shop.schoology.com

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0b:1e:d2:44:de:2c:e4:86:c0:2e:e9:36:94:2b:67:8c was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=shop.schoology.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:1e:d2:44:de:2c:e4:86:c0:2e:e9:36:94:2b:67:8c
Serial Number (int): 14781541621681881353233489258330417036
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:cb:1b:01:fd:60:03:9d:9e:1b:97:3c:1c:c9:28:44:24:36:1f:3f
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 94:b8:ce:69:76:ba:6c:17:54:25:3a:90:44:64:36:b1:e8:58:de:86
Fingerprint (sha256): 1d:20:db:30:1d:ab:48:a5:02:f1:fa:c9:2a:a9:f9:8a:50:bf:d8:52:ac:d9:ce:74:68:e5:58:8f:4e:64:74:6a

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate shop.schoology.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for shop.schoology.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

shop.schoology.com

Other certificates including the domain name schoology.com

(limited to 100 certificates)
cyberevents.teamascend.com
dns-vetting2.map.fastly.net
*.schoology.com
*.schoology.com
clientservices.schoology.com
schoology.com
*.schoology.com
*.app.schoology.com
k.ssl.fastly.net
dns-vetting2.map.fastly.net
k.ssl.fastly.net
schoology.com
dns-vetting2.map.fastly.net
k.ssl.fastly.net
imperva.com
f3.shared.global.fastly.net
*.schoology.com
*.schoology.com
cyberevents.teamascend.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
ecommunity.status.dex.care
acquia-sites.com
f3.shared.global.fastly.net
ecommunity.status.dex.care
*.schoology.com
imperva.com
k.ssl.fastly.net
*.schoology.com
dns-vetting2.map.fastly.net
dns-vetting2.map.fastly.net
acquia-sites.com
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
imperva.com
champions.schoology.com
f3.shared.global.fastly.net
c2.shared.global.fastly.net
c2.shared.global.fastly.net
*.learnosity.schoology.com
imperva.com
schoology.com
c2.shared.global.fastly.net
k.ssl.fastly.net
acquia-sites.com
*.learnosity.schoology.com
incapsula.com
c2.shared.global.fastly.net
info.schoology.com
schoology.com
k.ssl.fastly.net
f3.shared.global.fastly.net
champions.schoology.com
schoology.com
support.schoology.com
c2.shared.global.fastly.net
ustats-app.schoology.com
schoology.com
f3.shared.global.fastly.net
ecommunity.status.dex.care
*.learnosity.schoology.com
*.schoology.com
cyberevents.teamascend.com
acquia-sites.com
acquia-sites.com
*.schoology.com
schoology.com
f3.shared.global.fastly.net
enterprise.status.secomea.com
ecommunity.status.dex.care
*.schoology.com
k.ssl.fastly.net
imperva.com
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
dns-vetting2.map.fastly.net
champions.schoology.com
dns-vetting2.map.fastly.net
f3.shared.global.fastly.net
events.schoology.com
dns-vetting2.map.fastly.net
k.ssl.fastly.net
shop.schoology.com
k.ssl.fastly.net
f3.shared.global.fastly.net
schoology.com
ecommunity.status.dex.care
f3.shared.global.fastly.net
*.schoology.com
c2.shared.global.fastly.net
acquia-sites.com
k.ssl.fastly.net
*.schoology.com
*.app.schoology.com
cyberevents.teamascend.com
k.ssl.fastly.net
cyberevents.teamascend.com
*.schoology.com

