radioastronomia.uv.es

- Universitat de València -

Issued by TERENA SSL High Assurance CA 3

About this certificate

This digital certificate with serial number 08:d0:45:19:a3:3a:50:9e:a1:57:07:bf:8d:36:b7:4e was issued on by TERENA.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Universitat de València

Company registration number: Government Entity
Organization: Universitat de València
Organization unit: Observatori Astronòmic
Locality: Valencia
Country: ES

TERENA

Organization: TERENA
State / Province: Noord-Holland
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d0:45:19:a3:3a:50:9e:a1:57:07:bf:8d:36:b7:4e
Serial Number (int): 11715223230337840965779349312026097486
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c1:7e:aa:6c:e6:41:cd:18:0a:3a:47:0a:8c:ed:71:25:1b:44:83:0f
AuthorityKeyId: c2:b8:85:d7:e1:b9:13:bd:d1:48:bc:fd:5e:dc:7d:90:42:7a:8a:a9

Fingerprint (sha1): 8a:57:e6:e8:b8:ae:7a:74:de:23:d8:f2:78:3a:be:f0:12:78:c7:c2
Fingerprint (sha256): 0d:0b:3a:03:e4:da:fa:5a:2a:e0:09:03:20:eb:4d:d1:bc:b7:fb:57:78:d3:e2:5b:30:f3:7f:2b:00:b2:12:57

Issuing Certificate URL: http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl
CRL Distribution Point: http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl

Check the revocation status for certificate radioastronomia.uv.es

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for radioastronomia.uv.es

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

radioastronomia.uv.es
tosca.uv.es
radioastronomia.valencia.edu
tosca.valencia.edu

Other certificates including the domain name uv.es

(limited to 100 certificates)
bdusu.uv.es
lhcpheno.ific.uv.es
ieee.uv.es
evalu137.ific.uv.es
uvapp.uv.es
mupart.uv.es
tapnas.uv.es
lcg2mon.ific.uv.es
www.uv.es
irt.ific.uv.es
epo.uv.es
mooc.uv.es
glass.uv.es
storage3demo.ific.uv.es
symposium.events
raspito1.uv.es
idal.uv.es
webservsec.uv.es
aulaarchivo.uv.es
correo.uv.es
tapec.uv.es
angelat.uv.es
moodle.uv.es
jirat.uv.es
webges.uv.es
admundsen.ci.uv.es
dmk.uv.es
dockprod.uv.es
imp.ific.uv.es
enquest4.uv.es
tapnas.uv.es
webgrec.uv.es
imageclef.uv.es
hodor.uv.es
hyperion.uv.es
references.ific.uv.es
entresiglos11.uv.es
cectmox5.uv.es
matronasmadrid.symposium.events
trobes.uv.es
symposium.events
sestud.uv.es
www.uv.es
research.uv.es
esamsv03.uv.es
piwik.uv.es
naslifalta.i2sysbio.uv.es
symposium.events
roderic.uv.es
radioastronomia.uv.es
uvmecenatge.uv.es
tapnas.uv.es
research.uv.es
ai4oceans.uv.es
preincoming.uv.es
tapec.uv.es
enquest4.uv.es
caucedo.uv.es
dmk.uv.es
alufis35.uv.es
research.uv.es
astrokit.uv.es
bdusu.uv.es
webges.uv.es
webstr.audio.uv.es
rififi.uv.es
jira.uv.es
clepsidra.uv.es
encuestas.uv.es
leito.uv.es
symposium.events
naslifalta.i2sysbio.uv.es
webgrec.uv.es
references.ific.uv.es
evauwm.uv.es
etsetv.uv.es
leito.uv.es
admundsen.ci.uv.es
symposium.events
sonarqube.uv.es
radioastronomia.uv.es
nextdesk1.ific.uv.es
cectsyn.uv.es
citas.uv.es
tiqueting.uv.es
sonarqube.uv.es
software.uv.es
sefuv.uv.es
llistes.uv.es
espejo.uv.es
apixat.uv.es
sestud0.uv.es
webific.ific.uv.es
inmaculados.uv.es
artelope.uv.es
corral0.uv.es
silknow.uv.es
susblaib1.tel.uv.es
webges.uv.es
tapec.uv.es

Certificate

The complete raw certificate details for radioastronomia.uv.es in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcBcuBWrj99QZM3xhsnt
PxuX5LeV1xQSqWENmufw+dXOg2EZjremhm0ku0WhDclR735lTgvJbC7+eWWaxMne
V4rwVv2lx4fU0NjoTb6AB17PMiZVxbJMBUV6OnEuGCIwDfPtp/9aQVYo1HiT5EPV
25UzSoIeRbRB2c3jvmsgkfuSsNgfixvPACqFu22GV03o5ClUVgIBw26rUYVpwkX3
tpWjad47MEr5/NcNn+1hR24P9+od5XnMRtSYP36ePG0thiwYG1LxMBdquoqCMrXF
qhmh4XBEfkNyC10WH5UrvVDBK//9Imh4DB8W2zji+S9rbw/RvTxjYKvNN/0C5oTn
2wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11715223230337840965779349312026097486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Noord-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TERENA SSL High Assurance CA 3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-19 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Valencia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Universitat de València'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Observatori Astronòmic'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'radioastronomia.uv.es'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24963803406580032678814210288731845449385352756051447787353656364741237413130885717069931486224185276421404582758942635137319501976243533492975025896657358251860923249707464720287148548831211784876468273867211485677364199916915891444661949699411712978727489715483072103818610134447209699094409181030463419633718045270244482989509021515111481984053350680585198740356099174293729690828169935907297231886007409552597081636810120318933543858173340313417314768644811682470409463229886464712161266235765673224952507961256481597334442347732968308803428846473345021356727795337388420786866823771648165233996710973747507816411
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c2b885d7e1b913bdd148bcfd5edc7d90427a8aa9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c17eaa6ce641cd180a3a470a8ced71251b44830f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioastronomia.uv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tosca.uv.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'radioastronomia.valencia.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tosca.valencia.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/TERENASSLHighAssuranceCA3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/TERENASSLHighAssuranceCA3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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