*.obs.ctyun.cn

- 天翼云科技有限公司 -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 05:19:5e:7d:af:06:89:a2:86:83:d7:95:7d:72:2e:6d was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

天翼云科技有限公司

Organization: 天翼云科技有限公司
State / Province: 北京市
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:19:5e:7d:af:06:89:a2:86:83:d7:95:7d:72:2e:6d
Serial Number (int): 6777863904578787831220943688559636077
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 8c:69:0d:01:a9:60:64:74:16:53:8b:36:1b:62:28:2d:df:35:25:cd
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): 23:0f:d5:8a:d4:05:16:78:0c:29:d6:42:63:9e:79:6a:4e:cd:e8:2a
Fingerprint (sha256): 18:e9:89:b4:e7:6f:df:92:c4:58:9f:35:63:8c:85:35:79:92:65:89:d5:80:25:e3:41:79:c6:cf:a4:0c:0a:e8

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate *.obs.ctyun.cn

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.obs.ctyun.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.obs.ctyun.cn
*.obs.cn-north1.ctyun.cn
*.obs-website.cn-north1.ctyun.cn
obs.cn-north1.ctyun.cn
obs-website.cn-north1.ctyun.cn
obs.ctyun.cn

Other certificates including the domain name ctyun.cn

(limited to 100 certificates)
*.tjoss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.nm2oss.xstore.ctyun.cn
*.cqoss.xstore.ctyun.cn
*.hangzhou7.zos.ctyun.cn
*.hubei-41-website.zos.ctyun.cn
*.js2oss.xstore.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.ctyun.cn
*.ahoss.xstore.ctyun.cn
*.yichang2.website.zos.ctyun.cn
*.shandong-20.zos.ctyun.cn
*.snoss.xstore.ctyun.cn
*.ctyun.cn
*.xinan2-website.zos.ctyun.cn
*.shanghai-7.zos.ctyun.cn
*.liveplay.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hn6oss.xstore.ctyun.cn
*.hainan-2.zos.ctyun.cn
*.jiujiang-2.zos.ctyun.cn
*.huaihua1.zos.ctyun.cn
*.guangxi-5.zos.ctyun.cn
*.vaas.ctyun.cn
*.zhejiang-4.zos.ctyun.cn
*.ctapi.ctyun.cn
*.hb5oss.xstore.ctyun.cn
*.xinan2.zos.ctyun.cn
ctyun.cn
*.obs.ctyun.cn
*.hubei-41.zos.ctyun.cn
*.xzoss.xstore.ctyun.cn
*.yunnan-2.zos.ctyun.cn
*.sn2oss.xstore.ctyun.cn
*.changzhou3.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.ynoss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.gx3oss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
*.gzoss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.hn5oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
ctyun.cn
*.jiangsu-10.zos.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.shenyang8-website.zos.ctyun.cn
*.ctyun.cn
*.changsha42-website.zos.ctyun.cn
*.zhanjiang2.website.zos.ctyun.cn
*.jx2oss.xstore.ctyun.cn
*.guangdong-3.zos.ctyun.cn
*.snxaoss.xstore.ctyun.cn
*.sichuan-2.zos.ctyun.cn
*.huabei-2-website.zos.ctyun.cn
*.huaihua1.website.zos.ctyun.cn
*.nantong2-website.zos.ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.cq2oss.xstore.ctyun.cn
*.sxoss.xstore.ctyun.cn
*.beijing9.zos.ctyun.cn
*.ah3oss.xstore.ctyun.cn
*.zhengzhou5-website.zos.ctyun.cn
*.zj3oss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.suzhou3.zos.ctyun.cn
*.guangxi-5-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.shoss.xstore.ctyun.cn
*.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.taiyuan4-website.zos.ctyun.cn
*.hloss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.hioss.xstore.ctyun.cn
*.liaoning-5.zos.ctyun.cn
*.wulumuqi27-website.zos.ctyun.cn
*.shandong-20-website.zos.ctyun.cn
*.hubei-4.zos.ctyun.cn
*.yunnan-2.zos.ctyun.cn
naas.huaweicloud.com
*.xiangyang2.zos.ctyun.cn
*.hunan-4.zos.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.gz4oss.xstore.ctyun.cn
*.nm4oss.xstore.ctyun.cn
*.hboss.xstore.ctyun.cn
*.cn-nmhh1.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.chongqing-2.zos.ctyun.cn
*.nanchang5.zos.ctyun.cn
*.hn3oss.xstore.ctyun.cn

Certificate

The complete raw certificate details for *.obs.ctyun.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRUyMYW4zwXMdqAE2Od5
ovgCvKCR/Y09Yr/qwC4xLOpYeY2Yl1fHvV3tIO76bViVlEuB9YksLXb9R2oHY4+V
SR2dSfo2Um0rHXE91vuMbkfbJG3X8CNS9PcRKkwtyhY8mtRGWdv1rM2lRReJAYkh
F2ULodbMCYi0Tncj3m0pXvSUQzwPc7z97qnrdwsstMwL0g2O3Hp/wavMc/C8No7e
C8pctPmxToJkN+xEYstnUJUouG8ubYQXZQkpGF8Ph69mx3iHhE0RTEt421jhV3FL
pvrxrDfS8kccNmBCLr9pef4yrE+vViAd9P5WYdj1CqRBxPDOX85aBjgBQAyEGQ7Y
EwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6777863904578787831220943688559636077
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-22 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '天翼云科技有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.obs.ctyun.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24879398249076600561243560707946044995346206414285701038335435276650703497992412356022404798052761316493959621831102021229090624379377438495244632305445420842246473623079230792108652591598325146676839191253542545220012863957876343095530645974846574703636651814274887800326589135994220497797029714355858289445833376735289071850828081633834303169193100927916214163377974323253129717653457390232779403674737386981501045360556917409013481515421075035437387041396998376084996427855557428362815456848238450459841750781701592055897447910551680188997225274393596728416527872977904188015377412240057588412944876825850330142739
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8c690d01a960647416538b361b62282ddf3525cd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.cn-north1.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs-website.cn-north1.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.cn-north1.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs-website.cn-north1.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.ctyun.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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