clarknet.clarku.edu

- Trustees Of Clark University -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 9a:cc:e1:be:00:00:00:00:54:cc:63:c3 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Trustees Of Clark University

Company registration number: 666001933
Organization: Trustees Of Clark University
State / Province: Massachusetts
Locality: Worcester
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9a:cc:e1:be:00:00:00:00:54:cc:63:c3
Serial Number (int): 47908378417028544611666912195
Serial Number lenght: 96 bits, 12 octets

SubjectKeyId: d6:61:96:5a:66:ad:f8:71:eb:da:4d:8c:17:a8:7a:33:14:f6:2f:d5
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 35:06:26:2b:ec:2f:c7:1f:ae:3b:c7:ec:29:db:fb:51:9a:d7:b3:61
Fingerprint (sha256): 0f:9d:6e:c9:87:c8:92:ad:d9:b1:f5:5c:b8:8d:5a:87:d4:17:1e:50:b7:47:95:a1:98:10:57:73:5b:4a:b7:16

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate clarknet.clarku.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clarknet.clarku.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clarknet.clarku.edu

Other certificates including the domain name clarku.edu

(limited to 100 certificates)
cluster.technolutions.net
isso.clarku.edu
mathcs.clarku.edu
gradstudies.clarku.edu
vpn.clarku.edu
*.goddard40.clarku.edu
prodinb.clarku.edu
goddard.microsearch.net
www.clarku.edu
useastucc5.acquia.com
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
cluster.technolutions.net
cicada.clarku.edu
biscuits.clarku.edu
gradstudies.clarku.edu
www2.clarku.edu
leep.clarku.edu
itshelp.clarku.edu
srwsus.ad.clarku.edu
cluster.technolutions.net
exchange.clarku.edu
www2.clarku.edu
clarkconnect.clarku.edu
apply.clarku.edu
cluster.technolutions.net
simplek.clarku.edu
www.clarku.edu
cuweb.clarku.edu
commons.clarku.edu
cluster.technolutions.net
apps.clarku.edu
biscuits.clarku.edu
exchange.clarku.edu
webfs.clarku.edu
prodxtender.clarku.edu
clarkconnect.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
biscuits.clarku.edu
ch003.screenshare.clarku.edu
technolutions.com
cluster.technolutions.net
apps.clarku.edu
apply.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
useastucc5.acquia.com
cluster.technolutions.net
store.clarku.edu
clarknet.clarku.edu
Clarktube.Clarku.edu
goddard.microsearch.net
exchange.clarku.edu
clarknet.clarku.edu
crush.clarku.edu
woodhouse.clarku.edu
clarknow.testing.clarku.edu
goddard.microsearch.net
clarknet.clarku.edu
useastucc5.acquia.com
www2.clarku.edu
news.clarku.edu
cluster.technolutions.net
wordpress.test.clarku.edu
snowwhite.ad.clarku.edu
cluster.technolutions.net
adfs.clarku.edu
goddard.microsearch.net
cluster.technolutions.net
planning.clarku.edu
itshelp.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
commons.clarku.edu
cluster.technolutions.net
cluster.technolutions.net
lists.clarku.edu
useastucc5.acquia.com
moodle.clarku.edu
www2.clarku.edu
access.clarku.edu
cluster.technolutions.net
goddard.microsearch.net
canvas.clarku.edu
apply.clarku.edu
clarkconnect.clarku.edu
www.clarku.edu
mathcs.clarku.edu
cluster.technolutions.net
acquia-sites.com
cluster.technolutions.net
discoverer.clarku.edu
access.clarku.edu
gradapply.clarku.edu
webapps.clarku.edu
www.clarku.edu
apply.clarku.edu
titaniumweb.clarku.edu

Certificate

The complete raw certificate details for clarknet.clarku.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1HOJw6A8dixWePCIuJD1
FF/9PEmP6vlXVYJfzEqbwREkyY+v+o3YbFUrYuWsIR2oefd7JTWVgkgFMWuluTTa
m7bLDNUk72sJPyXja8OCme7BeEGtEPk8JypjCZkjBkgSMzaKcpRWVdGMy5RE6iqK
p/IZxJn+U2QzgUZ6cC2CCU7TTRYBG28GNiGUxN0s8NBoMMDByE+UiFRP+dgUNdlO
kpW5roPfmAiItFRepQosK+wT2QOtWJj0LhCIsRJDIwBohG8AmK39h2fQkvg5z6uX
2irWKjZTHXGtzp+LLxUc7KJCqNZWYpc69SchqlIWn97U1cJvCZy9CxOwxwej7amz
rwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 47908378417028544611666912195
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-11-30 15:50:09 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-01 16:20:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Worcester'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Massachusetts'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trustees Of Clark University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '666001933'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clarknet.clarku.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26819494633711393561049998573613237895598061821566524744943010721136961481341372176218518832435535920249310569803433774677534151430723339194106969982206361121754399895844537330881488334735724616581551121507708434382082617466553337878330726773023049889468262208880052633990306404166386265448685012393464993242545709411190320178123418728491291344995183425192791239359693655483451032496899231485456462721392850181519454885999881716204423948079221212648983825079826368700392696910073560401233905960394207921960896091942388881715939759871033755440693061276933341586194921617619664213185856080010812599058947470216548430767
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clarknet.clarku.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d661965a66adf871ebda4d8c17a87a3314f62fd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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