order.nutrisavings.com

Issued by DigiCert SHA2 Secure Server CA

About this certificate


This digital certificate with serial number 0d:1b:43:4e:19:e0:b7:83:f8:b7:b5:72:c6:7a:62:ba was issued on by DigiCert Inc .

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Nutrisavings LLC

Organization: Nutrisavings LLC
State / Province: Massachusetts
Locality: Newton
Country: US

DigiCert Inc

Organization: DigiCert Inc
State / Province: Massachusetts
Locality: Newton
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 0d:1b:43:4e:19:e0:b7:83:f8:b7:b5:72:c6:7a:62:ba
Serial Number (int): 17421521069633258724895687147781776058
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 61:22:51:d6:8a:72:17:a9:99:18:ad:29:f8:3a:9d:77:95:1f:09:fc
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 63:ac:2e:8f:2f:06:6a:16:eb:72:cc:e1:2f:5c:8f:c3:91:dc:6c:45
Fingerprint (sha256): 3a:dc:95:25:e4:6d:29:37:f5:1e:bb:e6:01:2c:05:8a:39:1c:bd:b9:99:8f:ee:56:73:3e:81:5f:dd:91:46:19

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g2.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g2.crl

Check the revocation status for the current certificate on order.nutrisavings.com
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

order.nutrisavings.com
stage.nutrisavings.com
admin.nutrisavings.com
eatrightrewards.nutrisavings.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGcDCCBVigAwIBAgIQDRtDThngt4P4t7VyxnpiujANBgkqhkiG9w0BAQsFADBN MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMScwJQYDVQQDEx5E aWdpQ2VydCBTSEEyIFNlY3VyZSBTZXJ2ZXIgQ0EwHhcNMTQwNjExMDAwMDAwWhcN MTcwNjE1MTIwMDAwWjByMQswCQYDVQQGEwJVUzEWMBQGA1UECBMNTWFzc2FjaHVz ZXR0czEPMA0GA1UEBxMGTmV3dG9uMRkwFwYDVQQKExBOdXRyaXNhdmluZ3MgTExD MR8wHQYDVQQDExZvcmRlci5udXRyaXNhdmluZ3MuY29tMIICIjANBgkqhkiG9w0B AQEFAAOCAg8AMIICCgKCAgEAu6nvoqvKMFEfcysnY5czCs7cGh65tPlOS1NGtoeO GsVIFA5W48ECyDSWpcmgXY+WvB8w7xzdW5gHpNPhzzPZ96RSUEXD0a+Ek4v/pQWn c+GwPixIQreavRI/xKY31/BOExzdDwuTxesWqMJ5CyI1tSwXNUJLfX/HE9qIqNy4 QfCTSTTDlyb+vZwxRK9W2vQPYhIdwFLRiEW1WpoYkE8xs60WYL7SDui1ndwaY6cz gu2Mf+IU+r/Y5vGPOm/XvXsIGXA8DOyJGwjvmoiaXWX/kmnS0XWawWZsPX3YIiUZ HTET3bt4/vHUz11jTusrhZh9kLt2W3Ef6B4hCAzIHg5r2NGiLN04BuDE7v3Y1RiW pvkTO46F+4+wM1nvO5DbBTt3jRE1rYb3hcukPfuAhPMJ0CAH09mI0AdQ3Bnrr3bs jPWQ7J8OyAeamTEYrg2uItZreXVBsjB/B/CX03YLGP7uDw4qrhO+G9mNPsFSTDp+ rX0FJh1Jv252LbtL/vDedjnT+2L2+Lq3d+UFIGJRAMURgvN/Pr1EmpV3FotlZ0KG N2I2kiIkrCb+hol6yngvkjyFtdfbAqeOBg/S7sqkB+8Ct+nGgOmV28gOofYhFqxV 1K4h7RZJpwlf7gQT5DmzPOngo0dr0xhMXCbnb+62wHiPTM03kcPRrBL5yqG+G9C3 7x0CAwEAAaOCAiUwggIhMB8GA1UdIwQYMBaAFA+AYRyCMWHVLyjnjUY4tCzhxtni MB0GA1UdDgQWBBRhIlHWinIXqZkYrSn4Op13lR8J/DBzBgNVHREEbDBqghZvcmRl ci5udXRyaXNhdmluZ3MuY29tghZzdGFnZS5udXRyaXNhdmluZ3MuY29tghZhZG1p bi5udXRyaXNhdmluZ3MuY29tgiBlYXRyaWdodHJld2FyZHMubnV0cmlzYXZpbmdz LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF BwMCMGsGA1UdHwRkMGIwL6AtoCuGKWh0dHA6Ly9jcmwzLmRpZ2ljZXJ0LmNvbS9z c2NhLXNoYTItZzIuY3JsMC+gLaArhilodHRwOi8vY3JsNC5kaWdpY2VydC5jb20v c3NjYS1zaGEyLWcyLmNybDBCBgNVHSAEOzA5MDcGCWCGSAGG/WwBATAqMCgGCCsG AQUFBwIBFhxodHRwczovL3d3dy5kaWdpY2VydC5jb20vQ1BTMHwGCCsGAQUFBwEB BHAwbjAkBggrBgEFBQcwAYYYaHR0cDovL29jc3AuZGlnaWNlcnQuY29tMEYGCCsG AQUFBzAChjpodHRwOi8vY2FjZXJ0cy5kaWdpY2VydC5jb20vRGlnaUNlcnRTSEEy U2VjdXJlU2VydmVyQ0EuY3J0MAwGA1UdEwEB/wQCMAAwDQYJKoZIhvcNAQELBQAD ggEBAA5zeZ/S38VPk3jZGrH6L1emJDsSW+RqUDCRFzhjK2xKx2G+RsqooieEIBde