www.payumoney.com

- PayU Payments Pvt Ltd -

Issued by GeoTrust EV RSA CA G2

About this certificate

This digital certificate with serial number 0c:ef:98:6f:cc:e3:9d:ba:aa:45:51:51:44:fe:fe:5f was issued on by DigiCert Inc.

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

PayU Payments Pvt Ltd

Company registration number: 293037
Organization: PayU Payments Pvt Ltd
State / Province: Haryana
Locality: Gurugram
Country: IN

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0c:ef:98:6f:cc:e3:9d:ba:aa:45:51:51:44:fe:fe:5f
Serial Number (int): 17194786682604721434818811467743034975
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 64:70:65:75:58:08:82:54:5b:18:ec:d4:2b:c4:24:2a:f2:92:88:5a
AuthorityKeyId: 28:d2:cf:ee:09:84:75:dd:b5:b2:b5:bf:3c:d5:a0:c6:73:88:5d:1f

Fingerprint (sha1): 6b:e5:3a:91:8e:5a:1f:94:43:d4:39:1f:51:78:d3:2b:4d:2c:7c:44
Fingerprint (sha256): 18:19:ba:cb:2c:4d:0b:d1:73:2f:01:b7:31:ed:55:f8:38:9b:cb:ad:96:35:c3:50:d4:3b:b2:01:a6:ff:02:1c

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustEVRSACAG2.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustEVRSACAG2.crl

Check the revocation status for certificate www.payumoney.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.payumoney.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.payumoney.com
ux.payumoney.com
www.pmny.in
file.payumoney.com
www.payunow.com
pay.payumoney.com
asi.payumoney.com
blog.payumoney.com
sendy.payumoney.com
onboarding.payumoney.com
onboarding.payunow.com
media.payumoney.com
pp58media.payumoney.com
test.payumoney.com
payumoney.com

Other certificates including the domain name payumoney.com

(limited to 100 certificates)
www.payumoney.com
www.payumoney.com
secure.payu.in
*.payumoney.com
www.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
secure.payu.in
*.payumoney.com
secure.payu.in
*.payumoney.com
testfile.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
secure.payu.in
testpay.payumoney.com
secure.payu.in
secure.payu.in
testfile.payumoney.com
secure.payu.in
register.payumoney.com
*.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
www.payumoney.com
www.payumoney.com
secure.payu.in
www.payumoney.com
register.payumoney.com
testfile.payumoney.com
*.payumoney.com
register.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
asi.payumoney.com
www.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
mobiletest.payumoney.com
register.payumoney.com
secure.payu.in
www.payumoney.com
secure.payu.in
secure.payu.in
testpay.payumoney.com
secure.payu.in
register.payumoney.com
www.payumoney.com
secure.payu.in
*.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
www.payumoney.com
www.payumoney.com
*.payumoney.com
secure.payu.in
secure.payu.in
secure.payu.in
www.payumoney.com
asi.payumoney.com

Certificate

The complete raw certificate details for www.payumoney.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5qDWSHjde0WYWLprJmXk
o+h5cdcOyNFIgbDW4mVV7y+jDAAPAySr+3yk3sIEPedtIv7A56N9hEwQMKd9T8+9
aRNv8oD0nHfNxc/4rnamSIkk9uI3MbzihJw3aBhOz2d3HF6qjGGw+4fuxqIOaiAe
nwUNIhub9Zmh/K0P4nE1QUW6idEjPN82nwpelr0ZBmSwjc4myIoQxGVqcIaHK0jt
O5UB+/oSmBoJVAvkOtsvOXYKEpDsSu7GFe75eChbBoqmskimbJ5jKk26NpICXvWo
oXpt30poa/wjsDHvWx16f6fZNfo3zhxarCvkzma3mkzzlis40d/3zfgIAIJaCXYH
kwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17194786682604721434818811467743034975
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust EV RSA CA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '293037'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Haryana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gurugram'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PayU Payments Pvt Ltd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.payumoney.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29114121844250543710305811015988041980459307063066719486927301678549408601207256512987003360774715677092293494210673323391206362624907893710196260051978810958745980462155927542158747931317899792392482670971324551554117380094420747709598500954644044543264601687124472204334979485781223933902250286747302468560890779311933506107476717826907729914958247538110603474014656939600702161305226336930218613889938859966631940144013127309337996736442560568750952230584136028553860453547892701613299245750830933597253013746012715366299440023265202353391141378639794115329099180738721913716140087353362131100990213414571484776339
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28d2cfee098475ddb5b2b5bf3cd5a0c673885d1f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							64706575580882545b18ecd42bc4242af292885a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (301 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ux.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.pmny.in'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'file.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.payunow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pay.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'asi.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sendy.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'onboarding.payunow.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'media.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pp58media.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.payumoney.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'payumoney.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustEVRSACAG2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustEVRSACAG2.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0087295a57303a0845ffa7d53b2c61f5062a1b57572354d9972af34ff4418490905ea303cac6e9c1a7049bffd86a131b44f7805fe52403c5f306d3a6a2b24796ee717c71ef799415813fa99c3edf93b451d6aed8891fba8095a42c89955e1c3b1980f708986e3190e270ab28bc5f81b16dff4ad294fab20164ad94807620406e64fc3611491f33963bbf009a1073a91db369e5174587e139136894117fb47d29f9c7866d011ed966104d7dd019ec31e9f7b2daff2b928defe8cf1dbda8d259f97e026f8db1b6225feb3a4a73ab30d3e047be211ba4843c6af02e14cc66b6929f11475ace1ae012be334e442f2669e71f196ddf0939a52012796cea41bd326e2ea9