secure.biocair.com
- Biocair International Ltd -
Issued by GeoTrust Extended Validation SSL CA
About this certificate
This digital certificate with serial number 06:ef was issued on by GeoTrust Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- CAs MUST NOT include the pathLenConstraint field unless the CA boolean is asserted and the keyCertSign bit is set (RFC 5280: 4.2.1.9)
Biocair International Ltd
Company registration number:
02070874
Organization: Biocair International Ltd
Organization unit: Operations
Organization: Biocair International Ltd
Organization unit: Operations
State / Province:
Cambridgeshire
Locality: Cambridge
Country: GB
Locality: Cambridge
Country: GB
GeoTrust Inc
Organization:
GeoTrust Inc
Organization unit: See www.geotrust.com/resources/cps (c)06
Organization unit: See www.geotrust.com/resources/cps (c)06
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 06:efSerial Number (int): 1775
Serial Number lenght: 11 bits, 2 octets
SubjectKeyId: 8a:48:d2:8f:b8:a4:8d:c4:1b:50:57:01:2c:b4:97:ca:d8:6f:09:42
AuthorityKeyId: 28:c4:eb:8f:f1:5f:79:90:a3:2b:55:c3:56:4e:7d:6b:53:72:2c:18
Fingerprint (sha1): e0:3b:7d:34:0f:fc:65:b6:c5:16:9d:d0:a8:99:7a:2c:f6:88:bd:8d
Fingerprint (sha256): 20:d7:9a:d8:d1:31:c5:76:c8:37:e2:71:d4:7e:05:30:1d:7b:4c:d0:5e:b6:bd:8d:69:b7:c9:f7:52:7c:5b:3f
Issuing Certificate URL: http://EVSSL-aia.geotrust.com/evca.crt
Revocation information
OCSP Server: http://EVSSL-ocsp.geotrust.comCRL Distribution Point: http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl
Check the revocation status for certificate secure.biocair.com
0
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for secure.biocair.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
8 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
This certificate doesn't contain any subject alternative names.
Other certificates including the domain name biocair.com
(limited to 100 certificates)
*.biocair.com
testgsd.teamhgs.com
biocair.com
secure.biocair.com
secure.biocair.com
biocair.com
www.biocair.it
biocair.com
biocair.com
*.biocair.com
biocair.com
biocair.com
biocair.com
*.connect.biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
secure.biocair.com
www.biocair.com
biocair.com
biocair.com
biocair.com
live-biocair.kissdigital.co.uk
*.biocair.com
biocair.com
biocair.com
*.biocair.com
biocair.com
biocair.com
*.biocair.com
biocair.com
*.biocair.com
*.biocair.com
biocair.com
*.biocair.com
soporte.solbeautyandcare.com
biocair.de
biocair.com
secure.biocair.com
biocair.com
biocair.co.uk
*.biocair.com
*.biocair.com
biocair.com
biocair.com
biocair.com
testgsd.teamhgs.com
biocair.com
secure.biocair.com
secure.biocair.com
biocair.com
www.biocair.it
biocair.com
biocair.com
*.biocair.com
biocair.com
biocair.com
biocair.com
*.connect.biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
biocair.com
secure.biocair.com
www.biocair.com
biocair.com
biocair.com
biocair.com
live-biocair.kissdigital.co.uk
*.biocair.com
biocair.com
biocair.com
*.biocair.com
biocair.com
biocair.com
*.biocair.com
biocair.com
*.biocair.com
*.biocair.com
biocair.com
*.biocair.com
soporte.solbeautyandcare.com
biocair.de
biocair.com
secure.biocair.com
biocair.com
biocair.co.uk
*.biocair.com
*.biocair.com
biocair.com
biocair.com
biocair.com
Certificate
The complete raw certificate details for secure.biocair.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFXzCCBEegAwIBAgICBu8wDQYJKoZIhvcNAQEFBQAwgYUxCzAJBgNVBAYTAlVT MRUwEwYDVQQKEwxHZW9UcnVzdCBJbmMxMTAvBgNVBAsTKFNlZSB3d3cuZ2VvdHJ1 c3QuY29tL3Jlc291cmNlcy9jcHMgKGMpMDYxLDAqBgNVBAMTI0dlb1RydXN0IEV4 dGVuZGVkIFZhbGlkYXRpb24gU1NMIENBMB4XDTEwMDIxNDE5MDcwOFoXDTExMDIx NjEyMTg0NFowgdUxGzAZBgNVBA8TElYxLjAsIENsYXVzZSA1LihiKTETMBEGCysG AQQBgjc8AgEDEwJHQjERMA8GA1UEBRMIMDIwNzA4NzQxCzAJBgNVBAYTAkdCMRcw FQYDVQQIEw5DYW1icmlkZ2VzaGlyZTESMBAGA1UEBxMJQ2FtYnJpZGdlMSIwIAYD VQQKExlCaW9jYWlyIEludGVybmF0aW9uYWwgTHRkMRMwEQYDVQQLEwpPcGVyYXRp