obs.hbwuhan01.gov.huaweicloud.com

- 华为云计算技术有限公司 -

Issued by GeoTrust CN RSA CA G1

About this certificate

This digital certificate with serial number 05:29:68:14:29:59:85:11:70:18:73:67:2a:fd:56:0f was issued on by DigiCert Inc.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

华为云计算技术有限公司

Organization: 华为云计算技术有限公司
State / Province: 贵州省
Country: CN

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:29:68:14:29:59:85:11:70:18:73:67:2a:fd:56:0f
Serial Number (int): 6861135118083645553334681584682227215
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: f3:91:f1:73:b7:10:3c:e1:36:9a:f6:5d:bd:6d:83:b5:7f:08:63:d8
AuthorityKeyId: 91:9f:5e:31:15:ae:10:9f:ad:60:c1:f7:c1:cc:aa:48:34:2f:0c:26

Fingerprint (sha1): 73:4a:39:78:8c:92:9b:bd:31:f1:48:87:2c:fb:76:af:a1:5d:bf:9b
Fingerprint (sha256): 19:0c:f7:4d:83:f6:9e:a4:07:a6:9d:c9:22:d5:76:54:c3:5a:bb:99:d8:67:33:ef:a9:56:6c:b3:1b:ec:39:f6

Issuing Certificate URL: http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt

Revocation information

OCSP Server: http://ocsp.dcocsp.cn
CRL Distribution Point: http://crl3.digicert.com/GeoTrustCNRSACAG1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustCNRSACAG1.crl

Check the revocation status for certificate obs.hbwuhan01.gov.huaweicloud.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for obs.hbwuhan01.gov.huaweicloud.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

obs.hbwuhan01.gov.huaweicloud.com
obs.cn-central-6023.hbwuhan01.gov.huaweicloud.com
obs-website.cn-central-6023.hbwuhan01.gov.huaweicloud.com
*.obs.hbwuhan01.gov.huaweicloud.com
*.obs.cn-central-6023.hbwuhan01.gov.huaweicloud.com
*.obs-website.cn-central-6023.hbwuhan01.gov.huaweicloud.com

