securemail.op.fi

- OP Osuuskunta -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 5e:4d:44:b9:1b:32:1e:be:00:00:00:00:54:d0:93:15 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OP Osuuskunta

Company registration number: 0242522-1
Organization: OP Osuuskunta
Locality: Helsinki
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 5e:4d:44:b9:1b:32:1e:be:00:00:00:00:54:d0:93:15
Serial Number (int): 125348632331369073964878903512319169301
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 94:6e:81:60:6a:53:da:01:47:46:0e:a8:3c:99:f6:c2:4a:a9:ae:ba
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 52:5f:8b:37:85:0c:d1:0e:42:94:de:cd:61:46:f5:65:cb:bf:68:d6
Fingerprint (sha256): 13:5c:29:c9:a4:a5:3e:31:5e:e3:d3:6d:b3:1e:04:06:56:22:11:af:fc:80:11:f6:d6:b2:f0:b6:e6:75:7e:3e

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate securemail.op.fi

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for securemail.op.fi

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

securemail.op.fi
www.securemail.op.fi

Other certificates including the domain name op.fi

(limited to 100 certificates)
pilot-cms.op.fi
tok1.op.fi
www.jyty.op.fi
www.pilotti1.op.fi
rea.tuotanto.op.fi
test.tags.services.op.fi
opwlsopersr1.op.fi
jtywlshv1mv2.op.fi
marketdata.op.fi
media.op.fi
kultaraha.osuuspankki.fi
m.op.fi
securemail.op.fi
instituutioidensalkunhallinta.op.fi
valtuutus.op.fi
tk1.op.fi
tuoteasiakirjat.op.fi
api.op.fi
uutiskirje-tribedo.op.fi
verkkomaksu.op.fi
vahinkoapu.op.fi
alm.op.fi
login.pohjola.fi
uusi.lompsa.op.fi
sni.cloudflaressl.com
ocm.tags.op.fi
saml-idp.id-broker.op.fi
extlyncfarm.lync.op-palvelut.fi
lr7-pilot-cms.op.fi
kultaraha.osuuspankki.fi
test.ocm.tags.op.fi
uutiskirje.op.fi
varainhoito.op.fi
sni.cloudflaressl.com
in.tupas.op.fi
marketdata.show.op.fi
dps.op.fi
sni.cloudflaressl.com
isam-mgmt-fed.opcloud.op.fi
hae-korvausta.op.fi
ostalaskulla.op.fi
sni.cloudflaressl.com
silta.wsmobdom.HE1.op.fi
wsk.op.fi
authorize.op.fi
webmail.op-palvelut.net
verkkomaksu.op.fi
vahinkoapu.op.fi
uutiskirje.op.fi
tes3.op.fi
pilot.op.fi
www2.op.fi
allekirjoitus.op.fi
cert-baltics.sca.op.fi
psd2.mtls.sandbox.apis.op.fi
uutiskirje-tribedo.op.fi
mtls.apis.op.fi
marketdata.op.fi
www.jyty.op.fi
kultaraha.op.fi
hoksaamo.op.fi
dmc.email.op.fi
historia.op.fi
uusi.lompsa.jyty.op.fi
allekirjoitus.op.fi
yritys.op.fi
pilot.lainaa.op.fi
saml-idp.test.op.fi
vea.op.fi
isb.op.fi
test.ocm.tags.op.fi
sp.op.fi
kokeile.op.fi
pilot.saana.op.fi
marketdata.op.fi
ocm.tags.op.fi
oidc-client-registration.op.fi
vuosi.op.fi
uutiskirje.op.fi
ocm.tags.op.fi
uutiskirje-tribedo.op.fi
saavutettava.op.fi
lainaa.op.fi
isb-test.op.fi
kultaraha.osuuspankki.fi
static.apiauth.services.op.fi
c104s412vm011.op.fi
sni.cloudflaressl.com
c104s412vm011.op.fi
saml-idp.test.op.fi
wsk.extranet.asiakastesti.op.fi
OPMQSSB.OP.FI
isb.op.fi
securemail.op.fi
webprod.pohjola.fi
isam-web.opcloud.op.fi
vahinkoapu.pohjola.fi
saml-idp.test.op.fi
SAPBCM.op.fi
paivittaispalvelu.op.fi

Certificate

The complete raw certificate details for securemail.op.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 125348632331369073964878903512319169301
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-26 06:47:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-24 07:17:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Helsinki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OP Osuuskunta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '0242522-1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'securemail.op.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 666171251366548183785897470507783123060937847815911735849119323088831903640763895162044324232852665816418198945835790698575496045827413285352428589382182695895772780104547343137747920587284487148093124128179368054144479650224325175291859366146567414690537311314447808687411714394356505109473542331985498065376855547306926237004122414790076127263916933920921649208957802111956980650384935547499955284338974367259073501500304508495939476906507609628540401623304338987870801493601007873713862794328284114467548718373826379635763206550169982745208768875188292415416788671434299756384743961908144774703493138776140014337316532944618121474890959622586543935752809643719306615861578249217922051168897349873776197124849938979364396285090424417889550474125771990550960865668072955998676023348363662678458203617496919580402329061307438316476017692018302466545518887924213123312035001503668335869597691427711191678062965361934070291598014217059645585115065197462596538120504343238487523911835168044904069969847270105581577231266204680575890882720952467700400510843817913531884407257659877885769507032645271234102622640365947971986544874082870323030384109575929659620912241545504707395731473934841099504396106049387442162955087917050831978683713
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (42 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securemail.op.fi'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.securemail.op.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de0076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000016ea6927f94000004030047304502202f90d6bdfb11411cde3cfe9c6246ac6ec587ba29b28fd4f6f0cca1c36c1b58900221008c0b764a80a397d269de4983dca40f234d0c950f875ec6f6a1f95e43a12482e60075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016ea6927f8f00000403004630440220415f49a1bb0bee93c9c7d50d53c92c864c59099991d75d4fe69bc3ddc896cb0f02204c9a214e14d1fe60bad0feddc16f7c9f62e04a8d32836a50adac2d441af484390076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016ea6927fa20000040300473045022047642bef72f16d44a63359f7a61f4928d06ceb52d00c7de99a0825d3e74467a7022100ff53501af56391f19c0761c872224f39b9c1e5adff72982f9211b8d512ea7847007500bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016ea6927fb20000040300463044022058916c94fa1804dd89b71b02c09521632abbe4fd35402244f917812a719933cb022067007c5c636e1d2b1bfa5e776e4a62842b33962c4468129704a86d27fbb2bfec
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							946e81606a53da0147460ea83c99f6c24aa9aeba
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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