sslcertificate2.queue-it.net

Issued by Amazon

About this certificate

This digital certificate with serial number 04:7b:ea:03:1e:d2:f4:43:8a:9c:ee:eb:3e:bf:78:20 was issued on by Amazon.

With 33 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sslcertificate2.queue-it.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:7b:ea:03:1e:d2:f4:43:8a:9c:ee:eb:3e:bf:78:20
Serial Number (int): 5960310827810767543697913815190435872
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 20:0b:69:a8:3e:be:1a:a3:72:1b:6f:75:fd:0b:60:2d:11:89:87:30
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 74:bf:81:ab:1b:e0:b1:e8:97:f6:b9:37:e1:94:a8:2c:5b:12:8c:f4
Fingerprint (sha256): 14:02:e0:d0:08:b6:56:00:cd:d1:96:b2:65:74:d5:27:97:a9:27:96:30:02:b3:63:5e:be:74:fd:18:5c:d6:7d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sslcertificate2.queue-it.net

33

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sslcertificate2.queue-it.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sslcertificate2.queue-it.net
queue.ticketarena.co.uk
harrypotterqueue.travelcircus.de
queue.telenor.dk
queue.three.co.uk
dragoiscoming.tieks.com
queue.sky.ch
queue.fanfares.cathaypacific.com
storequeue.wizards.com
go.aspiraconnect.com
queue.atgtickets.com
line.universe.com
gov10k.hangseng.com
wait.fenty.com
wait.loud-project.com
queue.stage.amctheatres.com
queue.hkairportshop.com
waiting.seaworldparks.com
virtualcorral.nyrr.org
queue.tkt.ge
suturno.jccm.es
queue.fairphone.com
wait.thepga.com
queue.ticketania.com
queue.hakuapp.com
queue.hlg.uhuu.com
queue.scandlines.com
queue.uhuu.com
getinline.ticketfairy.com
q.axs.nu
stg-queue.hakuapp.com
queue.smtickets.com
queue.amctheatres.com

Other certificates including the domain name queue-it.net

(limited to 100 certificates)
sslcertificate3.queue-it.net
*.test.queue-it.net
hd-dtc.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net

sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate4.queue-it.net
sslcertificate4.queue-it.net
sslcertificate1.queue-it.net
go.test.queue-it.net
sslcertificate1.test.queue-it.net
tomo.okos.uno

sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sa-east-1-logging.test.queue-it.net
*.test.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net

api2.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net

sslcertificate4.queue-it.net
*.test.queue-it.net
vpn.test.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
*.queue-it.net
dashboard.internal.queue-it.net
*.queue-it.net
api2.test.queue-it.net
api2.test.queue-it.net
sslcertificate1.queue-it.net
www.queue-it.net
sslcertificate4.queue-it.net
sa-east-1-logging.test.queue-it.net
*.queue-it.net
electronicarts.queue-it.net
go.queue-it.net
sslcertificate4.queue-it.net
sslcertificate2.queue-it.net
sslcertificate1.queue-it.net
go.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.test.queue-it.net
sslcertificate3.queue-it.net
portal.childrens-mercy.darivault.com
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
sslcertificate4.queue-it.net
*.queue-it.net
sslcertificate1.queue-it.net
*.queue-it.net
go.queue-it.net
api2.queue-it.net


sslcertificate2.queue-it.net
sslcertificate3.queue-it.net
*.test.queue-it.net
api2.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
sslcertificate1.queue-it.net
sslcertificate5.queue-it.net
*.test.queue-it.net
api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net
cf.go.queue-it.net
sslcertificate2.queue-it.net
sslcertificate2.queue-it.net
sslcertificate4.queue-it.net
vpn.test.queue-it.net
*.test.queue-it.net
sslcertificate1.test.queue-it.net
go.queue-it.net
*.queue-it.net
*.queue-it.net
sslcertificate3.queue-it.net
go.queue-it.net
sslcertificate2.queue-it.net
wazuh.internal.queue-it.net
api2.test.queue-it.net
herning.citytilbud.dk
sslcertificate5.queue-it.net
dashboard.internal.queue-it.net
sslcertificate1.queue-it.net
api2.test.queue-it.net
sslcertificate2.queue-it.net

api2.queue-it.net
sslcertificate2.queue-it.net
*.queue-it.net

Certificate

The complete raw certificate details for sslcertificate2.queue-it.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqB3bD2XX0PPLVqjiq7F
J29B2KXjyxcq0K1VBJKM/ZY/Urq0+SQ8x/0sfCrhUuMCBddAwakqFgdAUoNftQzC
+i7Zj0PMbNUaL+uSsrcp9MIpx94fZYayXlr9jKky1OrWKpE+kIAn8SWxu5oMGzAk
K253A5v27ZE3kUuVbDm+UTYvCGPFa1dejE48fSrh+QWRfIXpvAn61Z5PZtlRcgHp
XlzJETy7KboMi5CPbjRdTDM+dV/qqNuRgJ739Datjaqzbi9y4PISHidKUK0jzgkU
ktx/t+E7UtZTHWBzQzTRPU9TGWo5HZ2dQZgnXDbTxxTuRM95Um8ppkVTtlZessla
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5960310827810767543697913815190435872
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-09 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sslcertificate2.queue-it.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23559453701731420896154754385056374599063439838744844488228232640522651237375422831455400093383111884278130590750055640883652068406603190923216475794818401490608210537062133709155665836141346242669844737907929094898222131184822105421276500252204702754653100275030322032590636516878622372006668829846377590528458687412000970059664506400009950884301279809862142389764383418765725871587110545837253010271357310556929374099195789935469601477572862243870396289137517213908459138671113821991334526144965696850533087836678440568760594119156242529915069703074624723368855913001898036439017177683946038707196183899447595981321
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							200b69a83ebe1aa3721b6f75fd0b602d11898730
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (727 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sslcertificate2.queue-it.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketarena.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'harrypotterqueue.travelcircus.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.telenor.dk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.three.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dragoiscoming.tieks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.sky.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fanfares.cathaypacific.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'storequeue.wizards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'go.aspiraconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.atgtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'line.universe.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gov10k.hangseng.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.fenty.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.loud-project.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.stage.amctheatres.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hkairportshop.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'waiting.seaworldparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'virtualcorral.nyrr.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.tkt.ge'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'suturno.jccm.es'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.fairphone.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wait.thepga.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.ticketania.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.hlg.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.scandlines.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.uhuu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'getinline.ticketfairy.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'q.axs.nu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stg-queue.hakuapp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.smtickets.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'queue.amctheatres.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e3000001747332c9ec000004030046304402205c2c354de070c56e76561cba7e83e8207ba3f6aa7302beed2f7e4263f87ed53f022031fa6862ff6243c3ab2d2de22d26971f10a81076e20bb0f855f686c1aab63cd80076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001747332ca140000040300473045022100e435dd93f84e8566ed45e17553ac4c2a95a8fcd1daef5835ff944f9a33ef935302200d2e8cbf4fb6e040815e285cc6325d165410de98217001670a0f68797cf01eb0
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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