Other certificates including the domain name huaweicloud.com

(limited to 100 certificates)
*.ide.huaweicloud.com
*.cn-east-3.huaweicloud.com
obs.luzhouzwy01.gov.huaweicloud.com
redis-2c0a202e-d8f1-42e6-bc0b-9916ec603b75.dcs.huaweicloud.com
opensource.huaweicloud.com
*.cn-north-4.huaweicloud.com
macroverse.huaweicloud.com
roundtable.macroverse.huaweicloud.com
*.apistore.huaweicloud.com
*.huaweicloud.com
eda.fusionplant.huaweicloud.com
*.opensource.huaweicloud.com
*.apic.cn-south-1.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
cn-north-4-octopus.huaweicloud.com
ca-east-201-console-dev.huaweicloud.com
*.naas.huaweicloud.com
*.oob.vss.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.cn-north-219.jrzq.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
*.iotstage.huaweicloud.com
*.apigw.ap-southeast-3.huaweicloud.com
*.developer.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
naas.huaweicloud.com
payment.huaweicloud.com
naas-hk-intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
welink.huaweicloud.com
*.service-sh.ivm.huaweicloud.com
*.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.cdn-vod.huaweicloud.com
*.myhuaweicloud.com
*.oob.vss.huaweicloud.com
console.hcsoecology.huaweicloud.com
naas.huaweicloud.com
*.apigw.cn-east-3.huaweicloud.com
intl.huaweicloud.com
*.apigw.ap-southeast-1.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
south-device.campustest.huaweicloud.com
console.petalpay.huaweicloud.com
*.huaweicloud.com
*.workspace.cn-east-3.huaweicloud.com
*.saas.huaweicloud.com
craftartssim.cn-south-1.huaweicloud.com
intl.huaweicloud.com
*.huaweicloud.com
b2bgo.huaweicloud.com
*.ide.huaweicloud.com
event.huaweicloud.com
*.cn-south-1.huaweicloud.com
sd-wan.huaweicloud.com
*.devcloud.ap-southeast-3.huaweicloud.com
dme.cn-south-4.huaweicloud.com
*.apigw.cn-north-4.huaweicloud.com
obs.hbwuhan01.gov.huaweicloud.com
lab-desktop.huaweicloud.com
cn-north-280-modelarts-label.huaweicloud.com
*.connect.huaweicloud.com
event.huaweicloud.com
*.cdn-vod.huaweicloud.com
education.huaweicloud.com
*.devcloud.cn-north-4.huaweicloud.com
*.apistore.huaweicloud.com
*.apic.cn-north-1.huaweicloud.com
*.coreops.huaweicloud.com
as-south-205-console-dev.huaweicloud.com
*.huaweicloud.com
*.workspace.sa-brazil-1.huaweicloud.com
*.developer.huaweicloud.com
*.apistore.huaweicloud.com
*.cn-north-4.huaweicloud.com
*.developer.huaweicloud.com
bosch-iot-suite.market.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
*.cn-east-201.jrzq.huaweicloud.com
*.coreops.huaweicloud.com
*.devcloud.sa-brazil-1.huaweicloud.com
*.apigw.ap-southeast-2.huaweicloud.com
asset.macroverse.huaweicloud.com
*.developer.intl.huaweicloud.com
sd-wan.huaweicloud.com
*.iotstage.huaweicloud.com
sd-wan.huaweicloud.com
*.apigw.cn-east-2.huaweicloud.com
marketing.huaweicloud.com
fusionplant.huaweicloud.com
*.devcloud.cn-east-3.huaweicloud.com
market.fusionplant.huaweicloud.com
hdc.huaweicloud.com
koosailing.saas.huaweicloud.com
*.apigw.cn-north-1.huaweicloud.com
device-naas3.huaweicloud.com
weuins.naas.huawei.com
*.huaweicloud.com
payment.huaweicloud.com

Certificate

The complete raw certificate details for obs.hbwuhan01.gov.huaweicloud.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtUx9qX8NwfZyXUNbiDFh
bCOUwAIV0omXBR6kiio8oDl75xfUXguxj6035wlK+Wy7ar4nRlVsndxNF5LzPm6w
jOdHyCSVFml62t5Pv+cyJTVRLqQozr+on6MWPqOtBglfztmYBz/Van8x3gVrzLJ/
EGemiN/7JWoxq4ZbR7JiJN4QRL/scKA+Ak1OgfZO2MMiIHTVptX3E3PSTUAmq2a5
YcJJMiD4Srf4OQ+bTSLJCu9L52cYTiU0QMTGnoCk87Z/2BZffrr4qA2eGbiLOYc5
UtppMnZDpCS5sc/trClC2qkrk7gUrOgBK+NXZ4WF5+aU/BCC6h/3a64UyUZrApFO
5QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 6861135118083645553334681584682227215
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust CN RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '贵州省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '华为云计算技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'obs.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22886852251457972788675123865899817562567122045342538422112094270532980832071855915196818282612827486629907525211180261759168624766899998378862240656040097093681143263054728589053880181603910782579476973126706525542522751915265336230941632461463152951117719839116304612342427886795715292422406675364514576116618332231319081866787915348690235875344768930370805473011516339336849452475123662595213493690361731018362739659213058076649829491528079930861102955271233554225075350587728459263176153476130507121620575284369567315998400775366819139704383042386940267695531396395287764008703005441196494651383792483579477446373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 919f5e3115ae109fad60c1f7c1ccaa48342f0c26
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f391f173b7103ce1369af65dbd6d83b57f0863d8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (300 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.cn-central-6023.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs-website.cn-central-6023.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.cn-central-6023.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs-website.cn-central-6023.hbwuhan01.gov.huaweicloud.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustCNRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.dcocsp.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.digicert-cn.com/GeoTrustCNRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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