fisa.ctxns.nyc.gov

- Office of Technology and Innovation, New York City -

Issued by DigiCert EV RSA CA G2

About this certificate

This digital certificate with serial number 05:89:92:3a:66:ef:ed:05:49:ed:ee:1d:52:b9:6f:14 was issued on by DigiCert Inc.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Office of Technology and Innovation, New York City

Company registration number: Government Entity
Organization: Office of Technology and Innovation, New York City
State / Province: New York
Locality: Brooklyn
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:89:92:3a:66:ef:ed:05:49:ed:ee:1d:52:b9:6f:14
Serial Number (int): 7360450507436933291923619623846113044
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d6:df:35:a6:9d:f4:08:64:76:2e:2b:f6:6f:5f:3a:f2:f0:d3:d3:bc
AuthorityKeyId: 6a:4e:50:bf:98:68:9d:5b:7b:20:75:d4:59:01:79:48:66:92:32:06

Fingerprint (sha1): 3b:85:3d:a6:5c:71:70:df:b3:8e:06:82:ba:2e:c8:7d:9b:3e:10:ac
Fingerprint (sha256): 0b:e0:57:d0:a2:18:ef:64:0b:c1:93:58:97:42:77:43:12:0b:dc:0d:1d:3f:68:48:f6:fa:53:b9:43:a0:80:be

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/DigiCertEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/DigiCertEVRSACAG2.crl

Check the revocation status for certificate fisa.ctxns.nyc.gov

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fisa.ctxns.nyc.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fisa.ctxns.nyc.gov

Other certificates including the domain name nyc.gov

(limited to 100 certificates)
a806-housingconnectAPI.nyc.gov
a858-anltw.nyc.gov
a069-ra1.nyc.gov
webapps.nyc.gov
a127-jobs.nyc.gov
a827-mwbe.nyc.gov
legistar.council.nyc.gov
mspava-vcsxcl01.nyc.gov
*.nyc.gov
foodhelp-stg.nyc.gov
fisa.ctxns.nyc.gov
zap.planning.nyc.gov
5685570869133312-fe1.pantheonsite.io
a858-nycnotify.nyc.gov
psc-esa1.nyc.gov
a860-openrecords.nyc.gov
manhattanbp.nyc.gov
a127-HRFTS.NYC.GOV
a826-depvpn.nyc.gov
enterpriseenrollment.dhs.nyc.gov
A127-uag.nyc.gov
a806-housingconnect.nyc.gov
regional-viz.planninglabs.nyc
zoningresolution.planning.nyc.gov
migration.planning.nyc.gov
a073-ils-web.nyc.gov
Apply.council.nyc.gov
a827-bladerunner.nyc.gov
www.nycbers.org
laws.council.nyc.gov
a816-certifytrn.nyc.gov
enterpriseenrollment.tlc.nyc.gov
a002-oomwap01.nyc.gov
a002-oom03.nyc.gov
a858-nycnotify.nyc.gov
a860-gpp.nyc.gov
Portal.dss.nyc.gov
a810-lmpaca.nyc.gov
a816-evitaltrn.nyc.gov
a858-aaf.nyc.gov
skypeaccess.dep.nyc.gov
enterpriseenrollment.cto.nyc.gov
5685570869133312-fe1.pantheonsite.io
laws.council.nyc.gov
nyc-factfinder.planninglabs.nyc
law.ctxns.nyc.gov
laws.council.nyc.gov
a0333-passportpublic.nyc.gov
gis.nyc.gov
a069-cmg.nyc.gov
on.nyc.gov
a826-web01.nyc.gov
a127-essdr.nyc.gov
transit-survey.council.nyc.gov
iwomm.council.nyc.gov
nycpss.nyc.gov
transit-survey.council.nyc.gov
lotselector.planninglabs.nyc
comptroller.nyc.gov
enterpriseenrollment.dcas.nyc.gov
a856-ptdb.nyc.gov
comptroller.nyc.gov
otcmail.nyc.gov
mentalhealthforall-stg.nyc.gov
a801-sbscssp.nyc.gov
a827-bladerunner.nyc.gov
a858-anltw.nyc.gov
membertimesheet.council.nyc.gov
a127-pip.nyc.gov
depwebmail.nyc.gov
comptroller.nyc.gov
streets.planning.nyc.gov
www2.nyc.gov
*.nyc.gov
a127-ess.nyc.gov
schools.nyc.gov
on.nyc.gov
a826-ocsedge01.nyc.gov
mtpralpwvcse2.nyc.gov
migration.planning.nyc.gov
a841-dotwebpcard01.nyc.gov
mail.council.nyc.gov
psacmeetingadmin.nyc.gov
a127-jobs.nyc.gov
a127-hrp.nyc.gov
maps5.nyc.gov
a826-umax-accssrs.dep.nyc.gov
dotwebmail.nyc.gov
doitt.ctxns.nyc.gov
a827-dsnyftp.nyc.gov
A127-uag.nyc.gov
webapps.nyc.gov
a127-rbp.nyc.gov
a858-eds-tstxf-fa01.nyc.gov
bronxdawebapp.nyc.gov
council.nyc.gov
a032-secure.nyc.gov
securetransport.nyc.gov
mail.nycboe.net
fisa.ctxns.nyc.gov

