEcwAAAYdXHrxkAAAEAwBGMEQCIBA7krrwOePOQ3nv3PXw
AzCVXFEP6/w0BRpMFZP5lEwjAiB/Y5HqcjsULQ0DRi6F/GuWIUjzsnN0p8Aia1KK
mfb0QQB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABh1cevBEA
AAQDAEgwRgIhAJQ8+KQLdMgk98QTzUA1W8ZSM9gZjHX8WD/lh2XxeyZoAiEA8jSp
J/D+wu2yjtXxjbMudBQidoOcRaakySsn9oM3wMowDQYJKoZIhvcNAQELBQADggEB
AKQ9tP2rOaRdrgmoMSwakHCwXMhJVEE89ogRP/juacs+TWrwGYKhZL34TDSGb6qs
qSBbFgeym1lZUUehhA0NODc5tcEeIUQmq2B0mOvGr8fQG+9XNnu3o4BqvCxRJXzt
Pg41ZckkHWbuJ7N4W3cRJnGRIYm6GCioD102vxOM9sm6bdR4TfoWNBuJ+kEMFtVB
O+ahmcHKbqH6QsIkEYntEhXtluF2R5hpYTr9QiY9zhxTLnsVucGFm/RNWXZ+pcWH
zlUr4m+nTX6L2t2IZ23mwliZh8jEfgscuyRBMgjK8vMgJPcWxK5UCHhuNO5oLHn2
stP7euOGvNMD/Pjfq0ZKXZs=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3Bv62Gr15x8zTJfF7mGB
zOG5AtYZ6jPYRk4rknRNKkNqyAJoxENU47RbKbZeO3D7Lesb94RLrJx8qu7nH8tj
NuiW7uBMtyFt7GjnNK/5JsyQgTfSl5Zid/9nc9JoMf0n3JwRkx1TBfe9+mYgxKmP
Gj21Ei2v6+fbYP3XEt+7EEDPZ7R7BPSQpaqxrolg9Il/FIx4YTBSulBsbX94UNPC
aE3UgtFdiSs58kA6FAD5b16mfhRqlkNMjQwK5Rre4Y2wtScDutG+dPufIZg7LHAu
A16ArkeVf5hx/pSHe9xjEo+1JlOSfAN/8G0iuMENi0Xg6E2QtxyiLiRHwB4LGh68
DwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15877515281415643183405081447042865113
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pasadena'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Avery Dennison Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.averydennison.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27786224478088451467960945180975355099980052334009781406649442554223851777139262530704251566827061214384384209642668929969835585499251101806784357160430572550830370593031381694635295075127135502623787413456288617922934841781957615104312204366821242870968288766063727424697370879100637220154751840399513261139229467270031014425027853737339755960312914933553972334161720442180603504200062888162146927260000994611803266354468954731253348772972722845549747040657695546613000477260314069541945947818789289113233834762446311685048060207517645492023336096853007871242152777697069345428394309454484343090434788590905968213007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							22ea5b7d94163721e969c786b2aa808a08dee885
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'adcircular.averydennison.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'averydennison.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conference.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.mactacgraphics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.la'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'graphics.averydennison.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'identificationsolutions.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ids.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'idsolutions.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intelligent-label.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jacgraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.asia'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.co.za'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.com.ar'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.com.co'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.kr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.averydennison.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'label.sapssa.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mactacgraphics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'my-muse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pds-label.averydennison.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'performancepolymers.averydennison.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.bz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.hk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflectives.averydennison.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid.averydennison.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid.averydennison.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rfid.averydennison.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapes.averydennison.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapes.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapes.averydennison.com.au'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapes.averydennison.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tapes.averydennison.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'terms.europe.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test-adcircular.averydennison.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.mactacgraphics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.my-muse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'valuesandethics.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.averydennison.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.fastener.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphics.averydennison.com.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graphicsap.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.hanita.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.identificationsolutions.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.intelligent-label.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jacgraphics.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jdcinc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.mactacgraphics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.my-muse.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.smartrac-group.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tapes.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.terms.europe.averydennison.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.test.mactacgraphics.eu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.valuesandethics.averydennison.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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