www.vivio.co.uk

Issued by GeoTrust TLS RSA CA G1

About this certificate

This digital certificate with serial number 05:fc:b9:2f:42:ab:86:b3:b8:f5:ce:ef:96:a1:d7:a0 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.vivio.co.uk

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fc:b9:2f:42:ab:86:b3:b8:f5:ce:ef:96:a1:d7:a0
Serial Number (int): 7958354777409042732127573566289991584
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: d0:25:90:45:44:89:b3:69:7a:c9:a1:a8:e5:c3:6c:73:77:95:dc:5f
AuthorityKeyId: 94:4f:d4:5d:8b:e4:a4:e2:a6:80:fe:fd:d8:f9:00:ef:a3:be:02:57

Fingerprint (sha1): 49:05:50:dd:0e:83:43:05:30:44:6d:75:ce:a7:df:80:f4:51:df:ef
Fingerprint (sha256): 20:ba:cf:35:58:83:f2:8e:1e:b5:6c:c0:98:e6:33:70:d5:07:9a:85:ac:13:d5:89:5e:7b:4b:88:07:9e:fb:a8

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl

Check the revocation status for certificate www.vivio.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.vivio.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.vivio.co.uk
vivio.co.uk

Other certificates including the domain name vivio.co.uk

(limited to 100 certificates)
drive.zerosubnet.com
formacion.nubexo.com
workdrive.neurosenser.com
workdrive.aluna.info
dateien.dgfkt.de
workdrive.aluna.info
vivio.co.uk
learn.thinkport.digital
vivio.co.uk
drive.settlementagreement.com
media.solcelleenergi.com
certusit.certuscloud.dk
cloud.drherzog.de
workdrive.aluna.info
workdrive.aluna.info
cloud.mission-experience.com
drive.zerosubnet.com
workdrive.aluna.info
workdrive.aluna.info
vivio.co.uk
www.vivio.co.uk
learn.atlastech.group
learn.vivio.co.uk
workdrive.aluna.info
workdrive.brandian.uk
workdrive.aluna.info
hub.vivio.co.uk
vidensbase.awork.dk
vivio.co.uk
workdrive.brandian.uk
vivio.co.uk
workdrive.aluna.info
cloud.drherzog.de
workdrive.aluna.info
workdrive.neurosenser.com
learn.thinkport.digital
vivio.co.uk
workdrive.brandian.uk
cloud.mission-experience.com
workdrive.caymangov.ky
drive.acctopus.com
formacion.nubexo.com
workdrive.vxlabs.de
cloud.mission-experience.com
dateien.dgfkt.de
workdrive.konbau.at
workdrive.aluna.info
vivio.co.uk
vivio.co.uk
learn.gotaxrefund.co.uk
vivio.co.uk
vivio.co.uk
cloud.drherzog.de
workdrive.konbau.at
vivio.co.uk
formacion.nubexo.com
drive.settlementagreement.com
workdrive.ditit.nl
workdrive.aluna.info
workdrive.neurosenser.com
learn.thinkport.digital
drive.acctopus.com
drive.portugalbuyers.com
workdrive.aluna.info
vivio.co.uk
vivio.co.uk
certusit.certuscloud.dk
workdrive.caymangov.ky
workdrive.aluna.info
dateien.dgfkt.de
docs.acmotos.com
*.vivio.co.uk
workdrive.aluna.info
academy.polarbearcnc.com
workdrive.vxlabs.de
vivio.co.uk
vidensbase.awork.dk
learn.vivio.co.uk
workdrive.aluna.info
drive.acctopus.com
vidensbase.awork.dk
media.solcelleenergi.com
workdrive.ditit.nl
workdrive.aluna.info
www.vivio.co.uk
hub.vivio.co.uk
learn.thinkport.digital
workdrive.aluna.info
learn.edver.eu
dev.vivio.co.uk
vivio.co.uk
workdrive.ditit.nl
workdrive.aluna.info
learn.thinkport.digital
workdrive.konbau.at
academy.polarbearcnc.com
workdrive.aluna.info
workdrive.aluna.info
workdrive.aluna.info
learn.thinkport.digital

