acs.newsint.co.uk

- News UK and Ireland Limited -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0f:e0:ad:ac:5e:32:a5:86:bc:fa:65:27:e7:cb:a0:0e was issued on by DigiCert Inc.

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

News UK and Ireland Limited

Organization: News UK and Ireland Limited
Organization unit: PROD_ACS
Locality: London
Country: GB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:e0:ad:ac:5e:32:a5:86:bc:fa:65:27:e7:cb:a0:0e
Serial Number (int): 21105016946343742564935200978762440718
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: f7:71:49:5f:2f:d1:89:5e:69:92:9b:e4:8d:c0:bd:27:82:0f:fa:69
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 99:1a:ee:22:fa:52:0c:fa:58:b8:98:b2:42:fb:94:a0:35:d2:06:9c
Fingerprint (sha256): 19:fa:fc:82:7f:0b:df:7a:29:86:6c:27:38:6b:82:30:90:5a:cf:19:6c:91:2d:5d:6a:60:02:eb:f0:98:d7:5a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate acs.newsint.co.uk

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for acs.newsint.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

acs.newsint.co.uk
login.thesun.co.uk
login.thesun.ie
login.thetimes.co.uk
login.thescottishsun.co.uk
login.thesundaytimes.co.uk
login.the-tls.co.uk
capi.newsint.co.uk
login.timesmembership.com
login.page3.com
api.news.co.uk
login.mytimesplus.co.uk
login.0x69416d.co.uk
login.dreamteamfc.com

Other certificates including the domain name newsint.co.uk

(limited to 100 certificates)
remote.newsint.co.uk
newserpqas.newsint.co.uk
pim.newsint.co.uk
feeds.newsint.co.uk
ref.newsint.co.uk
newseccqas.newsint.co.uk
acs.newsint.co.uk
acs.newsint.co.uk
wfh.newsint.co.uk
training-xchange.newsint.co.uk
*.dev.nukcdn.com
pvlomspac03-pim.newsint.co.uk
datafeeds.newsint.co.uk
*.newsint.co.uk
wfh.newsint.co.uk
acs-staging.newsint.co.uk
capi-dev.newsint.co.uk
mogel.dev.newsint.co.uk
*.dev.nukcdn.com
feeds.newsint.co.uk
newseccdev.newsint.co.uk
feeds.newsint.co.uk
*.dev.nukcdn.com
iam.wpng.newsint.co.uk
join.newsint.co.uk
newsint.co.uk
diy.newsint.co.uk
remote.newsint.co.uk
acs.newsint.co.uk
ref.newsint.co.uk
ref.newsint.co.uk
*.stag.nukcdn.com
acs-staging.newsint.co.uk
acs-staging.newsint.co.uk
newserpqasec.newsint.co.uk
join.newsint.co.uk
mogel.newsint.co.uk
feeds.newsint.co.uk
acs.newsint.co.uk
acs-staging.newsint.co.uk
newsportal.newsint.co.uk
newsecc.newsint.co.uk
*.dev.nukcdn.com
adfs1.auth.newsint.co.uk
newserpqasec.newsint.co.uk
*.dev.nukcdn.com
newserpqasec.newsint.co.uk
join.newsint.co.uk
www.newsint.co.uk
stg-chp.newsint.co.uk
www.advertising.newsint.co.uk
www.advertising.newsint.co.uk
remote.newsint.co.uk
newsportalqas.newsint.co.uk
tvlolxaise01.newsint.co.uk
join.newsint.co.uk
tvlolxaise02.newsint.co.uk
secure.newsint.co.uk
acs-staging.newsint.co.uk
chef-prod.newsint.co.uk
acs-staging.newsint.co.uk
*.newsint.co.uk
pim.newsint.co.uk
remote.newsint.co.uk
pvlolxpisn04.newsint.co.uk
*.dev.nukcdn.com
*.nukcdn.com
newserpdev.newsint.co.uk
pvlolxpisn06.newsint.co.uk
join.newsint.co.uk
crmso-staging.newsint.co.uk
*.dev.nukcdn.com
acs.newsint.co.uk
*.newsint.co.uk
ak-crmso-hotfix.se.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
newsportaldev.newsint.co.uk
newskey.newsint.co.uk
*.dev.nukcdn.com
remote.newsint.co.uk
acs.newsint.co.uk
afp.newsint.co.uk
newseccqas.newsint.co.uk
newserpqasec.newsint.co.uk
feeds.newsint.co.uk
newseccdev.newsint.co.uk
crmso.newsint.co.uk
ref.newsint.co.uk
mogel.dev.newsint.co.uk
acs.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
remote.newsint.co.uk
newserp.newsint.co.uk
acs.newsint.co.uk
chefauto-prod.newsint.co.uk
*.dev.nukcdn.com
join.newsint.co.uk
newserpdevec.newsint.co.uk

Certificate

The complete raw certificate details for acs.newsint.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRFJsKJt0oIMdVSHE69r
xHwoES/vmKvOWMvCx74gcSlzwBQO22L+erM1A+NHST0MWQ0IsDkydeMQ0y5wEltk
k3xP7htDRdsMQTMwS9vZ+8AGyccGdn90AeC9GgfUvURyQ+HV4rrqpdOdRVy9FdQN
nT0pRflIi+sRm5I5mFJEBNvtMk+BlzzYbEn6onUdBZ7oyArj6jjze/6NEos3dMMH
TmkVU4vaq6eRcdOKI0G1dyVcoPCkgoAjDrzWfgP8/+tlNW1ON91qn5QPATx8d5Ce
d6b7qpu6zR59iMm095w6SmLvdT4iQAXnLWpVuwDWEfjSvoloub9OhiC++MnIDjas
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21105016946343742564935200978762440718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-20 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'News UK and Ireland Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PROD_ACS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'acs.newsint.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21342798496557414447219237315266893591276889835860305255493837503809803963106323520655395792643184275570351733201422640950300581691148343648025186755998096998918428072632165493985141259929630540741411712557763335171005547362176601201418781422071493841465344479530067059912547118523970900142414325115923152648981294095330155239808837540679927773356154964312983543049875809486828598558320408461282493813763742484985350692657442898044375787485808403859915510355704805750711523478533409232731187748653265385958320764620007120978638525012337611214747193747307481098539139609874653092864504634945233679088553376808883891213
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f771495f2fd1895e69929be48dc0bd27820ffa69
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (309 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'acs.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesun.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thetimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thescottishsun.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.thesundaytimes.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.the-tls.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'capi.newsint.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.timesmembership.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.page3.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.news.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.mytimesplus.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.0x69416d.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'login.dreamteamfc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b813fe9e60000040300473045022100f922dc7084aa72fd17ea87452ebbdc7906c5f6f78c6ca30763fece3adf44c20302206eae582f2151cd76e3a82005dde6c2fd3dedb554c56747eb66f8ea5247e837650077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b813fea810000040300483046022100a6ca5bda79f56c2ea43939887029ff3e065e4a48ad6ec4c68f66ce1fc2bcea4e022100dd5c6c8c8d28657d0c225885a713e91ea63f9ba2e42aaf3271c8e785ff57ba4c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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