stars.fns.usda.gov

Issued by Entrust Certification Authority - L1C

About this certificate


This digital certificate with serial number 4c:25:00:61 was issued on by Entrust, Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

UNITED STATES DEPT OF AGRICULTURE

Organization: UNITED STATES DEPT OF AGRICULTURE
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
State / Province: Texas
Locality: Dallas
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4c:25:00:61
Serial Number (int): 1277493345
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 0b:e0:87:ea:a4:c8:f5:fc:24:4c:ae:fc:d5:e4:25:59:e9:5d:e0:0e
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): d0:13:68:bd:a7:b6:44:5b:de:35:5e:76:e1:29:ce:75:63:a1:30:c4
Fingerprint (sha256): ea:c9:8b:c8:0f:d3:a8:52:c9:e1:0a:45:d5:83:22:7b:47:b1:8b:13:8c:c9:c5:59:f2:33:e2:c2:b3:d9:d0:c3

Issuing Certificate URL: http://aia.entrust.net/2048-l1c.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for the current certificate on stars.fns.usda.gov
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

stars.fns.usda.gov
www.stars.fns.usda.gov

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIETCUAYTANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0 Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xNTA4MTExNzA2NDBaFw0xNjEyMzEw MTIxMTRaMHcxCzAJBgNVBAYTAlVTMQ4wDAYDVQQIEwVUZXhhczEPMA0GA1UEBxMG RGFsbGFzMSowKAYDVQQKEyFVTklURUQgU1RBVEVTIERFUFQgT0YgQUdSSUNVTFRV UkUxGzAZBgNVBAMTEnN0YXJzLmZucy51c2RhLmdvdjCCAiIwDQYJKoZIhvcNAQEB BQADggIPADCCAgoCggIBANr+BVP0z60nJ52d4NOfDrkji5uKUpsStsR3Rs2Kz2cU vKeLNvs+d7F4z4/QBc7+FR3+DiJIRzFPm1Rh+h0tD1QQQZwV2sXQI/eGqDhUI4c7 bBFmJWr/vgbcDppVAJsvZceaZ6jeSLWTs3xXDrZh3v+6A15CLnacw3KhjiLC26Kq A2PE0RYja7jZA35aAM1IcHWhIx6Jz2BQJh+dmdj7JfWRon7x3iqeZ/YuoLF51v66 mNuCnB8YPJujMFvWHTGfliW38uykJhbyuHqaUDuN9l6q+0hzLIlrXZvI9i/qaqJk 7REZ+2C8eB2RibdL9NC7f7zmG3nAEpv8LuruLVB70GB/Q4alcfRTvdsLpWKre7tP L6ICWwn9dYhNs4GyAogdkCkKwnLzZWr1z84N/XJgPWSI7u6xQkXe2CfUtjJG0Ne7 2STrXSE4Oouog7U77qNBRQ2jT+Us3Kf3FygKHKAt/+dWmCBoDLdLlxUKBIDmOl5N 4NumhYbXExDyL64rNPROKvwVkjjQ4bKj9Df4ua2Gh27TWSV/+mixvGT0aHln0+eE bfQiDlYDPFQfbDkMINw1Zno3t5vPjn/RMmHEvlYfCzBmnMr4IQWukppt04Msn97g qa+PlgQScqAZPsx2Xj8J8MNcYUFY77fYCweYr/ToGKDkLAtQNm8xGDeHnHP1rSCV AgMBAAGjggGZMIIBlTALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEG CCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5u ZXQvbGV2ZWwxYy5jcmwwZAYIKwYBBQUHAQEEWDBWMCMGCCsGAQUFBzABhhdodHRw Oi8vb2NzcC5lbnRydXN0Lm5ldDAvBggrBgEFBQcwAoYjaHR0cDovL2FpYS5lbnRy dXN0Lm5ldC8yMDQ4LWwxYy5jZXIwSgYDVR0gBEMwQTA1BgkqhkiG9n0HSwIwKDAm BggrBgEFBQcCARYaaHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQIC MDUGA1UdEQQuMCyCEnN0YXJzLmZucy51c2RhLmdvdoIWd3d3LnN0YXJzLmZucy51 c2RhLmdvdjAfBgNVHSMEGDAWgBQe8auJBvhJDwEzd+4Ueu4ZfJMoTTAdBgNVHQ4E FgQUC+CH6qTI9fwkTK781eQlWeld4A4wCQYDVR0TBAIwADANBgkqhkiG9w0BAQUF AAOCAQEAi53tuzx/omgQNKZKFKUoIBqg/8lgGKuIYZOcvMUgNOGbN7uOlfS5Z2t9 bd2NFLQx4+iHIilPduFOrWWr4o5oNzo38JchQwIUHrjUhqURXYEbozqqPQYwVdUl Lc7lPU69PXHI6JB8/y9Gd68y5VyLSJ44Ces5J/EX7K0+HAjgvTVM12RUnqRaIq42 