Certificate

The complete raw certificate details for www.vivio.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgIQBfy5L0KrhrO49c7vlqHXoDANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZHZW9UcnVzdCBUTFMgUlNBIENBIEcx
MB4XDTIzMDQxNzAwMDAwMFoXDTI0MDMwODIzNTk1OVowGjEYMBYGA1UEAxMPd3d3
LnZpdmlvLmNvLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHn0
LSWzqmPErgCgkJBGhc6DO+nRN0YHt9pha91Qvt4Q6g35DXAJ99ydWN5+A5yMmTwf
H3xxwVnvQGJPb5OC1N26awI/WRLmalUgin+4mlM3UPvSBCOCJzTKEMamVKFrv90C
c1jlnlUfrafq04RUi8KanDPT3C5HokPt/dC2udqf/R0WQG2kulmSwc05bq266y/T
aYXcfM4YPJ5x+MA39XFtHK6j76Tfg3H8shOh7eE8OlwxcLWXDJETdwvMz06UmH/N
dwLIuXWq+TLUwdwBeGJi6IVIdV+ygRaTA9GczMiAvVlwoQxgE6dq8M3mO8TYJZuT
u/4VHM9WQhwDpHvYLQIDAQABo4IDJDCCAyAwHwYDVR0jBBgwFoAUlE/UXYvkpOKm
gP792PkA76O+AlcwHQYDVR0OBBYEFNAlkEVEibNpesmhqOXDbHN3ldxfMCcGA1Ud
EQQgMB6CD3d3dy52aXZpby5jby51a4ILdml2aW8uY28udWswDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSg
MqAwhi5odHRwOi8vY2RwLmdlb3RydXN0LmNvbS9HZW9UcnVzdFRMU1JTQUNBRzEu
Y3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUHMAGG
Gmh0dHA6Ly9zdGF0dXMuZ2VvdHJ1c3QuY29tMD4GCCsGAQUFBzAChjJodHRwOi8v
Y2FjZXJ0cy5nZW90cnVzdC5jb20vR2VvVHJ1c3RUTFNSU0FDQUcxLmNydDAJBgNV
HRMEAjAAMIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgB2/4g/Crb7lVHCYcz1
h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYeP1BQAAAAEAwBHMEUCIQDqPOen2xZHGzxc
3LxYNH9D4HCXgdOE8wbjCI8WDjg+wAIgY5aDzkL0lKk5fBD1gQNDbAhzcPIaMRcf
R5obiW4aag8AdwBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYeP
1BQjAAAEAwBIMEYCIQDUDdpS/lT1RFdW87LjHYVJ9iVvl3EBEQMFbVTPfFsVsAIh
AJgWoVLHEtepA62r4nwqKZXIK+xuOBZGo1HAx84dCiepAHcASLDja9qmRzQP5WoC
+p0w6xxSActW3SyB2bu/qznYhHMAAAGHj9QT9gAABAMASDBGAiEAqxjBCa1jpU2g
3T+dBJ5V1rtPMmA1Cw1Pv2+Cu9PxwokCIQDjsZsGH34ZLk72Vl41265ntSjQEmHy
kEH5YZDDXySmYTANBgkqhkiG9w0BAQsFAAOCAQEAPDhOWklaLQjFI0GHljLZPiLL
jSbZGggca9xxEdCSqJovKUIF7Z1X9w3y55/BzqY5moAtMwYvB+a5Z4yc+Mm4mZ/I
HYQB61NBKAuW51P0JVdzcqK0BBrtoy/Na8LXtSPwgoqoCzH+2Fma9S9UfdlDVkry
SSK5tNhqYAxVwMaHGkYFqHZW+aN7Ks43bZ4/OWBZ+2KKXk46dwPuRdeL/y3q62BW
GL5OFotrPkJHyiah9FpJs1zkdUQObBAMzNR7JTbm+C1eha+uPLYKjCqphUIrf+qq
FHCPTlcD/fELr56Qis22uDHm+BFZ+c9J9Rv5WZBa+lAfEzCK0xIiiUSClAMGMw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHn0LSWzqmPErgCgkJBG
hc6DO+nRN0YHt9pha91Qvt4Q6g35DXAJ99ydWN5+A5yMmTwfH3xxwVnvQGJPb5OC
1N26awI/WRLmalUgin+4mlM3UPvSBCOCJzTKEMamVKFrv90Cc1jlnlUfrafq04RU
i8KanDPT3C5HokPt/dC2udqf/R0WQG2kulmSwc05bq266y/TaYXcfM4YPJ5x+MA3
9XFtHK6j76Tfg3H8shOh7eE8OlwxcLWXDJETdwvMz06UmH/NdwLIuXWq+TLUwdwB
eGJi6IVIdV+ygRaTA9GczMiAvVlwoQxgE6dq8M3mO8TYJZuTu/4VHM9WQhwDpHvY
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7958354777409042732127573566289991584
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-08 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.vivio.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21268172901289887794221065299576414108782213548824900465350953844770912806802161693716346197739702362633047964986472103294256825275987196099171333340084849910208649749039391274563616255302540150812756218251146609675796160024884460278492541370936855745796817744441824762463465008133750637172121649909240632843732361682254784488316889968365342537487884901174802034248233963686959733115900787035245314218109237409242619386995581258961147108647803423863222433601627472940818724578594711506760122763781065583684616771324629053066334067638848440560357492051847303568215046478044785280121718706331497012392532734200740829229
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 944fd45d8be4a4e2a680fefdd8f900efa3be0257
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d02590454489b3697ac9a1a8e5c36c737795dc5f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vivio.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vivio.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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