owners.acura.com

- Honda North America Inc. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 54:3f:ec:e3 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Honda North America Inc.

Company registration number: C3640948
Organization: Honda North America Inc.
State / Province: California
Locality: Torrance
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 54:3f:ec:e3
Serial Number (int): 1413475555
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 5d:fe:6f:db:25:80:8c:eb:84:ba:15:40:08:a3:05:2c:4a:ed:4c:59
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): a5:dc:24:50:0a:4f:84:ef:42:3f:9b:bf:f5:70:05:73:15:07:aa:d0
Fingerprint (sha256): 0f:d4:83:9e:3d:40:f5:f2:db:67:60:75:28:20:9b:c0:0d:a5:e0:4a:ed:ed:d6:9d:82:af:79:74:e7:ca:dd:cf

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate owners.acura.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owners.acura.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owners.acura.com

Other certificates including the domain name acura.com

(limited to 100 certificates)
pat.m.acura.com
dealercommpref.acura.com
dealercommpref.acura.com
m.acura.com
*.acura.com
www.in.honda.com
image.20210419.195922.s4.et.yellsatcloud.com
nsx2.acura.com
honda.com
*.acura.com
*.nsx.acura.com
honda.com
staging2.btoadmin.acura.com
san-1-s4.tlsprovisioning.exacttarget.com
akamai-san77.exacttarget.com
pat.myaccount.acura.com
myaccount.acura.com
*.acura.com
experience.acura.com
staging.nsx.acura.com
click.em.acura.com
consumerassurance.acura.com
m.acura.com
pat.salestraining.acura.com
celebrate.acura.com
image.20210419.195922.s4.et.yellsatcloud.com
owners.acura.com
pat.btoadmin.acura.com
pat.support.login.honda.com
www.honda.com
myaccount.honda.com
totalcontrol.acura.com
honda.com
consumerassurance.powersports.honda.com
on.acura.com
ice.honda.com
staging.usb.acura.com
staging.dealerusb.honda.com
staging.oss.acuralink.acura.com
dev.radio-navicode.honda.com
totalcontrol.acura.com
staging.support.login.honda.com
experience.acura.com
*.usb.acura.com
playbeatthat.acura.com
usb.acura.com
*.acuralink.acura.com
m.acura.com
secure.acura.com
staging.oss.acuralink.acura.com
totalcontrol.acura.com
staging.myaccount.honda.com
staging.m.acura.com
consumerassurance.powersports.honda.com
pat.oss.acuralink.acura.com
RADIO-NAVICODE.ACURA.COM
*.acuralink.acura.com
akamai-san77.exacttarget.com
myaccount.acura.com
myaccount.honda.com
pat.dealercommpref.honda.com
image.20210419.195922.s4.et.yellsatcloud.com
*.gotl.acura.com
image.20210419.195922.s4.et.yellsatcloud.com
akamai-san77.exacttarget.com
owners.acura.com
radio-navicode.honda.com
owners.acura.com
on.acura.com
view.em.acura.com
acuralink.acura.com
staging.myaccount.acura.com
recognition.honda.com
san-1-s4.tlsprovisioning.exacttarget.com
salestraining.acura.com
teampurchaseprogramdlr.honda.com
acuralink.acura.com
totalcontrol.acura.com
es.automobiles.honda.com
staging.mydreamnsx.acura.com
m.acura.com
www.in.honda.com
secure.acura.com
image.20210419.195922.s4.et.yellsatcloud.com
*.hawk.api.acura.com
*.collision.acura.com
image.20210419.195922.s4.et.yellsatcloud.com
usb.acura.com
staging2.hondalink.honda.com
image.20210419.195922.s4.et.yellsatcloud.com
staging.salestraining.acura.com
myaccount.honda.com
image.20210419.195922.s4.et.yellsatcloud.com
image.20210419.195922.s4.et.yellsatcloud.com
m.acura.com
*.conquest.acura.com
dealercommpref.honda.com
pat.oss.acuralink.acura.com
image.20210419.195922.s4.et.yellsatcloud.com
m.acura.com

Certificate

The complete raw certificate details for owners.acura.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdMqhjrlSdBDCCVoUqyj
/osu5mK81hbIpm40qaHz6OBAwSvbK6JJPc+y3dSfKYLIc39GCYAQngr0bs6Z0hKV
iR7dyem1H2mcBqdjLb4bLFibtENcV08Z39LGG7ropV57QY/ceH1GHFvCUQYARDO8
FJEI9AElT2QIVBJU4WPdA1GtTCRJ4dK7vh/UYerHy+jK9hqgluGICT0n0nOKmbSX
TqRxiGn5zvqtQBNXipzACrXwvxvzGuwWZMf/sOSd5K/zyklWbdzDrgA+2bFMXBy5
YvKeNNkBDIzmTLXpBF/OcvYhsyEn1fPwc52b3gK/Pki91QFMxkKdaeoa8w4IW/xF
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1413475555
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-05 22:12:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-06 12:54:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Torrance'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Honda North America Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C3640948'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owners.acura.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24468122748603814525934940264136725421189866636674823095336959713765380172268788020452385287161061509518288625160984990561744355549059450378939441406832821513549052062435365118480150131852013061683289808446699584704362333718627521460436027585537569387774382522968318072358785807549761222530754456530891769598529455071479582665394541577987225858575431062500248110251317256209229617320436494968338938771684850495305375362183444145386458438152864511116334824609159443676799639039780994678797521805714255050184874990077752155224507613169101472129417243651432304592989798583719315511454806487961195586233442084991463605589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owners.acura.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014abc4230b70000040300483046022100c2adc5b0589065387894cf74fcd75d9ffb9a285040552f9ba14cd39b0f2df302022100bd3a7f342ff097298156daf961bcfff66475dc704f1b5d87b7cdacf27fa1c6ad0076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014abc42352c0000040300473045022100f4b45c463cfd8b5b8e491ead0ff5d3fa1620079d03f7e33d47d401342447aa0902205b1ee85c95652bb9ce55affa7a36e81f664fbf86fb2ca4ad94a2b544a270cbec007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014abc42372c0000040300473045022070daa794cd514a2df17e78ea0707737892f1b2ae5a07d72e319ab26cc46a6825022100bfef3d02e6eb0a7d2e5be3e027c12b262cf72fab66418d23751cef9a3c25af59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5dfe6fdb25808ceb84ba154008a3052c4aed4c59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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