staging.primebroker.com

- BNP PARIBAS SA -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b9:ea:3c:73:db:b3:a0:84:00:00:00:00:50:dd:9b:03 was issued on by Entrust, Inc..

With 13 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BNP PARIBAS SA

Organization: BNP PARIBAS SA
Locality: Montreuil
Country: FR

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b9:ea:3c:73:db:b3:a0:84:00:00:00:00:50:dd:9b:03
Serial Number (int): 247123402808915867279097767932783860483
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ac:18:cf:ca:51:ca:16:7d:32:62:12:7b:f8:fe:d3:9c:12:66:5b:c5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f4:f7:e5:5a:62:f4:03:79:7f:61:18:48:97:81:03:e9:9e:2b:e9:c6
Fingerprint (sha256): 25:33:c8:d5:e8:9b:57:85:95:56:bc:79:b5:5b:d4:8d:90:16:75:6f:5f:46:fa:76:1f:98:9a:39:01:ac:8a:53

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate staging.primebroker.com

13

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for staging.primebroker.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

staging.primebroker.com
stgapi.primebroker.com
stgbnpparibas.primebroker.com
stgmobile.primebroker.com
stgbnpparibas-pb.primebroker.com
stgmobileics.primebroker.com
stgbds.bnpparibas.com
stgreportdownloader.primebroker.com
stgbds-pb.bnpparibas.com
stgmonitor.primebroker.com
stgges.bnpparibas.com
stgges-pb.bnpparibas.com
www.staging.primebroker.com

Other certificates including the domain name primebroker.com

(limited to 100 certificates)
bnp09s.bnpparibas.com
www.primebroker.com
stgbnpparibas.primebroker.com
apps.primebroker.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
sub.primebroker.com
bnp09s.bnpparibas.com
bnp15b.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
stgsub.primebroker.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
stgoms.primebroker.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnpparibas.primebroker.com
pnl.primebroker.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnpparibas.primebroker.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
stgsub.primebroker.com
staging.primebroker.com
staging.primebroker.com
www.primebroker.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
www.primebroker.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
www.primebroker.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
oms.primebroker.com
bnp08s.bnpparibas.com
bnp07s.bnpparibas.com
bnp09s.bnpparibas.com
bnp07s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com
bnp09s.bnpparibas.com
www3.primebroker.com
bnp08s.bnpparibas.com
bnp08s.bnpparibas.com
bnp09s.bnpparibas.com

Certificate

The complete raw certificate details for staging.primebroker.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0q4PK45fVy7l+wk0ysXn
N+IySAA5EMJ6LmPN2YM8SEGwmS/aILTWCCPdc4+3XMNHDsmpgWW0tvy9orIMjDME
Nvjy0i7L71QPr+al0l+/Hl7lsGY0ssE1q26qXFKRIlzZ5nGbS9ncH+Pw2QmR+x8Z
/yShpFElph2J5l6WtE1K55oRbLCjqcPSvwygMskWNq6U0IDdb8nloLCA6N40iDSS
xB73ohGj+/x5cqyEv3c8JqxdeOirRMXgAdm9ph7dZx2RINt/uBufze8Guq9KVVE4
44yh+NsaxXwNxieMD8hD4P3Gtl1pYrFUbDkwDQBQgdk4UsMvQe2i26UPgS/ZmB/H
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 247123402808915867279097767932783860483
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-08-08 14:11:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-08 14:41:38 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montreuil'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BNP PARIBAS SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'staging.primebroker.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26595875862167306917065873719351087962794386843033694407374560992266458075059454865487683531278367793652777174544643829831443777501364553482588834322191325608826631851336859365591413836477898090163190905010331524867687305064792214181582342635965507682721325538597921054859038311950210022984703232190231492268499680412366735039473455793050588752560075098734911408301315081036671195765266327330250732840916560812131742765787641358521895181667945259757676508902027418534705505301815725004608507443615779997109980967295478684480169177294515277735881072818540426466044670580264494129609329606734821625890071981234298275747
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'staging.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgapi.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmobile.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbnpparibas-pb.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmobileics.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbds.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgreportdownloader.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgbds-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgmonitor.primebroker.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stgges-pb.bnpparibas.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.staging.primebroker.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ac18cfca51ca167d3262127bf8fed39c12665bc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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