stage.midol.com
- Bayer Corporation -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 50:d5:83:79 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Bayer Corporation
Organization:
Bayer Corporation
State / Province:
Pennsylvania
Locality: Pittsburgh
Country: US
Locality: Pittsburgh
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 50:d5:83:79Serial Number (int): 1356170105
Serial Number lenght: 31 bits, 4 octets
SubjectKeyId: d9:b9:80:73:e1:16:e3:46:ea:9a:70:f3:50:94:02:6a:99:95:d0:8a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 45:04:d4:1b:bc:ca:ec:d7:59:30:de:39:9c:e1:88:41:1f:c1:3b:93
Fingerprint (sha256): 16:6f:bc:64:1e:a7:5f:92:21:15:c8:24:fa:ff:cf:92:17:5f:8d:e8:0f:8a:fe:52:1f:3b:9d:70:ef:d4:e9:22
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate stage.midol.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for stage.midol.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
stage.midol.com
Other certificates including the domain name midol.com
(limited to 100 certificates)
www.midol.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
stage.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
midol.com
midol.com
sanssl1.bayer.com
midol.com
stage.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
sanssl1.bayer.com
midol.com
www.midol.com
midol.com
midol.com
www.midol.com
aleve.com
www.myfinacea.com
midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.myfinacea.com
sanssl1.bayer.com
sanssl1.bayer.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
sanssl1.bayer.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
stage.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
midol.com
midol.com
sanssl1.bayer.com
midol.com
stage.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.midol.com
www.myfinacea.com
www.myfinacea.com
www.midol.com
www.midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
sanssl1.bayer.com
midol.com
www.midol.com
midol.com
midol.com
www.midol.com
aleve.com
www.myfinacea.com
midol.com
www.myfinacea.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
www.myfinacea.com
sanssl1.bayer.com
sanssl1.bayer.com
www.midol.com
www.midol.com
www.midol.com
www.midol.com
sanssl1.bayer.com
Certificate
The complete raw certificate details for stage.midol.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFIzCCBAugAwIBAgIEUNWDeTANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTA5MjkxODE4MzVa Fw0xNzA5MzAwNDM2MDhaMG8xCzAJBgNVBAYTAlVTMRUwEwYDVQQIEwxQZW5uc3ls dmFuaWExEzARBgNVBAcTClBpdHRzYnVyZ2gxGjAYBgNVBAoTEUJheWVyIENvcnBv cmF0aW9uMRgwFgYDVQQDEw9zdGFnZS5taWRvbC5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQDFR8yRyiDDnYqctTFa5ZkuPsIMQmbxDH9YdV4PauiY jZeVzm71eVmqdDIKERQzQiU/ptM12nMsLVoXl11EghdT31isX/QaXZRmY2JTxPR3 oV6zNHQZl155tb60N3AFXiUkktK8kO9A/mvoZYtNnYCGGbysi8ITZ7ac6O2eKoRb lAEC1VCucfwE0eS187ZH4SHKOBSUouKTlPEsJI5fimgpHBkQcezUNN7cnntMf2/e hjiCq7yDoWJUZZr2A75dlJqsutyjOEncs15f4cH6sEFNx/En73Nm8niJdoVoOTQw uojsVsc0jKvHgix8036XNy0pxiPVoSBrnBEhvPuHwYFjAgMBAAGjggF5MIIBdTAL BgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwMwYDVR0fBCwwKjAooCag JIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNybDBLBgNVHSAERDBC MDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0 Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYX aHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEu ZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAaBgNVHREEEzARgg9zdGFnZS5t aWRvbC5jb20wHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0O BBYEFNm5gHPhFuNG6ppw81CUAmqZldCKMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQEL BQADggEBABjthENAtzW6kIfq05Av7HB8viPFz7g2r844+qG+TOc2vEjQdB1fRdM0 UYWi16W1FwMZdKwPOYtzzyC1Uon0aVEsdiUI/TdHKf+aS4JCe5xMWLQjkRHO+uGb GN1fYnRinyBbZjyj7GUhUNErSAq4ROYs/hP0Nrj//jtIdegOqAAISwIw0eRGhT9y zU1WIXkgBAQXIsSQd2HdYWDnsFhn7Ytg/IxsOpYEk4GzYPDyhzLG8/LVL/wz2QRW 01E77oYnV0tKLnz9CquT5CyviN/vetKnNw1CyTxVwcdYvp/cLtE3wKcg4dLRGNGI hFnuchnha6P9WhB5AIThBvoMugLVWlQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUfMkcogw52KnLUxWuWZ Lj7CDEJm8Qx/WHVeD2romI2Xlc5u9XlZqnQyChEUM0IlP6bTNdpzLC1aF5ddRIIX U99YrF/0Gl2UZmNiU8T0d6FeszR0GZdeebW+tDdwBV4lJJLSvJDvQP5r6GWLTZ2A hhm8rIvCE2e2nOjtniqEW5QBAtVQrnH8BNHktfO2R+EhyjgUlKLik5TxLCSOX4po KRwZEHHs1DTe3J57TH9v3oY4gqu8g6FiVGWa9gO+XZSarLrcozhJ3LNeX+HB+rBB TcfxJ+9zZvJ4iXaFaDk0MLqI7FbHNIyrx4IsfNN+lzctKcYj1aEga5wRIbz7h8GB YwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1356170105 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-29 18:18:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-30 04:36:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pennsylvania' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pittsburgh' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayer Corporation' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stage.midol.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24904351533891991433934298298939320362334375700621258180364893332945978750470078563175925634910459033162303740431863643758401004575527303548151831539908368635432119264757710195831947310394781848838752872181067032761121437515761134484069702771199520559188810470243601547555339608916773366477028046300857147414959331719392662794487363868691415838254074793863405761801846346544426202214814148402127693904959326770355334016521032128143310320725881951397941352393251020282484811502672461460421153924106499107020902415016061047109110241524688650057413878533171662000236449828094735450201888829823562607848286776184600101219 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stage.midol.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d9b98073e116e346ea9a70f35094026a9995d08a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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