facebook.hipch.at

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 04:f2:92:26:e3:4e:e7:81:6d:45:4f:15:56:60:53:22 was issued on by DigiCert Inc .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Atlassian, Inc.

Organization: Atlassian, Inc.
Organization unit: HipChat
State / Province: California
Locality: San Francisco
Country: US

DigiCert Inc

Organization: DigiCert Inc
State / Province: California
Locality: San Francisco
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 04:f2:92:26:e3:4e:e7:81:6d:45:4f:15:56:60:53:22
Serial Number (int): 6576412135725887161182919755468657442
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 32:5b:da:ed:50:be:e9:f7:2b:8d:ff:f8:a1:df:59:a1:f7:d8:98:fb
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): e4:97:29:59:d2:5d:f5:ad:b2:e9:7c:c7:b3:99:94:2c:5b:f7:9a:b7
Fingerprint (sha256): 6a:46:00:52:90:58:93:52:29:25:f6:a8:2f:c3:1e:ca:f9:cd:a6:58:db:cd:f9:88:53:94:79:4c:83:72:a2:21

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g4.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g4.crl

Check the revocation status for the current certificate on facebook.hipch.at
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: facebook.hipch.at

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGKjCCBRKgAwIBAgIQBPKSJuNO54FtRU8VVmBTIjANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwNzIwMDAwMDAwWhcN MTgwNzI0MTIwMDAwWjCBgjELMAkGA1UEBhMCVVMxEzARBgNVBAgTCkNhbGlmb3Ju aWExFjAUBgNVBAcTDVNhbiBGcmFuY2lzY28xGDAWBgNVBAoTD0F0bGFzc2lhbiwg SW5jLjEQMA4GA1UECxMHSGlwQ2hhdDEaMBgGA1UEAxMRZmFjZWJvb2suaGlwY2gu YXQwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDinp+TzvzkswFYbcF7 XwwHtiRjCCrLv1s/0j+ej6VmLoEmZ0AZnfpS0r4YY6BY1W0zwscZQS/K35Z+GxKu l0LuHBabZUW0iQ1+8wBVmSAguOcXLTvSov4Jn7xHFCPJfcyiMkoFRbGw0NOEvCul n+yCSuE046cSYEnOZXd6gs8MtPqKwZFPEJ/oANtfi5u4d0gVGn8J1v+B8W0U5+XR oEGvyTJHg4YF6JuASaH2llWpliL7Os4sxr0A0Vmc9qqyp24HpYWWg3FC6LIlfqiA JnkoJ9wdlMG7GMbs5+85TVwcgNzA4cLwcKP75v5bTS8NdRiYVLVX50DF0u+LFkpk /B9upxYlJVGyamzI8W4TTtOWLfo4QuBQlvl3LtDuOajPK01qLdXP6kc0LimQGSWK 0F6rglWfmxJh9Jx/IsYzOa3+4eUKzGeL2bG2OAKyGiIeGBuIqDH5DU0W3wPzdR3d 7+w05yLyS6VNA6vRltaXpKFmujegUXc2TFl/JZ/N+lseXNUpJ0lu6FvS08hF6vut WXZg5aPZL7z5QNM5f45Fz+hjF0YZVSh89YDwn2fVEwoChL+AGLD0cOxSx1XLPnZv +TJkG8JTjX/gOrsp72DGYcg80vD5/Lglb4belDhnEhd5S+TDQhAHdj9W9CdU3b9P N9mS2Yh19M/+z42pm5Ii5xNovQIDAQABo4IBzjCCAcowHwYDVR0jBBgwFoAUD4Bh HIIxYdUvKOeNRji0LOHG2eIwHQYDVR0OBBYEFDJb2u1Qvun3K43/+KHfWaH32Jj7 MBwGA1UdEQQVMBOCEWZhY2Vib29rLmhpcGNoLmF0MA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwawYDVR0fBGQwYjAvoC2gK4Yp aHR0cDovL2NybDMuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nNC5jcmwwL6AtoCuG KWh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9zc2NhLXNoYTItZzQuY3JsMEIGA1Ud IAQ7MDkwNwYJYIZIAYb9bAEBMCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRp Z2ljZXJ0LmNvbS9DUFMwfAYIKwYBBQUHAQEEcDBuMCQGCCsGAQUFBzABhhhodHRw Oi8vb2NzcC5kaWdpY2VydC5jb20wRgYIKwYBBQUHMAKGOmh0dHA6Ly9jYWNlcnRz LmRpZ2ljZXJ0LmNvbS9EaWdpQ2VydFNIQTJTZWN1cmVTZXJ2ZXJDQS5jcnQwDAYD VR0TAQH/BAIwADANBgkqhkiG9w0BAQsFAAOCAQEAv06D4B5Tf2upXhB5nUtgTwLl