www.paradigmhousing.co.uk

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:83:0c:40:5f:2d:ea:bd:1b:0d:68:e5:0c:c8:c1:cc was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.paradigmhousing.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:83:0c:40:5f:2d:ea:bd:1b:0d:68:e5:0c:c8:c1:cc
Serial Number (int): 7326579356366872633870614490851623372
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 25:a2:d6:ec:f4:cb:a9:fe:3c:7c:c7:89:a2:6b:c7:6f:b9:e1:33:0f
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): e9:14:b1:6c:a8:ef:88:c8:40:99:fd:8b:a6:e7:64:9e:92:99:8f:6e
Fingerprint (sha256): 1d:94:9b:c2:bc:bb:2a:56:80:46:18:3d:1a:39:d7:61:39:82:a6:dc:5b:8f:11:29:e6:cb:8f:0c:a0:ce:cb:81

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate www.paradigmhousing.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.paradigmhousing.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.paradigmhousing.co.uk
paradigmhousing.co.uk

Other certificates including the domain name paradigmhousing.co.uk

(limited to 100 certificates)
helpdesk.presto.se
itservicedesk.paradigmhousing.co.uk
servicedesk.iquw.com
soporte.inmocolonial.com
helpdesk.itsligo.ie
servicedesk.iquw.com
servicedesk.alessi.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
paradigmhousing.co.uk
www.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
helpdesk.itsligo.ie
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
itservicedesk.paradigmhousing.co.uk
servicedesk.alessi.com
helpdesk.thomastallis.org.uk
foundation.paradigmhousing.co.uk
paradigmhousing.co.uk
pddevops.clinisys.com
servicedesk.alessi.com
portal.paradigmhousing.co.uk
servicedesk.iquw.com
helpdesk.itsligo.ie
ping.paradigmhousing.co.uk
itservicedesk.paradigmhousing.co.uk
*.paradigmhousing.co.uk
*.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.thomastallis.org.uk
servicedesk.alessi.com
soporte.inmocolonial.com
servicedesk.coinford.co.uk
www.myparadigm.paradigmhousing.co.uk
helpdesk.presto.se
ping.paradigmhousing.co.uk
servicedesk.coinford.co.uk
helpdesk.camagroup.com
paradigmhousing.co.uk
paradigmhousing.co.uk
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.iquw.com
Portal.Paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
helpdesk.itsligo.ie
*.paradigmhousing.co.uk
paradigmhousing.co.uk
servicedesk.coinford.co.uk
soporte.inmocolonial.com
soporte.inmocolonial.com
helpdesk.presto.se
paradigmhousing.co.uk
servicedesk.coinford.co.uk
anyconnect.paradigmhousing.co.uk
gateway.paradigmhousing.co.uk
ping.paradigmhousing.co.uk
helpdesk.thomastallis.org.uk
helpdesk.presto.se
paradigmhousing.co.uk
ithelpdesk.gmmh.nhs.uk
ping.paradigmhousing.co.uk

