up.funband.sharp.co.jp

Issued by Amazon

About this certificate

This digital certificate with serial number 09:ae:bf:25:f6:d9:f8:fa:13:cd:f0:ef:d6:e3:81:15 was issued on by Amazon.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=up.funband.sharp.co.jp

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:ae:bf:25:f6:d9:f8:fa:13:cd:f0:ef:d6:e3:81:15
Serial Number (int): 12870388563522438439238127896376869141
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 79:2b:7e:2b:44:5a:c0:ed:f6:a9:65:2b:30:b1:6e:45:f2:84:c7:a6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 91:1b:4b:11:7f:94:81:5e:b0:73:0f:37:1e:b0:4f:c8:8a:2e:49:e2
Fingerprint (sha256): 0c:41:b1:a4:ee:33:48:d6:97:10:29:9c:d6:00:94:96:9e:3a:4a:eb:20:b5:6e:fc:b7:92:bd:57:2d:1a:78:ff

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate up.funband.sharp.co.jp

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for up.funband.sharp.co.jp

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

up.funband.sharp.co.jp

Other certificates including the domain name sharp.co.jp

(limited to 100 certificates)
cs.sharp.co.jp
www.scope.sharp.co.jp
drsmx1.sharp.co.jp
www.sfc-extrasite.sharp.co.jp
b9606001l.win.sharp.co.jp
ra1.sharp.co.jp
solar-monitor.sharp.co.jp
blog.sharp.co.jp
vpp.cloudlabs.sharp.co.jp
tech-ds.sharp.co.jp
st-tw-hms.cloudlabs.sharp.co.jp
mpv-communication.sharp.co.jp
cocorobo.sharp.co.jp
mm1.sharp.co.jp
portal.cloudlabs.sharp.co.jp
trial-test.cloudlabs.sharp.co.jp
speed-sfc.sharp.co.jp
proxypki.sharp.co.jp
gas2.sharp.co.jp
ra2.sharp.co.jp
solar-1.sharp.co.jp
oss-net.sharp.co.jp
mpv-communication-tst.sharp.co.jp
gsx1.sharp.co.jp
steps-vpn.sharp.co.jp
pv-communication.sharp.co.jp
antispam.sharp.co.jp
pv-standby2.sharp.co.jp
ra21-redmine.w1-dev.awswwwtest.sharp.co.jp
www3.sharp.co.jp
as1.sharp.co.jp
cstest.sharp.co.jp
kenpo.sharp.co.jp
hsnet-o.sharp.co.jp
na-hms.cloudlabs.sharp.co.jp
www3.sharp.co.jp
mikasa.sharp.co.jp
sc-csr.sharp.co.jp
www.jpqa.sharp.co.jp
iclub-st.sharp.co.jp
solar-monitor.sharp.co.jp
st-snw-sh.sharp.co.jp
www-mold.sharp.co.jp
st-cook-healsio.cloudlabs.sharp.co.jp
iclub-st.sharp.co.jp
hsnet.sharp.co.jp
sh-campaign.sharp.co.jp
m-store.sharp.co.jp
proxypki.sharp.co.jp
secure.sharp.co.jp
ftw.sharp.co.jp
mpv-communication.sharp.co.jp
hsnet-o.sharp.co.jp
haken.sharp.co.jp
mikasa.sharp.co.jp
iclub-test.cloudlabs.sharp.co.jp
www3.sharp.co.jp
up.funband.sharp.co.jp
www.scope.sharp.co.jp
trial-test.cloudlabs.sharp.co.jp
solar-monitor-backup.sharp.co.jp
speed-sfc.sharp.co.jp
device.api.aiot.sharp.co.jp
test-cboard.cloudlabs.sharp.co.jp
solar-monitor-backup.sharp.co.jp
green-supplier.sharp.co.jp
iclub.sharp.co.jp
solar-monitor.sharp.co.jp
*.cloudlabs.sharp.co.jp
pv-communication-backup.sharp.co.jp
AG4VPC.SHARP.CO.JP
solar-monitor.sharp.co.jp
vpp.cloudlabs.sharp.co.jp
device.st-api.aiot.sharp.co.jp
iclub.sharp.co.jp
steps-dti.sharp.co.jp
www.jpqa.sharp.co.jp
lcd-sa2.sharp.co.jp
sh-campaign.sharp.co.jp
cgi.sharp.co.jp
pv-communication.sharp.co.jp
hsnet-o.sharp.co.jp
solar-monitor.sharp.co.jp
hsnet-o.sharp.co.jp
iclub-circle.sharp.co.jp
drsmx1.sharp.co.jp
kmail.sharp.co.jp
cms.sharp.co.jp
*.sharp.co.jp
reh-cpush.cloudlabs.sharp.co.jp
iclub-circle.sharp.co.jp
home-plant2.cloudlabs.sharp.co.jp
speed-sfc.sharp.co.jp
device.st-api.aiot.sharp.co.jp
cbot.cloudlabs.sharp.co.jp
solar-industry.sharp.co.jp
hsnet.sharp.co.jp
cloudlabs.sharp.co.jp
lifecare.cloudlabs.sharp.co.jp
pv-communication.sharp.co.jp

