www.vw.com

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 27:66:d6:28:37:ea:c6:e6:00:00:00:00:50:ea:fd:b5 was issued on by Entrust, Inc..

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 27:66:d6:28:37:ea:c6:e6:00:00:00:00:50:ea:fd:b5
Serial Number (int): 52373849737269456942681361581098073525
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 00:e9:9b:34:76:a2:7a:40:be:9d:c2:08:2b:94:98:b0:3c:e7:64:5c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 2f:2d:56:5f:e2:bd:a8:31:98:3f:e2:4c:15:4c:04:e6:34:f0:08:f7
Fingerprint (sha256): 1d:1c:5d:14:bd:0c:b9:5b:03:d6:61:3d:99:4e:ab:63:c2:6e:d8:28:0a:73:9f:c8:3f:71:50:d1:95:a3:5d:8b

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.vw.com

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vw.com
vw.com
cdn.vw.com
www.vwimg.com
www.vwdealer.com
www.vwdealers.com

Other certificates including the domain name vw.com

(limited to 100 certificates)
Revproxypool1.vw.com
owp-int.vw.com
cnp-qa.vw.com
drivergear.vw.com
mdmac.vw.com
magazine.vw.com
access.vw.com
www.volkswagen.ca
ahshuttle.vw.com
b72e13222821ba90.cajwtsign.dev.vw.com
media.vw.com
www.drivergear.vw.com
view.em.vw.com
Revproxypool1.vw.com
rastc.vwgoasra.com
access.vw.com
akamai-san212.exacttarget.com
b-h-m.spc.us00.p.con-veh.net
qa-deploy.vw.com
imperva.com
update.vw.com
imperva.com
Revproxypool1.vw.com
akamai-san156.exacttarget.com
cnws-qa.vw.com
click.cn.vw.com
ows-int.vw.com
cnws-qa.vw.com
cnws.vw.com
parts.vw.com
drivergear.vw.com
vwdesigns.vw.com
cloud.cn.vw.com
akamai-san156.exacttarget.com
cns-int.vw.com
cnp-int.vw.com
www.vw.com
www.vw.com
vwupgvehicle-vcms-api-prod.vw.com
parts.vw.com
vwgoa.vw.com
erwin.vw.com
go.vw.com
vomscarnet.vw.com
erwin.vw.com
smetrics.vw.com
owp-qa.vw.com
rp.vw.com
Revproxypool1.vw.com
vw.vwag-k-iz-temp.vw.com
st-qa.vw.com
USMIAH1VCSE01.vw.com
smetrics.vw.com
dealers.vwemissionsinfo.ca
newsroom.vw.com
closer.vw.com
view.cn.vw.com
www.vw.com
vwgrouplmc.vw.com
www.volkswagen.ca
ws-gw-na.vw.com
myvw-jwtsign-qa.vw.com
odismail.vw.com
ws-gateway-cert.vw.com
cns.vw.com
www.vw.com
ws-gateway-cert-qa.vw.com
ngw6-prod.vw.com
parts.vw.com
cnp-int.vw.com
imperva.com
newsroom.vw.com
parts.vw.com
access.vw.com
cns.vw.com
smartfleet.erl.vw.com
cns-qa.vw.com
access.vw.com
access.vw.com
USMIAH1VCSE02.vw.com
Revproxypool1.vw.com
appsxdev.vw.com
Revproxypool1.vw.com
go.vw.com
recall-qa.vw.com
deploy.vw.com
vwupgvehicle-acms-api-prod.vw.com
www.drivergear.vw.com
smetrics.vw.com
br2.vw.com
carnet.vw.com
clientupdates.vw.com
newsroom.vw.com
b-h-m.spc.us00.p.con-veh.net
vwgoa.vw.com
go.vw.com
akamai-san199.exacttarget.com
qa2-deploy.vw.com
parts.vw.com
st-qa.vw.com

Certificate

The complete raw certificate details for www.vw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+okQYhnXnRqoWIJ0ZDO
gn+linzFJJBlr8PwxeiXH6QtTtmYsWIDC1nZRBkDakv9pqSlsXVH6CxeIDYu8A8Q
ts3Q8rqu8Kdwj14+6uVqbUDV0oLZMVLz2hJH4eaS+sRGlmLUAjs5MggtgZ6dB4B7
4G2ssSz3x8OkX3jUPx5PDnnIOqNF9oqrWyY6cb1ICZRqcz8L6VndnRO+ntHjAcfn
4G2fCqIhAcqGBHPSG7C+01lX+zjBSLSjvLxWduwfoi9ksMcwZc5UEGOThZXirE2H
+0uiNEOXW4bAPXWgKX1BeGBEd+ZUzCoMpGTHF5945WdWFqnPF8+B18TjFr+jCYzY
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 52373849737269456942681361581098073525
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-07 18:50:07 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-09-19 19:20:06 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21702209687695583446578491857845150831003771276910947382203398764739786989405476013526305650603900141153222931210262093007479207636286468658788435276808707046658641212951320099662320586499707686226935673450705775844841315238415799893540638172079078510894922288974341234339041735924039915910917590196800950242168702424235199042876782043822314621474580294308786778933429545260547127525882343409149710858629143244284196629202858076502108664738528133692792768911757687066168747646370394080834466068527650682955071402519939721833439218338320330740353783035283702776998005814373493500467128557076454633985101081139848468701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cdn.vw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwimg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwdealer.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vwdealers.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							01e10075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001678a1ce22300000403004630440220278163f6591db16c43b50fa86aa27acffddd2d55eee1d334ce72207d1557671e0220448fc67caac55d292573bdfdef1efb4e2b1222e7c714ac335fb9585d8a93e8d60077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001678a1ce2310000040300483046022100bfdf1d28ad67ed1a542a425afd702681e23195ed48e6be5234b0e0aa5c5bef36022100d6761a2642f94d224fcfe227308b77ad195179a30dd53254038645b0b8ac5e350077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001678a1ce2630000040300483046022100b1b3d14a8dfdfb6a5d0646fd59cc02a4580428969aaf87e1a77b62a7ee063dce022100d272e7a445799f748aa46016459941e23e84957e3e76eaf9819e4d4efd5d4785007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001678a1ce2280000040300473045022100e3dfa94314159aa5d58b51a9db03987aae61106d3dc38a78713a26c6c436e09302203b0abb56dca62bf07dd14c828eada247c02fb96f295af29b90a39322d0dacd7a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							00e99b3476a27a40be9dc2082b9498b03ce7645c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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