Certificate

The complete raw certificate details for www.paradigmhousing.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIQBYMMQF8t6r0bDWjlDMjBzDANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTI0MDUxNDAwMDAwMFoXDTI1MDUxMzIzNTk1OVowJDEiMCAGA1UEAxMZd3d3
LnBhcmFkaWdtaG91c2luZy5jby51azCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAM0oCLohZ7Tjk9wZG3e6OBaafYFVtR7/ToRQ5t+tlQWm972osSdCDxRy
zH+qZxnIr32n1bUrIzkysM0UJZ9MDN29ufWzBRnNOeSUVDpHtIN8yosnwO6oEdKG
TWCxxViLxeOA3IXSQVGJ3yYGjHbFFrTa9AEaaGTky+HjWU+0R49yNeT0ir/VWjKr
Wrcic8vEZzuYvsY7lgvm5OuV7WQHHdLiRm7XoiX6UPBK5qvJ1Zoxiy3ABkoK9Rzk
bLzCSC3ry8fgY68ipGoa9saURHKD4J9G+S01uNn5LxSonGBN87PGOaOEQutv/oHf
bect58t3+pNFaiNUhBZ3jJL2TFJDxAsCAwEAAaOCAzgwggM0MB8GA1UdIwQYMBaA
FAzbbIJJD0pnCrgU7nrESFKI61Y4MB0GA1UdDgQWBBQlotbs9Mup/jx8x4mia8dv
ueEzDzA7BgNVHREENDAyghl3d3cucGFyYWRpZ21ob3VzaW5nLmNvLnVrghVwYXJh
ZGlnbWhvdXNpbmcuY28udWswPgYDVR0gBDcwNTAzBgZngQwBAgEwKTAnBggrBgEF
BQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1UdDwEB/wQEAwIF
oDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKg
MIYuaHR0cDovL2NkcC5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNy
bDB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFw
aWRzc2wuY29tMD4GCCsGAQUFBzAChjJodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5j
b20vUmFwaWRTU0xUTFNSU0FDQUcxLmNydDAMBgNVHRMBAf8EAjAAMIIBfQYKKwYB
BAHWeQIEAgSCAW0EggFpAWcAdgBOdaMnXJoQwzhbbNTfP1LrHfDgjhuNacCx+mSx
Ypo53wAAAY93OFAMAAAEAwBHMEUCIHt/RgDP3QhL7/nHgIxK0xUtCwppQTGYhBaX
R/W2g8NVAiEAlvHfsyr26FJ9DAxn4MoQQIZFApE5fBiV/PnscOetsmgAdgB9WR4S
4XgqexxhZ3xe/fjQh1wUoE6VnrkDL9kOjC55uAAAAY93OE/XAAAEAwBHMEUCIQCp
M1M52T+Ku9VnMCjg5FTD8eY7JwRfZes6PeO8XVThZAIgXqGKrxWofjVGNkW32E2P
h2mP+iqQxtpHno8mqS8uHEkAdQDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39
HjeOUAAAAY93OE/uAAAEAwBGMEQCIDqWscB8ya5QNkk2m+k/SHjDmFvPnGnBjsRc
4D/YgcvNAiA2bhhnzEA0G/M/brYqZ2YEcGwxgISqm5wSdgvinHR9IjANBgkqhkiG
9w0BAQsFAAOCAQEAa5tvbDi9yVJ77FgKmGn1tqi1rC4/eTI8aC3VOJ1OhDIZoGdY
JSebjW+Jgb8Ik8FVAoVGHb7k0W7OCzkezOgm25JjaGq7U34Z3SVhBmbo4H1+MvUA
MjOaKlKx+//OjB5qBQDVgaVU+zOh2J6D3CHaLwgD4rMPkcW/eVC7oiQY9vqAcahU
IXfhwkUBcCuI+QOXqvGejVlekDh59El5OHwxakBbYtQo/WfZX3kBZ8CBuDnJelVW
JmIjWtzzHf93J7wnBzsgsyx0SLTJsMqavB2IJO0/N6Dw29DXaoLgnquy5oTsqFiJ
lxQIzpSPRKNwwwgHKlbkdmpCd58pFZlkjoKLsA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzSgIuiFntOOT3Bkbd7o4
Fpp9gVW1Hv9OhFDm362VBab3vaixJ0IPFHLMf6pnGcivfafVtSsjOTKwzRQln0wM
3b259bMFGc055JRUOke0g3zKiyfA7qgR0oZNYLHFWIvF44DchdJBUYnfJgaMdsUW
tNr0ARpoZOTL4eNZT7RHj3I15PSKv9VaMqtatyJzy8RnO5i+xjuWC+bk65XtZAcd
0uJGbteiJfpQ8Ermq8nVmjGLLcAGSgr1HORsvMJILevLx+BjryKkahr2xpREcoPg
n0b5LTW42fkvFKicYE3zs8Y5o4RC62/+gd9t5y3ny3f6k0VqI1SEFneMkvZMUkPE
CwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7326579356366872633870614490851623372
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.paradigmhousing.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25898594063660562952176464206776041508686970536761211395075289221765964426778530453767657555069033843976898534392425457793570888681173365623292429195230512300209659487191547706927409222995449848057157283502950505229630808343559698206697468353626471740043555403052986249246085780753155193368032875627015940283368900823339105370345993973446563443306853370016209606255223250308542823862681895480099544535980643283279463440166433154994347071864262192034070939514477938339877773949367070110546128882592710784965268237725264123495314744456579545931915532008478929525003161066037285005815798992349189294048530096078348076043
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							25a2d6ecf4cba9fe3c7cc789a26bc76fb9e1330f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.paradigmhousing.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'paradigmhousing.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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