Certificate

The complete raw certificate details for up.funband.sharp.co.jp in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFdjCCBF6gAwIBAgIQCa6/JfbZ+PoTzfDv1uOBFTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMDIwMDAwMDBaFw0yMDAyMDIx
MjAwMDBaMCExHzAdBgNVBAMTFnVwLmZ1bmJhbmQuc2hhcnAuY28uanAwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChyHtpfno31ZU6aWO+8zDggVhGAS3a
r163wB6Y4gs7t1VNWZhjiM4WzyiWodlyLu5DltFFJWJHd+/3ZyyO8XbR4b8T22O+
ddj1MmkCRecGKe/rbTslOJB27x12+CqTxzuiM4FrS4491AevJC1S/ZlWi+Jtx8+j
St4rwt1FoJonJPRfeterLpS4IF1DeBTHfALz8ZtuKOe8b7aF+XdqKEm/vX0oc2aW
aT8i5y9jFm2CHsZDw8PAjaAJx2BKU40ulsxARCOui+dOvytbyVL2YC0hBSvvvuTN
PrICSaV1w3nb7wNWJMYinikAxdGaPiI6L5MbsTDBGbtaBMM+QKpnIV9pAgMBAAGj
ggKDMIICfzAfBgNVHSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4E
FgQUeSt+K0RawO32qWUrMLFuRfKEx6YwIQYDVR0RBBowGIIWdXAuZnVuYmFuZC5z
aGFycC5jby5qcDAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG
CCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1h
em9udHJ1c3QuY29tL3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAI
BgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2Nz
cC5zY2ExYi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIB
BQYKKwYBBAHWeQIEAgSB9gSB8wDxAHYAu9nfvB+KcbWTlCOXqpJ7RzhXlQqrUuga
kJZkNo4e0YUAAAFoC/ngrwAABAMARzBFAiALb9wiWqHPg1/EEBK4IFYhiKRxu1DV
ZSCSZVdNHLw6KQIhAIaD1+uY98bFO4iczbm9VcwVGGflSqG3plNAYFLRR5g3AHcA
h3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFoC/nhkwAABAMASDBG
AiEA8aLECCjMLV2Sdnhph5/b6sbMe7+hgu5tFjmbZD/B2H4CIQD1f6ZdCZ7I9c2F
YADYnAg0dqC0J1+X2n6EsDVdxuJPtzANBgkqhkiG9w0BAQsFAAOCAQEAJAXUocqG
KZTeRKnVzHmBSWIdQF4tgvsv11iDXSQ0svWPEvmeBZjqEBNjNJpJ3+Gc56oEJ7rw
pzrkIXnBFn/MZpPCkYeY3BqHh7C15FtT9x+xZvY+Gae5I2LSxgbdvcW0UfA84wlT
BsjsjiWaGSgyOLGb14pj5GhHAOXv0jOUYg6vKVZx7wFKt38LnmxHhT6Gso2HMlOd
HK/x7+tM+0HXtaQauxpY0lUKonuYZqeLexw8nISbwfcwfDCdXJ/ZbyKexmqZqm36
I5zAb1xJ2RW1e52GCHz0VlAu5wNEH3FktqNsOKUc6DtqHLEojPGvE2w1JKDFJYB6
oLjseF5QNuMk+A==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoch7aX56N9WVOmljvvMw
4IFYRgEt2q9et8AemOILO7dVTVmYY4jOFs8olqHZci7uQ5bRRSViR3fv92csjvF2
0eG/E9tjvnXY9TJpAkXnBinv6207JTiQdu8ddvgqk8c7ojOBa0uOPdQHryQtUv2Z
VovibcfPo0reK8LdRaCaJyT0X3rXqy6UuCBdQ3gUx3wC8/GbbijnvG+2hfl3aihJ
v719KHNmlmk/IucvYxZtgh7GQ8PDwI2gCcdgSlONLpbMQEQjrovnTr8rW8lS9mAt
IQUr777kzT6yAkmldcN52+8DViTGIp4pAMXRmj4iOi+TG7EwwRm7WgTDPkCqZyFf
aQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12870388563522438439238127896376869141
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'up.funband.sharp.co.jp'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20423228497039544577824661533015316818838835847605220586130754431334697012222494868757385038881986567099200357185979905076452665238200696642200956408267644701475356198164501615274303995842277569697395233418497981945430248289826795403863515290575799051464626387808807029172918922880721154706968769620475729232940624500895167894566012492271270052094743218864049686887373581282988200040549010965671847625967185702291546698521967797501899464981664934573196784039994185552462655070348637288564333786845078786178913460559616392342452552629889364524232216510710832087405878882925988696958448698161053683139692673233596800873
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							792b7e2b445ac0edf6a9652b30b16e45f284c7a6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'up.funband.sharp.co.jp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001680bf9e0af000004030047304502200b6fdc225aa1cf835fc41012b820562188a471bb50d565209265574d1cbc3a290221008683d7eb98f7c6c53b889ccdb9bd55cc151867e54aa1b7a653406052d14798370077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001680bf9e1930000040300483046022100f1a2c40828cc2d5d92767869879fdbeac6cc7bbfa182ee6d16399b643fc1d87e022100f57fa65d099ec8f5cd856000d89c083476a0b4275f97da7e84b0355dc6e24fb7
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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