voiceotislinelog-apac-stag.otiselevator.com

- Otis -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b7:e0:1b:e6:24:30:32:64:00:00:00:00:50:ef:db:9b was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Otis

Organization: Otis
Organization unit: United Technologies
State / Province: Connecticut
Locality: East Hartford
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b7:e0:1b:e6:24:30:32:64:00:00:00:00:50:ef:db:9b
Serial Number (int): 244412363583687809761995091828993416091
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bb:71:63:3b:50:88:e4:ba:94:a5:df:52:2f:d1:18:1d:86:fc:a7:5e
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d3:f6:36:bd:27:5e:9e:8b:d6:4d:22:64:0d:62:da:a9:20:31:f1:5c
Fingerprint (sha256): 23:57:8d:dd:ec:89:f3:99:3d:da:41:52:0e:02:2b:89:05:0f:df:23:94:ca:49:7b:9b:9f:eb:54:21:94:5c:7a

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate voiceotislinelog-apac-stag.otiselevator.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for voiceotislinelog-apac-stag.otiselevator.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

voiceotislinelog-apac-stag.otiselevator.com

Other certificates including the domain name otiselevator.com

(limited to 100 certificates)
cms-naa-stag.otiselevator.com
ceros2.map.fastly.net
oxp-apac-oft.otiselevator.com
oxp-emea-oft.otiselevator.com
diagnostics-emea-stag.otiselevator.com
cpconfigservice-api-naa-stag.otiselevator.com
eServiceAPI.QA.otiselevator.com
oxp-apac-stag.otiselevator.com
*.dev.otisone.otiselevator.com
oxp-naa.otiselevator.com
GlobalMobilenl-stg.otiselevator.com
otis-iot-stg.otiselevator.com
*.otiselevator.com
auth-api-naa-stag.otiselevator.com
oxpr-apac.otiselevator.com
ceros2.map.fastly.net
qswhqpy.otiselevator.com
reachsurvey.otiselevator.com
datapipeline-emea-oft.otiselevator.com
oxpr-emea-oft.otiselevator.com
gds1.otiselevator.com
diagnostics-naa.otiselevator.com
oxp.otiselevator.com
developers.qa.otiselevator.com
gds2.otiselevator.com
qsnaapy.otiselevator.com
GlobalMobileOtisFR-STG.otiselevator.com
cv-chn.otiselevator.com
fc-naa-stag.otiselevator.com
diagnostics-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
cv-emea.otiselevator.com
connect-api-naa-stag.otiselevator.com
*.dlrgroup.com
ota-mm-stg-apac.otiselevator.com
rtv.otiselevator.com
oxp-chn.otiselevator.com
diagnostics-naa.otiselevator.com
ceros2.map.fastly.net
voiceotisline-naa-stag.otiselevator.com
GlobalMobilenl-Devqc.otiselevator.com
oxpr-emea-oft.otiselevator.com
datapipeline-chn-keycloak.otiselevator.com
diagnostics-emea-stag.otiselevator.com
gdsemda006.otiselevator.com
otis-iot-qa.otiselevator.com
ruTTA-prd.otiselevator.com
campusview-emea-stag.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
cms-naa.otiselevator.com
diagnostics-apac-stag.otiselevator.com
smartservice-api-apac-stag.otiselevator.com
connect-api-apac.otiselevator.com
cloudservice-naa.otiselevator.com
ceros2.map.fastly.net
ceros2.map.fastly.net
ceros2.map.fastly.net
bitbucket.otiselevator.com
brandhub.stage.otiselevator.com
globalmobileotisUKtkitapp-prd.otiselevator.com
ruTTA-stg.otiselevator.com
decisions-dev-int.otiselevator.com
cms-apac-stag.otiselevator.com
qlikcrmEMEAstage.otiselevator.com
deviceportal-naa-stag.otiselevator.com
GlobalMobileNL-PRD.otiselevator.com
globalmobileotisauttkitapp-prd.otiselevator.com
deviceportal-apac.otiselevator.com
oxpr-qa.otiselevator.com
cv-emea-stag.otiselevator.com
ceros2.map.fastly.net
decisions-emea.otiselevator.com
gds1.otiselevator.com
oap-emea.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
oxp-emea.otiselevator.com
hipchat.otiselevator.com
cms-naa-stag.otiselevator.com
oxpr-emea.otiselevator.com
jira.otiselevator.com
oxp-naa-stag.otiselevator.com
oap-emea.otiselevator.com
ceros2.map.fastly.net
oxpr-apac-oft.otiselevator.com
remrda.otiselevator.com
cv-apac-stag.otiselevator.com
globalmobileotisEStkitapp-prd.otiselevator.com
ceros2.map.fastly.net
apip-devloper-dev.otiselevator.com
voiceotislinelog-apac-stag.otiselevator.com
Decisions-dev.otiselevator.com
oxpr-qa.otiselevator.com
developer-studio-dev-emea.otiselevator.com
LinePulseMagentoUAT.otiselevator.com
cv-apac.otiselevator.com
datapipeline-chn-oft.otiselevator.com
ceros2.map.fastly.net
developer-studio-dev-naa.otiselevator.com
datapipeline-apac.otiselevator.com
deviceportal-naa-stag.otiselevator.com

Certificate

The complete raw certificate details for voiceotislinelog-apac-stag.otiselevator.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkll6tjXB23w8UJ56+gq8
W6oKBCKB9q4X8UwwD7ex2gsC8Hp2aZ0dnU7SXDJJjWv3jjvWXlaXcr/nfKHQy6bK
kEx8vVD2kppWRr1Ii2b4e4IphUwJXxY1T3++fGoWCAbolR9Wgiu7kS0jcSRQHL0Y
5jo2OCHw3C0Sc/baGBkbJmpfGgM0Cqc2OsXI99U/xpOE6yaF8QJDo96DUFIcHjkB
ZWiXzePsYR33mReTwG/Ems3DVZ+l8N8Ey3FjvbIRCdm0hNPdTY4wMdrqzC9j1LAP
UdR6C3pKgCSGNPcO2nf9+7NRN34B2RyydoBl5nIp62F7ws/AWVy49nJdsNp5praA
KwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 244412363583687809761995091828993416091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-04 14:47:44 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-04 15:17:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Connecticut'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'East Hartford'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Otis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'United Technologies'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'voiceotislinelog-apac-stag.otiselevator.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18474916433501697648917025680268518720990861039849010469247405891442941641875477552678868276698087627901841409758571499468117263435642979193379098267025884325690481642876955025044174472594144802861664149851603891392175511341649917976754885055378898872183181888406745178564818000593317417823968567057673347838564621930185400723728702132063177610417198924865167598997718669508203749144535091627456595798920397615931099555781553233890852098282961152895352847807167917303045759936596127659844093558481210112546214466494628424008640797149767203937606330699302246455315904697499515775309681761676071016214756880093256515627
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'voiceotislinelog-apac-stag.otiselevator.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb71633b5088e4ba94a5df522fd1181d86fca75e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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