M03cChMYGkr0haE0QUNwLgRhJFQPAGPkr0+ndKfB7p2Egmi7RhZI5etFMyFQRh79 oYVwpWTDRFgk0noanlxjkACO5VfgH6xWkiAvS7B1o3uY1zXVuEwKRDGnQI2LuBb2 97/S6NVu8i7JfzT/nP1j+fRKMwSiiQ== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2v4FU/TPrScnnZ3g058O uSOLm4pSmxK2xHdGzYrPZxS8p4s2+z53sXjPj9AFzv4VHf4OIkhHMU+bVGH6HS0P VBBBnBXaxdAj94aoOFQjhztsEWYlav++BtwOmlUAmy9lx5pnqN5ItZOzfFcOtmHe /7oDXkIudpzDcqGOIsLboqoDY8TRFiNruNkDfloAzUhwdaEjHonPYFAmH52Z2Psl 9ZGifvHeKp5n9i6gsXnW/rqY24KcHxg8m6MwW9YdMZ+WJbfy7KQmFvK4eppQO432 Xqr7SHMsiWtdm8j2L+pqomTtERn7YLx4HZGJt0v00Lt/vOYbecASm/wu6u4tUHvQ YH9DhqVx9FO92wulYqt7u08vogJbCf11iE2zgbICiB2QKQrCcvNlavXPzg39cmA9 ZIju7rFCRd7YJ9S2MkbQ17vZJOtdITg6i6iDtTvuo0FFDaNP5Szcp/cXKAocoC3/ 51aYIGgMt0uXFQoEgOY6Xk3g26aFhtcTEPIvris09E4q/BWSONDhsqP0N/i5rYaH btNZJX/6aLG8ZPRoeWfT54Rt9CIOVgM8VB9sOQwg3DVmeje3m8+Of9EyYcS+Vh8L MGacyvghBa6Smm3Tgyyf3uCpr4+WBBJyoBk+zHZePwnww1xhQVjvt9gLB5iv9OgY oOQsC1A2bzEYN4ecc/WtIJUCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1277493345 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-11 17:06:40 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-12-31 01:21:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UNITED STATES DEPT OF AGRICULTURE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'stars.fns.usda.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 893410510344561773526831374615740017753755559080967846520355526722029760322077031358608460347898232359543254864121889656949325205900231374256247828822792302298122060516816146678010082355921446872562909930648008255883306430205523253550561988143842159558133890656015343124631701822227243858953921030081144434699023069041208870711345290712251182164142255666320836314250735132363506346886939693981586052503186786885803161988346765883078203618685882262874056982442676743023971591333218760704744296058434104231649867025748774703191743939561052379755662964164495610030283575234769432077094715685733921809264371533102957807641723553913181341754019325421995707086325709544520723189910914036179619006362926156192927244607080330275015902531068726054734814778637294965574288197241729874998707869232130718098984451184835303170650442123611764806429269383081074594478129630044740076622008858680160914182516308927528070136164283576514797561852557680615261164146472634437585505816882987637333418056963099017097560331991423882077401678538407799855712463125613212048977302175661048016221847461254078826521310480133004667535466427766623077368413401495789389233158554171831545605105218484061823948583022487682987580891948153542888837787950607265887494293 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/2048-l1c.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stars.fns.usda.gov' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.stars.fns.usda.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 0be087eaa4c8f5fc244caefcd5e42559e95de00e . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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