li1OJagAasiLEUrAgX21SXde1uJcLSKar/sj1quhFQmoqWLLygxAcsQuv9PgPjfL FiuMsEOoCp7yljfyQPmxeDxakBu7qgiEOgfg4S4gOmsusDdMUvILl5HZD972tE1z QHALmVSXjJxk8sBI365kaJpNT3wtpVNXkLZIriOb7kjbAxwGMSLJ+ZDUPlc7KYCg kG75M1ZuO0GyHt5iCatrvlEboseHamVxFUsfeH2/unoDCKvzuPV+qg0XCU80Z/tc H/be1bNaKwWKLJhzoCvubEF0exE= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu6nvoqvKMFEfcysnY5cz Cs7cGh65tPlOS1NGtoeOGsVIFA5W48ECyDSWpcmgXY+WvB8w7xzdW5gHpNPhzzPZ 96RSUEXD0a+Ek4v/pQWnc+GwPixIQreavRI/xKY31/BOExzdDwuTxesWqMJ5CyI1 tSwXNUJLfX/HE9qIqNy4QfCTSTTDlyb+vZwxRK9W2vQPYhIdwFLRiEW1WpoYkE8x s60WYL7SDui1ndwaY6czgu2Mf+IU+r/Y5vGPOm/XvXsIGXA8DOyJGwjvmoiaXWX/ kmnS0XWawWZsPX3YIiUZHTET3bt4/vHUz11jTusrhZh9kLt2W3Ef6B4hCAzIHg5r 2NGiLN04BuDE7v3Y1RiWpvkTO46F+4+wM1nvO5DbBTt3jRE1rYb3hcukPfuAhPMJ 0CAH09mI0AdQ3Bnrr3bsjPWQ7J8OyAeamTEYrg2uItZreXVBsjB/B/CX03YLGP7u Dw4qrhO+G9mNPsFSTDp+rX0FJh1Jv252LbtL/vDedjnT+2L2+Lq3d+UFIGJRAMUR gvN/Pr1EmpV3FotlZ0KGN2I2kiIkrCb+hol6yngvkjyFtdfbAqeOBg/S7sqkB+8C t+nGgOmV28gOofYhFqxV1K4h7RZJpwlf7gQT5DmzPOngo0dr0xhMXCbnb+62wHiP TM03kcPRrBL5yqG+G9C37x0CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17421521069633258724895687147781776058 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-06-11 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-15 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newton' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nutrisavings LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'order.nutrisavings.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765601560657428997619927205928566315524293889218634801649669889927641239592346570034773376839074545531315467771596180714771369598763809976055993500440070135507437173269169646385087406605408051005380830303552544305739680876260042146655821321112609371378435910828144989092147399013975353864173537251211542194888094507670758447516644181919124988152120582549248520833983490405657424873998069544378116621608651571162347686677952650760648892639844624774543898455177759631672851535540501840918548458545726534136908094047061593074883622994722895125008553906420874258722636487149756630288141128929226383516586222176389485156806668900986996560301580879278358908268562255754317451762663173594963444424484085814416796533523677709799116419617036898707492990407075959233891731416079482652444162230527786102874723043529983053618439062629904542197419785699937265747308032507108452216730973713306071935192493037193632295450331807477725175335045944142801975237625783047343963037946923819534192848640636977909893380164552373025288655058908285801029701360147479794362747362115632020508628135819719424876723780936683997102049593462292491480836270458621401057162308330409072567075982876407147799354938668415210302880062869430870341558175739872591671193373 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 612251d68a7217a99918ad29f83a9d77951f09fc . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'order.nutrisavings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.nutrisavings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.nutrisavings.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eatrightrewards.nutrisavings.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g2.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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