qaxac.asbgroup.co.nz

- ASB Bank Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 08:d3:b4:fe:b1:a4:94:fe:00:00:00:00:54:cd:9e:3b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

ASB Bank Limited

Company registration number: 398445
Organization: ASB Bank Limited
Locality: Auckland
Country: NZ

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:d3:b4:fe:b1:a4:94:fe:00:00:00:00:54:cd:9e:3b
Serial Number (int): 11733069616089925705175786253181623867
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 73:8b:56:2d:35:c7:5f:8a:9a:1b:d8:ed:f3:d2:36:d9:56:21:b8:ef
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 2c:f1:56:e6:ee:9a:33:f6:00:a9:65:55:2a:4c:d0:67:96:09:8c:0f
Fingerprint (sha256): 15:a1:6e:02:44:36:b3:f4:86:8e:55:2c:eb:d6:00:81:42:ea:06:7f:a2:2d:e5:3a:7c:de:44:60:88:56:a1:bc

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate qaxac.asbgroup.co.nz

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for qaxac.asbgroup.co.nz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

qaxac.asbgroup.co.nz

Other certificates including the domain name asbgroup.co.nz

(limited to 100 certificates)
sf1.asbgroup.co.nz
sfsso.asbgroup.co.nz
hcsfcomp.prod.asbgroup.co.nz
sf3.asbgroup.co.nz
qasf.asbgroup.co.nz
harbor-prod.asbbank.co.nz
careers.asbgroup.co.nz
qaxac.asbgroup.co.nz
sf1.asbgroup.co.nz
hcsfatca.prod.asbgroup.co.nz
harbor-qa.asbbank.co.nz
PXATCA3.prod.asbgroup.co.nz
access.prod.asbgroup.co.nz
meetingsadminb.asbgroup.co.nz
meetings.asbgroup.co.nz
PXATCA15.prod.asbgroup.co.nz
mail.asbdev.co.nz
sfsso.asbgroup.co.nz
careers.asbgroup.co.nz
harbor-qa.asbbank.co.nz
uscomp9988.prod.asbgroup.co.nz
access.prod.asbgroup.co.nz
harbor-qa.asbbank.co.nz
careers.asbgroup.co.nz
harbor-qa.asbbank.co.nz
xac.asbgroup.co.nz
meetings.asbgroup.co.nz
PXATCA15.prod.asbgroup.co.nz
hcsfatca.prod.asbgroup.co.nz
careers.asbgroup.co.nz
meetings.asbgroup.co.nz
hcsfcomp.prod.asbgroup.co.nz
pxuatca1.prod.asbgroup.co.nz
careers.asbgroup.co.nz
recruiters.asbgroup.co.nz
careers.asbgroup.co.nz
PXATCA15.prod.asbgroup.co.nz
xac.asbgroup.co.nz
recruiters.asbgroup.co.nz
recruiters.asbgroup.co.nz
recruiters.asbgroup.co.nz
qasf2.asbgroup.co.nz
meetings.asbgroup.co.nz
recruiters.asbgroup.co.nz
xdm.asbgroup.co.nz
recruiters.asbgroup.co.nz
mail.asb.co.nz
PXATCA15.prod.asbgroup.co.nz
recruiters.asbgroup.co.nz
xdm.asbgroup.co.nz
meetings.asbgroup.co.nz
usatca9988.prod.asbgroup.co.nz
harbor-qa.asbbank.co.nz
careers.asbgroup.co.nz
meetings.asbgroup.co.nz
recruiters.asbgroup.co.nz
harbor-qa.asbbank.co.nz
meetings.asbgroup.co.nz
careers.asbgroup.co.nz
newjobs.asbgroup.co.nz
recruiters.asbgroup.co.nz
recruiters.asbgroup.co.nz
recruiters.asbgroup.co.nz
newjobs.asbgroup.co.nz
uscomp9988.prod.asbgroup.co.nz
qasfsso.asbgroup.co.nz
careers.asbgroup.co.nz
usatca9988.prod.asbgroup.co.nz
sf2.asbgroup.co.nz
mail.asb.co.nz
harbor-prod.asbbank.co.nz
careers.asbgroup.co.nz
recruiters.asbgroup.co.nz
recruiters.asbgroup.co.nz
hcsfcomp.prod.asbgroup.co.nz
PXATCA3.prod.asbgroup.co.nz
harbor-prod.asbbank.co.nz
PXATCA15.prod.asbgroup.co.nz
careers.asbgroup.co.nz
qaxdm.asbgroup.co.nz
harbor-prod.asbbank.co.nz
qaxdm.asbgroup.co.nz
careers.asbgroup.co.nz
sf2.asbgroup.co.nz
qasfsso.asbgroup.co.nz

Certificate

The complete raw certificate details for qaxac.asbgroup.co.nz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2wLWzTygBEFPvBCodOP7
EOhV0p3AeqycFxXrrBbIDVwaOgBgLacDed5aPnAN6pcfbBsq39puLBX9nBBqHtue
Kn+kxth1+rPZnLvnEhq/Q1zdFnr1c8btbsXGwnBasUdfn2JnL/5xfB2F0cCmHT/0
imI0hPFmLisCGnfctRRT6nX7vvkX6wqY8XiU/XpqybGfdXCPIS22Pk/lfUzyHX01
TlaHzH1GRKkiJvN6jzKgauyIRtIuE7dIkNq1Ju7lJkurjIMs5MtxJWsTiJSNWdi0
hCwEsIIsgXvH5Jh64Y90lnyJhQHgnbe50hncaKRxVMHiLpQqZiO4x992424uXHB0
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11733069616089925705175786253181623867
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-13 20:21:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-03 20:51:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auckland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NZ'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ASB Bank Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '398445'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'qaxac.asbgroup.co.nz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27647588784750854001661309753934179634122392114017217655336881981359817446920229461315767148011716417231236961926017694663395244002154506131781213979679836163958885809264384772447032452166674560563141567923435220546778518628441832345196632102999419816220797989861205443992356742823964389798155378464315277262417244538723224300644065229946088604920222991281163515372749056735933499271757563797288546478255499738411500158993211493594891006239717655388571969878647303910012259076831926778768422681700700951044751959666444815100689714893792082180564429046976211452545516930481971414171136251674875300227088532415085311153
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'qaxac.asbgroup.co.nz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							738b562d35c75f8a9a1bd8edf3d236d95621b8ef
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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