royalsupply.com

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 05:dc:ff:01:0e:ce:e6:3c:f9:c1:eb:0d:81:bf:02:8d was issued on by DigiCert Inc .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Davera LLC

Organization: Davera LLC
Organization unit: Sales
State / Province: Ohio
Locality: Elyria
Country: US

DigiCert Inc

Organization: DigiCert Inc
State / Province: Ohio
Locality: Elyria
Country: US

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 05:dc:ff:01:0e:ce:e6:3c:f9:c1:eb:0d:81:bf:02:8d
Serial Number (int): 7793617386062251258450261678753776269
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8f:e2:98:8e:df:b7:82:26:b0:0c:b2:03:01:0c:b7:29:89:b0:47:f2
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 45:97:3c:b0:e8:49:70:7c:3b:7f:fc:ff:9d:35:e9:04:ea:b0:b8:75
Fingerprint (sha256): 94:a8:7c:10:ff:4f:e7:61:cc:18:22:80:78:2d:48:ea:a6:c0:ef:f9:ca:4c:e0:5e:3b:78:10:7d:88:07:cf:ba

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g3.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g3.crl

Check the revocation status for the current certificate on royalsupply.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

royalsupply.com
www.royalsupply.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGJjCCBQ6gAwIBAgIQBdz/AQ7O5jz5wesNgb8CjTANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTUwMzExMDAwMDAwWhcN MTYwMzE1MTIwMDAwWjBsMQswCQYDVQQGEwJVUzENMAsGA1UECBMET2hpbzEPMA0G A1UEBxMGRWx5cmlhMRMwEQYDVQQKEwpEYXZlcmEgTExDMQ4wDAYDVQQLEwVTYWxl czEYMBYGA1UEAxMPcm95YWxzdXBwbHkuY29tMIICIjANBgkqhkiG9w0BAQEFAAOC Ag8AMIICCgKCAgEA3Fkxr4XIj4xIimCcOMmMRLefN5fMJ/Q5WylsFVPFlaiYwl/w m8HRtMQHy/tjsJMMU7jXD6SdK3A/GGIk7m/PW0EL/xqS4umRkL8WmAgFyjzl81Vn hHgmXRi5ZTqLTFK7htoGRthqGTB0EPyNrn5bLNdiWycnZXMjpd68vgueqYiK2zBb qqD+s7gTUjm8ditfsGCZdSffseKgiQGU83FPLm4cgDi0KhIoXrzkPgGeBvcGCR6c 1VIMjWrF2LqMX0vESTaOQbhzRySMXAvYGLZCpKN/Bta5ilJyzSRu6E7iBwXTgYxc hFwrFUH79clva2/SGGfdSZyOmj1WvBn9tcx44Uu8X8VUtksYMjs+EO2YTr2ZDCvV CZGF8wkjtXBUkHy/te5isZEVqzSnIyEblt/Z1uKuGE2XEqLnCTDsGWZOjaRZvHAT fNth4BonJrcEkcm82gHCxLgcQH4zeYCjcB9/sjnNqarM9v5g5TC8iemTp8yiJxiF OSOZ+w+q62lcKu2hW8MxJP8ypgPfGrxhkPsuFOdyuQbe2D+QyF8nxzG9Jx6O92dq K12qhIDdgp1NQorBhmLKBZ/GZg4JfVZqHC/swsvINP71LpJU7lyA7tXPUBs07yGT j/YIwx9WNfGZcrfE2WjfDVAKJJfttmz0+jSA1lXJINmkhwmPo3cWVZaHh/UCAwEA AaOCAeEwggHdMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtniMB0GA1Ud DgQWBBSP4piO37eCJrAMsgMBDLcpibBH8jAvBgNVHREEKDAmgg9yb3lhbHN1cHBs eS5jb22CE3d3dy5yb3lhbHN1cHBseS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjBrBgNVHR8EZDBiMC+gLaArhilodHRw Oi8vY3JsMy5kaWdpY2VydC5jb20vc3NjYS1zaGEyLWczLmNybDAvoC2gK4YpaHR0 cDovL2NybDQuZGlnaWNlcnQuY29tL3NzY2Etc2hhMi1nMy5jcmwwQgYDVR0gBDsw OTA3BglghkgBhv1sAQEwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNl cnQuY29tL0NQUzB8BggrBgEFBQcBAQRwMG4wJAYIKwYBBQUHMAGGGGh0dHA6Ly9v Y3NwLmRpZ2ljZXJ0LmNvbTBGBggrBgEFBQcwAoY6aHR0cDovL2NhY2VydHMuZGln aWNlcnQuY29tL0RpZ2lDZXJ0U0hBMlNlY3VyZVNlcnZlckNBLmNydDAMBgNVHRMB Af8EAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQDRIqbpd+z8YqnSDGU3okyD9fSHmIyF YkFWPIHkJTttWlzXMGtvQHgz+RX0igNCMfkoQ5Egzh/z89TGM6THwuwllk04678t G9M3qxnGh3PhKA2TYOeGml09oIHQjq0HZjr7XG25yb8jPKTyWvTVyzQ+pEz1Ysph H+L7Yed9i3+2JWdilOHRaN66272w4qoN0DgwiT3Q9Qlbk5GiDflqhB2hTQ3l2IEF nFVmbHgasC8duppwtb+hyIKvvTSQDnPZo6lJNKyZka2cH2eNWueHP36doacwCtuU zw76vEl5dnfjLtDLte4xorjBDW7OPpD2fl1whj0f9vKB1MSAYxZY6qby -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA3Fkxr4XIj4xIimCcOMmM RLefN5fMJ/Q5WylsFVPFlaiYwl/wm8HRtMQHy/tjsJMMU7jXD6SdK3A/GGIk7m/P W0EL/xqS4umRkL8WmAgFyjzl81VnhHgmXRi5ZTqLTFK7htoGRthqGTB0EPyNrn5b LNdiWycnZXMjpd68vgueqYiK2zBbqqD+s7gTUjm8ditfsGCZdSffseKgiQGU83FP Lm4cgDi0KhIoXrzkPgGeBvcGCR6c1VIMjWrF2LqMX0vESTaOQbhzRySMXAvYGLZC pKN/Bta5ilJyzSRu6E7iBwXTgYxchFwrFUH79clva2/SGGfdSZyOmj1WvBn9tcx4 4Uu8X8VUtksYMjs+EO2YTr2ZDCvVCZGF8wkjtXBUkHy/te5isZEVqzSnIyEblt/Z 1uKuGE2XEqLnCTDsGWZOjaRZvHATfNth4BonJrcEkcm82gHCxLgcQH4zeYCjcB9/ sjnNqarM9v5g5TC8iemTp8yiJxiFOSOZ+w+q62lcKu2hW8MxJP8ypgPfGrxhkPsu FOdyuQbe2D+QyF8nxzG9Jx6O92dqK12qhIDdgp1NQorBhmLKBZ/GZg4JfVZqHC/s wsvINP71LpJU7lyA7tXPUBs07yGTj/YIwx9WNfGZcrfE2WjfDVAKJJfttmz0+jSA 1lXJINmkhwmPo3cWVZaHh/UCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 7793617386062251258450261678753776269 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ohio' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Elyria' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Davera LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sales' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'royalsupply.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 898943101674516545403578402476961617719163083276064455993357927785497987745563487393784531024219863699298030333769617417448246383247573745978735902346919717224423224892147823966231194826478387802771195885152017047395031782218858695440954407339489604665754563269613572931025241641881525959811052860446160912513611490647126345723098238459239299627732449136207567735664163980097437011622791713796486579901247934251394691076588545958373130524966549715945060162861528547026214770327168836771735081621892234431285704005001947447876348719390779198936010692026975285361332249910584206920564304265196590920600230491140563493032227226056083236947948872015347706922398495192765963214790800742965188048252367694596934968059356541393402402348770740453249048288027491797462504809951205934460121546475492309890949031918821816377878116590804086103572031761130109035267638997177246294713790378933321839340494410565445011448592839641895395196282490585569864070262304127264156607843115043020065181192984532456203491803835665001837512994640035400092704104955089417223996148309043015099916043114858437672865692393075561041797616260203676876080822170154502056142560566344707216472853951670944963144524169621657751851921988815594048761491365654989241812981 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8fe2988edfb78226b00cb203010cb72989b047f2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'royalsupply.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.royalsupply.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g3.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g3.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00d122a6e977ecfc62a9d20c6537a24c83f5f487988c856241563c81e4253b6d5a5cd7306b6f407833f915f48a034231f928439120ce1ff3f3d4c633a4c7c2ec25964d38ebbf2d1bd337ab19c68773e1280d9360e7869a5d3da081d08ead07663afb5c6db9c9bf233ca4f25af4d5cb343ea44cf562ca611fe2fb61e77d8b7fb625676294e1d168debadbbdb0e2aa0dd03830893dd0f5095b9391a20df96a841da14d0de5d881059c55666c781ab02f1dba9a70b5bfa1c882afbd34900e73d9a3a94934ac9991ad9c1f678d5ae7873f7e9da1a7300adb94cf0efabc49797677e32ed0cbb5ee31a2b8c10d6ece3e90f67e5d70863d1ff6f281d4c480631658eaa6f2