www.jikn.go.id

- Jaringan Informasi Kearsipan Nasional -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 06:1e:3f:d8:ee:5a:58:5d:16:36:cb:9a:e0:6e:68:64 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaringan Informasi Kearsipan Nasional

Company registration number: Government Entity
Organization: Jaringan Informasi Kearsipan Nasional
State / Province: DKI Jakarta
Locality: Jakarta Selatan
Country: ID

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:1e:3f:d8:ee:5a:58:5d:16:36:cb:9a:e0:6e:68:64
Serial Number (int): 8132431859320326149256211083499038820
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 6e:a1:9b:a2:e3:54:ab:d3:9b:a3:d7:c0:f4:12:f4:fe:45:55:90:f1
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 98:6e:d6:93:e8:f8:5c:8d:c0:25:69:9e:dd:de:f5:43:93:a1:3a:91
Fingerprint (sha256): 16:3e:23:7c:bc:0f:93:6e:ec:ae:f8:41:74:5e:3f:70:49:18:94:79:91:a4:70:c9:b0:53:d5:e9:e3:45:81:0f

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.jikn.go.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.jikn.go.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.jikn.go.id
jikn.go.id

Other certificates including the domain name jikn.go.id

(limited to 100 certificates)
support.lazycoupons.in
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.netixsolutions.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.wrightwaytech.org
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
helpdesk.avoxis.com
support.fanuccontrolrepair.com
www.jikn.go.id
testkb.infasme.org
diklat.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
helpdesk.avoxis.com
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
helpdesk.avoxis.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
support.netixsolutions.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
support.detect-measure.com
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
www.jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
www.jikn.go.id
sni207491.cloudflaressl.com
service.binmanager.com.au
www.jikn.go.id
www.jikn.go.id
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
www.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
jikn.go.id
www.jikn.go.id
support.fanuccontrolrepair.com
sikn.jikn.go.id
sni207491.cloudflaressl.com
support.fanuccontrolrepair.com
diklat.jikn.go.id
sni207491.cloudflaressl.com
support.nxtgentech.uk
sni207491.cloudflaressl.com
sni207491.cloudflaressl.com

Certificate

The complete raw certificate details for www.jikn.go.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTYMrIIsT7KXzKtzK6jk
+h4YtHmA/UHT5GjA9o/mR6AHqY9fgv1y6FGSPTvtVDNGi8YBMM+zf+REVzWRxxSN
7++aTsB05YeEnokSkHJQcYcSQPNll7n0O2lxzc7sQb+nYhVoTh3ROXvn+RlYdFQ/
y/xsOPApf51/2uvNA4TfFGNk01RMBCkIOw5/Ntld+0iLNlulHdL97dwi0VU0FkSd
OPsiG5zIvBlFMFy+mD808iNhoGWccjJl3POurNiUTLINWPk7bsWBeICkHebZdjmt
SY/2gB8ZXwg1cUo20o4GRY6Ke6IEzuadTtdg94hfYn1SrfL28+Zn/b8wpKbnMxy7
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8132431859320326149256211083499038820
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-01 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DKI Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Selatan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaringan Informasi Kearsipan Nasional'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.jikn.go.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22370832784391189442656595974437828407829234140085093960746534192406077897738444050007302701400029954378319518167798882350414442778253326048343328028261091256965919632257449733461416650863257944152281745900538516635837678995509694867466675245300243771912558012611461647064967806322134633910527522098657887633709001059017943843228887116069265744672388257861431276263804347876562754566957495664767948837811512048471502244046770079118806421487049192574810662909704522796634930136609821126405470949686452882981432086203155404152055458939282240862307696848072435138165572207616697121885473635224949121686341757277260528391
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6ea19ba2e354abd39ba3d7c0f412f4fe455590f1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.jikn.go.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'jikn.go.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001652d3860120000040300473045022100d81fe615537409eb3414d0a3c91e3419167ee2027d462d5cb9f75ed98ce778a102201ebf13c707425b5089037a404b78133fa1fdaddc2fca68a7daee690c149dd1a50076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001652d386084000004030047304502204dbb68e04940859332f4071594753caf276b72dccb0d361d2c341c3385f9eb55022100db26572e2c4f888d1349fb0e491e2ef3a1a70fbd11c3169ffc2c603797066b76
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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