www.avivapartenaire.ca

Issued by Amazon

About this certificate

This digital certificate with serial number 0d:39:b9:1f:d6:4a:e3:6b:ae:cc:34:e1:84:ec:f4:22 was issued on by Amazon.

With 48 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.avivapartenaire.ca

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:39:b9:1f:d6:4a:e3:6b:ae:cc:34:e1:84:ec:f4:22
Serial Number (int): 17579679634310431599806680679228175394
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: d0:21:f2:e1:b8:fd:2d:a7:c2:09:f0:68:36:2f:f7:ac:91:c8:08:40
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 88:3a:a0:4a:05:f4:7a:8c:9a:17:5a:20:e6:29:ed:05:dc:88:eb:d3
Fingerprint (sha256): 19:81:f0:9a:75:a6:da:ea:c7:cd:49:44:3b:a1:da:40:7f:4e:64:b3:d8:96:73:38:7b:e9:1d:8a:63:d0:b0:06

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate www.avivapartenaire.ca

48

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avivapartenaire.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avivapartenaire.ca
www.aviva-direct.ie
www.43.fpinternational.com
www.avivastaffpension.co.uk
upgrademypension.aviva.co.uk
www.apprentices.aviva.co.uk
www.monaviva.avivaassurance.ca
www.avivasavesmarter.co.uk
www.avantageaviva.com
www.flasfund.co.uk
www.advantageaviva.ca
www.avivatransfer.co.uk
www.protectionetancheaviva.com
www.bcmotorcycle.ca
www.avivahealth.ie
www.myavivastadium.ie
www.ecommunity.aviva.co.uk
www.bcmotorcycle.co.uk
www.bcmotorcycle.net
avivaprivacy.uk
www.avivawellbeingrewards.com
www.avivaadvantage.com
www.riskasyst.ie
vimeo-player.at.aviva.com
www.wlfund.co.uk
www.avivawaterprotection.ca
www.avivastaffpensions.co.uk
www.flcfund.co.uk
www.olab.aviva.com
www.graduates.aviva.co.uk
wlfund.co.uk
www.friendslife.co.uk
www.myavivaflex.co.uk
www.avantageaviva.ca
www.avivaadvantage.ca
www.bcmotorcycle.com
www.protectionavivacontreleau.ca
www.avivadirect.ie
www.library.aviva.com
www.avivawellbeingrewards.co.uk
www.bcmotorcycle.uk
www.autoenrolmentplanner.co.uk
www.protectionavivacontreleau.com
www.advantageaviva.com
www.avivawaterprotection.com
www.protectionetancheaviva.ca
www.myavivastadium.com
www.avivabrand.com

Other certificates including the domain name avivapartenaire.ca

(limited to 100 certificates)
avivaadvantage.com
www.avivapartenaire.ca
43.fpinternational.com
www.avantageaviva.com
avivaadvantage.com
avivahealth.ie
aviva-digital.co.uk
www.bcmotorcycle.com
www.avantageaviva.com

Certificate

The complete raw certificate details for www.avivapartenaire.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4w58lqdfC0dD0d5BdxD
paPF69X9V6s/lFM6nrpFipl1pcbHh/J2PPsEIXdvqgs1TpsOvDvO2P4FrpEckqzM
h2PcIYl9odyNtFvzpXTfLlFeZwp4KI+OfQid368AD8gYo4pldHmPEk9NEy6X75og
CGMDYKWeonlV/ics87fbctKVPJnDuzR2A/Od0OnMUraxnMWNpF2i5POr8BeBRruU
js1XlmFGJ8ZMmRiccR5Ie2Zt4zDDOwiROVhk5R4d6tj0QKVxi816RCZ+IXI4gseH
pVFQ5YScA0u+apX1g9MMyFQJ/V1SDz2kn5hlLtOUlcZcM52qJQy7DajMtpmQ4wPZ
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 17579679634310431599806680679228175394
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avivapartenaire.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23675711221135890503814008190396289563199393762337827598498802821585649358539151403674834874208876765195117575620809998953434397412217782518677434425575552381624595007120676674388341525528129617036602139886828493152240568795520707214627698745312838327946788493237117153756769529484839218337450711131225654591266736722708298729225978941915293807039208203756577487768566851897536908391638838331497137049616973135658445450403865792546692394595189302644742433505625270957176082544280404716707940767070031535101240963701837440639880357980568122633390080267412447216170407017596642423313719067020331489670102139083281389861
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d021f2e1b8fd2da7c209f068362ff7ac91c80840
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1200 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgrademypension.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flasfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecommunity.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaprivacy.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo-player.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flcfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olab.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduates.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivabrand.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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