eclaplp00193la.tfayd.com

- NBCUniversal, LLC -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 04:3e:f6:10:8c:e0:3b:dc:00:00:00:00:50:f5:cf:55 was issued on by Entrust, Inc..

With 12 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

NBCUniversal, LLC

Organization: NBCUniversal, LLC
State / Province: New York
Locality: New York
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3e:f6:10:8c:e0:3b:dc:00:00:00:00:50:f5:cf:55
Serial Number (int): 5643825172380904780225983617183371093
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 33:74:07:49:ab:ef:cc:16:40:ab:d5:d0:8a:f3:2c:ee:c1:c7:74:05
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 97:85:2a:b3:6a:16:59:0e:3f:86:2e:8b:ed:d5:cd:51:05:7c:7a:19
Fingerprint (sha256): 1c:b8:f2:f6:02:5d:60:22:a4:fe:7d:22:dd:39:f1:79:57:bb:3a:e3:91:12:ba:70:be:80:f1:65:20:c1:c1:5f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate eclaplp00193la.tfayd.com

12

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eclaplp00193la.tfayd.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eclaplp00193la.tfayd.com
prodlookupldap.inbcu.com
aoaprodlookupldap.inbcu.com
ushprodlookupldap.inbcu.com
prdconsumer.inbcu.com
aoaprodconsumer.inbcu.com
ushprodconsumer.inbcu.com
eclaplp00193lb.tfayd.com
ushaplp00647la.tfayd.com
ushaplp00647lb.tfayd.com
eclaplp00194la.tfayd.com
ushaplp00648la.tfayd.com

Other certificates including the domain name tfayd.com

(limited to 100 certificates)
mail.inbcu.com
sgjamf.inbcu.com
galaxychicago.tfayd.com
stmsavx.tfayd.com
eclapls00029la.tfayd.com
stg-shareconnector-vera.tfayd.com
ukromapwp228.tfayd.com
nbcumail.inbcu.com
eclaplp00193la.tfayd.com
ostnnvredit.inbcu.com
stmsavx.tfayd.com
emdteradici1.tfayd.com
anywhereecdev.nbcuni.com
aoawswp00109la.tfayd.com
dmeasperaconsole.tfayd.com
duoproxy.inbcu.com
phiapwpdlw001.tfayd.com
mail.inbcu.com
newsarchive.inbcu.com
orl-glfcrp-vpn01.net.tfayd.com
appportal-prod.tfayd.com
ECZWSWS00007.DMZ.TFAYD.COM
nbcumail.inbcu.com
mydesktop.tfayd.com
lxny.tfayd.com
eclaplp00193la.tfayd.com
eclaplp00193la.tfayd.com
nbcumail.inbcu.com
stg-adc-vera.nbcuni.com
usexpe-w.nbcuni.com
salt.tfayd.com
ediscoveryid.tfayd.com
lxla.tfayd.com
enpsktdomobile.tfayd.com
*.grid.tfayd.com
duoproxy.stg.inbcu.com
nbcumail.inbcu.com
newsarchive.inbcu.com
usexpe-w.nbcuni.com
nexus.inbcu.com
nbcumail.inbcu.com
salt-stg.tfayd.com
idmpsu.inbcu.com
shareconnector-vera.tfayd.com
*.asz.dmz.tfayd.com
ushifwp00126.tfayd.com
nbcumail.inbcu.com
mdcapwp00057.tfayd.com
aoawswp00109la.tfayd.com
anywhereecdev.nbcuni.com
nexus.inbcu.com
hpam.inbcu.com
nexusstg.inbcu.com
storm.inbcu.com
*.asz.dmz.tfayd.com
cmpiaasm.inbcu.com
aoaaplp00070.tfayd.com
duoproxy.inbcu.com
ecbomgar.tfayd.com
eclapls00029la.tfayd.com
salt.tfayd.com
galaxychicago.tfayd.com
nbcumail.inbcu.com
*.asz.dmz.tfayd.com
certhub-stg.nbcuni.com
mail.inbcu.com
mail.inbcu.com
mail.inbcu.com
anywherewc.cloudc.net.tfayd.com
*.asz.dmz.tfayd.com
appportal-stg.tfayd.com
storefront.tfayd.com
jamfproxy01p.inbcu.com
ushiflp00078.tfayd.com
ushifwp00127.tfayd.com
eclapls00029la.tfayd.com
defaultsni.inbcu.com
nexus.inbcu.com
cmpiaasw.inbcu.com
galaxychicago.tfayd.com
nbcumail.inbcu.com
UKROMAPWP278.tfayd.com
ecbomgar.tfayd.com
eclapls00029la.tfayd.com
certhub-stg.nbcuni.com
satellite-east.inbcu.com
eclapls00029la.tfayd.com
cmp.inbcu.com
nbcumail.inbcu.com
*.asz.dmz.tfayd.com
duoproxy.stg.inbcu.com

Certificate

The complete raw certificate details for eclaplp00193la.tfayd.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMRmaorRewxLCJi7Oee1
ukds1ia3lJPmXtFDxwnUc0qPqWm04OfhtpxXAWGOD8MxjxOnEYqsBStt0t5lQXg0
wCPFUf9g/UQI5MCWlh1p1rELYD7nAa+CpKev+Ch4mkEr9Ye68aoDUMfKPJyMO7d3
iFIo2R90Zo0gHRPZbYYz6qgKJxJg37jADbq5yy7qhDBaV/6tlO8gzzvVg/0fADTc
u3Hw3HFid9o2aZWjKrgkU4WKzcHYXSxolpqRDpo1CwuKvddD44M8VDjIHteW6J6y
JTl0EMnlDqEVHLTpO5uiPNvj9vqPQ8wfzAU9hqUoCDKycb2teon1UZp0i99op2le
JwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5643825172380904780225983617183371093
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 14:09:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-14 14:39:57 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eclaplp00193la.tfayd.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20799930495192730957094198383349172188529443408992661733874547493059545695556049653196377034514573210018172399520963803986500273219067980084421036945542279501099157530977850846244306534301512625620616347283801762940795043051904936394198633016647658375024531249878607830453802590543758184678757315024509848390425066636910160790201832245360194339859730485644817461319570924726324620439106160949789256459902531019205711015776343325437531738691766816320269852110395656456071207672925922353990087915607940008384769939607411097314556677308551816146252792941617220661479502648660500371866862052858370907389454434659574832679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (321 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaplp00193la.tfayd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prodlookupldap.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoaprodlookupldap.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushprodlookupldap.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'prdconsumer.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aoaprodconsumer.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushprodconsumer.inbcu.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaplp00193lb.tfayd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushaplp00647la.tfayd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushaplp00647lb.tfayd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eclaplp00194la.tfayd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ushaplp00648la.tfayd.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							33740749abefcc1640abd5d08af32ceec1c77405
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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