acc-api.axa.ch

- AXA Versicherungen AG -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0f:45:1b:59:9a:f8:12:df:fe:7c:2f:11:82:6f:0c:47 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

AXA Versicherungen AG

Company registration number: CHE-105.788.896
Organization: AXA Versicherungen AG
Locality: Winterthur
Country: CH

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:45:1b:59:9a:f8:12:df:fe:7c:2f:11:82:6f:0c:47
Serial Number (int): 20297243144338997814862974796900011079
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: dd:37:c3:0e:67:d4:23:e6:89:a5:67:28:6c:0e:d3:a6:81:2b:d3:0b
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 34:d9:72:eb:3f:f2:44:b0:b0:6d:23:86:1b:6c:4c:c4:ce:7c:00:09
Fingerprint (sha256): 12:f6:0f:b4:c3:3a:b3:1f:89:ec:fe:02:9a:fd:15:ae:4f:e2:51:01:d6:c7:68:8c:ed:75:3b:56:c7:da:f6:e7

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate acc-api.axa.ch

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acc-api.axa.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acc-api.axa.ch
api-cert.acc.axa.ch
api.acc.axa.ch
api.dev.axa.ch
api-cert.dev.axa.ch

Other certificates including the domain name axa.ch

(limited to 100 certificates)
max-der-dachs.ch
newsroom-fr.axa.ch
newsroom-it.axa.ch
axa.ch
blues-and-jazz23.events.axa.ch
axasure.axa.ch
www.culture.axa.ch
error.axa.ch
acc-api.axa.ch
aw.acc.axa.ch
blog.axa.ch
salesmagazine.axa.ch
applications.acc.axa.ch
newsroom-fr.axa.ch
media-news.axa.ch
newsroom-it.axa.ch
api.axa.ch
myaxa.axa.ch
panel.axa.ch
collab.axa.ch
patterns.axa.ch
myaxaforms.axa.ch
aw.axa.ch
silenccioapp.axa.ch
newsroom-it.axa.ch
www.allez-allez.app
protectionshop.axa.ch
axa.ch
*.axa.ch
roadsafety.axa.ch
insurance-check.axa.ch
ask.axa.ch
cyber-check.axa.ch
campaigns.axa.ch
oos.axa.ch
design.axa.com
silenccio.axa.ch
patterns.axa.ch
salesmagazine.axa.ch
acc-api.axa.ch
www.acc.axa.ch
roadsafety.axa.ch
axasure.axa.ch
mobiledesktop.axa.ch
myaxaforms.axa.ch
flexwork.axa.ch
aw.axa.ch
max-der-dachs.ch
sdc.axa.ch
silber24.events.axa.ch
campaigns.axa.ch
insurance-check.axa.ch
ebanking.axa.ch
mydriverecorder.axa.ch
newsroom.axa.ch
mobiledesktop.acc.axa.ch
www.postmeta.com
sdc.axa.ch
accentry.winterthur.com
brokermagazine.axa.ch
design.axa.com
cyber-check.axa.ch
blog.axa.ch
esg.services.axa.ch
newsroom-it.axa.ch
upto.axa.ch
construction.axa.ch
newsroom-fr.axa.ch
myaxaforms.axa.ch
design.axa.com
mw-myaxa.axa.ch
assertionsigner.sso.services.axa.ch
construction.axa.ch
www.axa.ch
panel.axa.ch
jobs.axa.ch
brandcenter.axa.ch
myaxa.axa.ch
mobiledesktop.axa.ch
roadsafety.axa.ch
crash.axa.ch
carainduction.com
jobs.axa.ch
gettheoutfit.honk.international
axa.ch
work.axa.ch
mw-myaxa.axa.ch
catch-game.axa.ch
events.axa.ch
myaxa.axa.ch
health.axa.ch
acc-api.axa.ch
partners.axa.ch
flexwork.axa.ch
hail.axa.ch
axa.ch
brandcenter.axa.ch
axahome.axa.ch
design.axa.com
design.axa.com

Certificate

The complete raw certificate details for acc-api.axa.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojovCOvG/tR3G5evox5P
4l4VsnXto+9rJtcFVaA65Lp9SUt3oR2VYNO1RnCYqWNSvF3iOtAFi8GBsPOqeh0h
CfWoMYMxv2J5WanzX4FIYsuNeZF9uf4WRF3n89tUckuI1vOFcE8QvFXJnQ0vwNDO
7ZuSOl+kp3KRkE67htF8K7QrIHGB8qrBiZ9VXMfHnY35kOXk7lFr4PoBtCzfD6Pq
zW+OuIF/55K7fc0qk0vwPtLJQuXq+yMuaR5LnOPQBss9Y/QlsHGoiFss41RiCGKk
84Ul9FNQ6c9xcyq1Jr0al5a/QhQ4PJ+bQp3qGUq11D9LVm2J6ndWR28OyV+FCi/h
dwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 20297243144338997814862974796900011079
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zürich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CHE-105.788.896'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Winterthur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AXA Versicherungen AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acc-api.axa.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20479296871047838577167350689294646653153527657103885694894258655689077158312797166730597188874571818901864174741564533200931391269850600307478100399497174316909374631293790887003750494617002146657189069997957448091142948336181462711266802037771728789907383144161665253264110537411578326757389708145244321057000708140580984832901648893188706917674344798509245366039714900765689690557404745983268357636251797451817900465796886630498700736940205929833300417181665141579166380790220955816817078670434585132911495694382413097842409140388464216505174736787299467188030473785048944951528771263937654302903536848787578282359
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							dd37c30e67d423e689a567286c0ed3a6812bd30b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acc-api.axa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.acc.axa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.acc.axa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.dev.axa.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api-cert.dev.axa.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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