b25zMRswGQYDVQQDExJzZWN1cmUuYmlvY2Fpci5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQC35BemKb3Avus8R5v6mZMIe1wRNgqnVaFfzMiqdyaN mBOim9tq8b72tFLOf6xPg9qlbFQ/Q4Y6hgmx3UMJZrjxytN9VfBytYJWN18k8pFS RYVMWV1wULlma7zk204E7Ys09t4C2yQZ/O5hPMj86XWSoPdA7lTZKd+dPeU14jiK 2a9zcd2NPSofH8HGZM1rwTWZnI74H0vCwe4hlHzzWMQm4lv4BfXLuRezQxHCgCOY ZuONex1UXCiAUTW/4LSiWMb4KiujWA430KCnMI5s6g8CbLhpN8jCq38x7Xp4JAjH auLeP6ccVG5jnvT6sCSvVfFBOriZdTOdhBJBj3luOsSFAgMBAAGjggGFMIIBgTAO BgNVHQ8BAf8EBAMCBaAwSwYDVR0gBEQwQjBABgkrBgEEAfAiAQYwMzAxBggrBgEF BQcCARYlaHR0cDovL3d3dy5nZW90cnVzdC5jb20vcmVzb3VyY2VzL2NwczBCBgNV HR8EOzA5MDegNaAzhjFodHRwOi8vRVZTU0wtY3JsLmdlb3RydXN0LmNvbS9jcmxz L2d0ZXh0dmFsY2EuY3JsMB8GA1UdIwQYMBaAFCjE64/xX3mQoytVw1ZOfWtTciwY MG4GCCsGAQUFBwEBBGIwYDAqBggrBgEFBQcwAYYeaHR0cDovL0VWU1NMLW9jc3Au Z2VvdHJ1c3QuY29tMDIGCCsGAQUFBzAChiZodHRwOi8vRVZTU0wtYWlhLmdlb3Ry dXN0LmNvbS9ldmNhLmNydDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw DwYDVR0TAQH/BAUwAwIBADAdBgNVHQ4EFgQUikjSj7ikjcQbUFcBLLSXythvCUIw DQYJKoZIhvcNAQEFBQADggEBACbflgsrHg2iN9sfvhebibDwelw4vhkpVqB4Y2Fd riZ3fRdUtn7E9VmrFzUJ5cRtMDjokU1gCpePLLBGSYyX631dffie1MKNA0K3J7Fh bLi6JmleXGsYchdJG7mCIzr8N5c0SzRLDDcotkzw8KL+6+GCrLOcbyDuJJSxSmlF 3C2I+DgA/6CsXC5+W3drlLKq1oJ9XPVG9U19tBmRFckdyuKpu8P6hRVgTFcWaFaE vAmeja3GmzMtHFLolIoTrB9m6fWeURxFoDMauH7KPZDMFGtuwtfz4J6WI3xYESQq Woi7GaxZNKZonwUZvXMoWopO4NJMhd7L6Vc936a8vhD+8pQ= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+QXpim9wL7rPEeb+pmT CHtcETYKp1WhX8zIqncmjZgTopvbavG+9rRSzn+sT4PapWxUP0OGOoYJsd1DCWa4 8crTfVXwcrWCVjdfJPKRUkWFTFldcFC5Zmu85NtOBO2LNPbeAtskGfzuYTzI/Ol1 kqD3QO5U2SnfnT3lNeI4itmvc3HdjT0qHx/BxmTNa8E1mZyO+B9LwsHuIZR881jE JuJb+AX1y7kXs0MRwoAjmGbjjXsdVFwogFE1v+C0oljG+Coro1gON9CgpzCObOoP Amy4aTfIwqt/Me16eCQIx2ri3j+nHFRuY570+rAkr1XxQTq4mXUznYQSQY95bjrE hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1775 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.geotrust.com/resources/cps (c)06' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Extended Validation SSL CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-02-14 19:07:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-02-16 12:18:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'V1.0, Clause 5.(b)' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02070874' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridgeshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cambridge' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Biocair International Ltd' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Operations' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure.biocair.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23214086353028958749545142742505654005520766860872318070099372271920385452837417360847295223611539894318383583192703872124656597976995688653517613465731981819802529363221615081413037233791017755338129790611868120588602023114913764989296944598355349298416791947256853664332326937875703901539830064757561514293022086713779480524297378724898647876828511667717697493303672943718660182277665052702590315286320990375721621567521520156669214927506859966382955272669835126494557722631567395800106819454247630995909465072312383453744369995763660543362656775339043731545959774828079090775651544863320053371337278691865228133509 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (59 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-crl.geotrust.com/crls/gtextvalca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 28c4eb8ff15f7990a32b55c3564e7d6b53722c18 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (98 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-ocsp.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://EVSSL-aia.geotrust.com/evca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (5 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8a48d28fb8a48dc41b5057012cb497cad86f0942 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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