Ld0Axa26glQ/C2MdJWJXWQV0TMW3yQzryAnCxMbVJ2W26NxpAzdENXn8TiM0lz+R LxMqnHKrNBWIsc07sY/WtElyYUa6LhfBwCQNBzJxj/+YxEc2ipmLhDOBlKeKC3tM LoNMUx8grFNHFNNUC+4jZXmNqDydEfp0ci2BldkAmDkFCeY6AfCcZFoALk50bG2X X8HNRSg+KWWYYQf6Bj4yAQ6TBDeVVjCc8aqZSQYFhwnNlsGUa23PV+WrljQCbrYr FaRo7/Jw/pTPI5dy9GZrjqTls4gQZ2WahrWhSg7A/Gi85PShWmAtd5RjG9jPgw== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA4p6fk8785LMBWG3Be18M B7YkYwgqy79bP9I/no+lZi6BJmdAGZ36UtK+GGOgWNVtM8LHGUEvyt+WfhsSrpdC 7hwWm2VFtIkNfvMAVZkgILjnFy070qL+CZ+8RxQjyX3MojJKBUWxsNDThLwrpZ/s gkrhNOOnEmBJzmV3eoLPDLT6isGRTxCf6ADbX4ubuHdIFRp/Cdb/gfFtFOfl0aBB r8kyR4OGBeibgEmh9pZVqZYi+zrOLMa9ANFZnPaqsqduB6WFloNxQuiyJX6ogCZ5 KCfcHZTBuxjG7OfvOU1cHIDcwOHC8HCj++b+W00vDXUYmFS1V+dAxdLvixZKZPwf bqcWJSVRsmpsyPFuE07Tli36OELgUJb5dy7Q7jmozytNai3Vz+pHNC4pkBklitBe q4JVn5sSYfScfyLGMzmt/uHlCsxni9mxtjgCshoiHhgbiKgx+Q1NFt8D83Ud3e/s NOci8kulTQOr0ZbWl6ShZro3oFF3NkxZfyWfzfpbHlzVKSdJbuhb0tPIRer7rVl2 YOWj2S+8+UDTOX+ORc/oYxdGGVUofPWA8J9n1RMKAoS/gBiw9HDsUsdVyz52b/ky ZBvCU41/4Dq7Ke9gxmHIPNLw+fy4JW+G3pQ4ZxIXeUvkw0IQB3Y/VvQnVN2/TzfZ ktmIdfTP/s+NqZuSIucTaL0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 6576412135725887161182919755468657442 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-07-20 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'San Francisco' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlassian, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HipChat' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'facebook.hipch.at' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 924527398455850908391570753733116159562334676048645585721530239465170685298965778743127992856759048761258310747976616474354564952581143485397955257067258599328295301849966129330615761362549497062389155810882383323734599014336117838310739440581049750983679012368418718868334684583554053613753134056465621733570186378296114756756316279861516184579826551821124934184639277157793646520992868506791602471457026772265681249546085866232432004788819809839984338776107376435103599373538335373927706512361492455159401311622571452002922968317334645929493763014787375761402090728241204672358532444459544152746416813281986964337884382831460982824159416058117808814315034658585279339112001812852234430364119063198167700668890383052602941357563235153440045897161160796928707251571206896528996538698585894191288629845880680293779053100771013335047711610637496812621042264634945495585701843451914027386522357151879696745303628204546844950561623470658536729451935678259866637485657464067993011947951905591838091796980845590671643841662201151783615564748286832743744058037354398290145024190032748056533606300229176720976875800527837960143524736651636010711368916316526062003651002459707723832716997709106077366279808648666824672439003488903528816273597 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 325bdaed50bee9f72b8dfff8a1df59a1f7d898fb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'facebook.hipch.at' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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