Certificate

The complete raw certificate details for shop.schoology.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgIQCx7SRN4s5IbALuk2lCtnjDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xOTA5MjUwMDAwMDBaFw0yMTA5MjQxMjAwMDBaMB0xGzAZBgNVBAMTEnNob3Au
c2Nob29sb2d5LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKUe
vFwkB8txpYUeftQ0ggUzOpmCYcGKvw9F8INT2Acx3U7rD87mz20iC1h/AiPSzkHm
uJc8XuiM3+HrN07gqitjnItkr1tCnniMBOcg6qc3rDcWOcnrl+wNu9ekGK/KexGi
xbtrzxRRh13PVSxbk/cl3SpcXMjEBcfSkW+ixxKRCS1porfKucuU7Ij3PaAg6Wpg
ogOV/xgVvo3gKn0Zm/gJKxzqUffHt8bTJi6wV+ERyJ1o9qYibhkXLM/nW95wgbb5
NZeqigTe7lCTI1QN3nk6IIxUfXvTaIYp06ECUpr9l6ZVn8e1Az2xxnKhgvR2lgFD
nDP8TC7UDxBnnD5ydt8CAwEAAaOCAyUwggMhMB8GA1UdIwQYMBaAFJBY/7CcdahR
VHex7fKjQxY4nmzFMB0GA1UdDgQWBBQ5yxsB/WADnZ4blzwcyShEJDYfPzAdBgNV
HREEFjAUghJzaG9wLnNjaG9vbG9neS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRw
Oi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0g
BEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGln
aWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUF
BzABhhpodHRwOi8vc3RhdHVzLmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0
cDovL2NhY2VydHMuZ2VvdHJ1c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJ
BgNVHRMEAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwC72d+8H4pxtZOU
I5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAW1phDktAAAEAwBIMEYCIQDkAjr6rrdJ
8NNtRMzsKRvJIsi5XRE+LbNPbCbXrTUlLAIhAI1Vkd0nLU5fNH5HIea0sNSb4bWY
GpBFINiJurY2R0o/AHUAh3W/51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8A
AAFtaYQ5gwAABAMARjBEAiBDaiOXc33dhLNXAoHW0tmvUpekjPc+VpL9DTIyIqYb
MAIgbOkDn0TfMIxtrncWwtLF7lzms2fp/fWnEEPZSt05ZY8AdwBElGUusO7Or8RA
B9io/ijA2uaCvtjLMbU/0zOWtbaBqAAAAW1phDihAAAEAwBIMEYCIQCG1VQ+KY8K
iYt8/hbI0IORNfaCws8Z8ww7Em2ZRnCRdAIhANEK0IboVVW0gIV85dDfqTsRU15T
jTevCegTA+CMsIwNMA0GCSqGSIb3DQEBCwUAA4IBAQAKmgLZeOCRCG6Myv+orkyL
Mc/SjuWOLG7i3uHtt60Of8n8FOFJKedp6TTsbFZ0AztQ7gunz2litLsPOcEGZGXK
4Magqqo5bJMMsy5wFSvp4PzDIz4qNmcZjmsAvinRrWm+HL3kTqL12yk8KUewMl3a
1Se4J20O7JUQIM4Oqn2zr3gt9F5pQUaNQ94XvzO+PNsCPD2Q3b/Sp7XqROY0lQAM
/4t6AAzKP5OYtyRsMgOC0qNOzJX6UROsR+OcmQ2g94g8veqmayauxfa45BeWrkVR
ztaAZU3aL/MYP5ALJ0A0rS1Rb8fTLXQwomZ9aKRyeA5AtFWHwN9rQdYgWiPBoMVJ
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApR68XCQHy3GlhR5+1DSC
BTM6mYJhwYq/D0Xwg1PYBzHdTusPzubPbSILWH8CI9LOQea4lzxe6Izf4es3TuCq
K2Oci2SvW0KeeIwE5yDqpzesNxY5yeuX7A2716QYr8p7EaLFu2vPFFGHXc9VLFuT
9yXdKlxcyMQFx9KRb6LHEpEJLWmit8q5y5TsiPc9oCDpamCiA5X/GBW+jeAqfRmb
+AkrHOpR98e3xtMmLrBX4RHInWj2piJuGRcsz+db3nCBtvk1l6qKBN7uUJMjVA3e
eTogjFR9e9NohinToQJSmv2XplWfx7UDPbHGcqGC9HaWAUOcM/xMLtQPEGecPnJ2
3wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14781541621681881353233489258330417036
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-25 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-24 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'shop.schoology.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20844476697875124621483585441545214375573960012618381337635408271504840050156543925232467321580684224778539066891854359723764370268535836054313842404113273893106604451712919093574643313025535241732399203282285322312198857171550719151704211416630266498492425060335411951457633203314593428447834192076856217723284389734838162765141770283560525736630912904566471514892596260020569514269723829528524872070185456251612574280714426383433505215448849017123270433706372377336394425554365521484886126921456315467026406179647735529662008315067562554151670476301182699186817699968053222856200419722514967223111530835341657405151
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39cb1b01fd60039d9e1b973c1cc9284424361f3f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shop.schoology.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							0169007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016d6984392d0000040300483046022100e4023afaaeb749f0d36d44ccec291bc922c8b95d113e2db34f6c26d7ad35252c0221008d5591dd272d4e5f347e4721e6b4b0d49be1b5981a904520d889bab636474a3f0075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016d6984398300000403004630440220436a2397737ddd84b3570281d6d2d9af5297a48cf73e5692fd0d323222a61b3002206ce9039f44df308c6dae7716c2d2c5ee5ce6b367e9fdf5a71043d94add39658f0077004494652eb0eeceafc44007d8a8fe28c0dae682bed8cb31b53fd33396b5b681a80000016d698438a1000004030048304602210086d5543e298f0a898b7cfe16c8d0839135f682c2cf19f30c3b126d9946709174022100d10ad086e85555b480857ce5d0dfa93b11535e538d37af09e81303e08cb08c0d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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