Certificate

The complete raw certificate details for fisa.ctxns.nyc.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNaFXRzwHR0Vv4UcT8il
FGhBqOHkgmGyLu6NYuSYKTg0dzoknl3D202XdF85pXit3kV9ppvvpsx46+NXwa0V
jB6WScHtSwuS9nsIUjmqyhUbYZs6uwojnwU+C5XSUE9Rf8dEEewtWefaDxsHNqC0
tAvsvW7sI2/0JZjIA0OOGvuY4g9vyi9xQmYjE7A0vzkp1I5Eymxid9OPAAfhkIP7
X6R3pxlQd9VVL8yW7k/EJ/s6cWAnZMxjDhP3pKgJaKFD30ffplfuLfqogWTETBQc
nshOj/x682KAITAVSEMF5EOZ8q1K6YYn0ijtIZ8PaYggfO3yQBwkrAxDbTbjYMfc
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7360450507436933291923619623846113044
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brooklyn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Technology and Innovation, New York City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fisa.ctxns.nyc.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23838585557703063331706645661460525472218764629671702808319795177689879450391798480033766220086165561576880794693971652811885321636755528447636166681518288613465848722661757589518479583966004866538664573175190674869542280294334728246245026376387378730940269940651529515256234967050471748050995959210781234420736933899363080110129435269774556873417198122924723978390402545323770114852256055155936748190011590392447179927898936218296205163181156363613368562562813290664489237203751121015466262882122741048213555550181018666230996757584679309722677420521505661354779916325549665176555471889273063167865163520238049287197
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6a4e50bf98689d5b7b2075d45901794866923206
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d6df35a69df40864762e2bf66f5f3af2f0d3d3bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fisa.ctxns.nyc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/DigiCertEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		004b11c58d788d02ea709d2b87267f267fb286abf3ad0055f88dfea46dc7b8995b893a881075f9b52b7cb9b466d22152e120d7227340e5a57d42e57153ed08388fa9b632daa777dc3f85c73b8ee14101ce6f80e93b035f0908dd1e68196d97fe60f7ab87a5c4004e96ff86a570f8a01b13265467f6d9fea3eec1d050a7822fc3b75870e57093b8bc1015daffd561e6a4d836f1c58e577c953a5319e88002095004d37e587d5311544dad6fe909afd6692d388eb3e43463d90a3a715af626919e99984324567b752b8a7d29bdf3a632dcbf8815615590d7db5d9f758ff0a91b7e441dd1927b2ad85d2da0dcdbf74e09e24b4fc149e1d9a78354cf2db4d813485339