*.recargagic.com

Issued by Thawte RSA CA 2018

About this certificate

This digital certificate with serial number 06:48:db:5d:1d:fc:2f:09:e2:ae:67:6c:3b:80:23:8d was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.recargagic.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:48:db:5d:1d:fc:2f:09:e2:ae:67:6c:3b:80:23:8d
Serial Number (int): 8353662573726253094024670439832298381
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: bb:9a:4b:82:1e:5e:76:56:9e:75:2c:48:b1:59:c5:7d:7b:53:40:cf
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a

Fingerprint (sha1): d7:3b:e1:55:bf:f5:94:c5:86:ed:ce:e1:c8:d0:4f:7c:5d:b9:8b:0c
Fingerprint (sha256): 27:80:43:5b:c8:0c:94:51:e3:2c:94:cd:d5:98:83:03:eb:b8:6d:2e:cf:b3:22:44:0b:ed:43:f4:10:42:88:ee

Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl

Check the revocation status for certificate *.recargagic.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.recargagic.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.recargagic.com
recargagic.com

Other certificates including the domain name recargagic.com

(limited to 100 certificates)
sni240716.cloudflaressl.com
forms.ytj-audition.jp
clientes.recargagic.com
forms.cabmastersoftware.com
sni240716.cloudflaressl.com
*.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.bcn.recargagic.com
sni240716.cloudflaressl.com
*.recargagic.com
webservices.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
webadmin.emtm.recargagic.com
*.recargagic.com
clientes.amb.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.emtm.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
recargagic.com
forms.vksoft.co.in
sni240716.cloudflaressl.com
recargagic.com
sni240716.cloudflaressl.com
webservices.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
forms.ash-tech.co.il
sni240716.cloudflaressl.com
clientes.amb.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.amb.recargagic.com
forms.aplikasi.us
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.amb.recargagic.com
sni240716.cloudflaressl.com
clientes.emtm.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.bcn.recargagic.com
*.recargagic.com
sni240716.cloudflaressl.com
webservices.recargagic.com
sni240716.cloudflaressl.com
clientes.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.bcn.recargagic.com
sni240716.cloudflaressl.com
*.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
reservas.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
*.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.emtm.recargagic.com
clientes.recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.recargagic.com
webadmin.emtm.recargagic.com
sni240716.cloudflaressl.com
clientes.emtm.recargagic.com
recargagic.com
sni240716.cloudflaressl.com
sni240716.cloudflaressl.com
clientes.bcn.recargagic.com

Certificate

The complete raw certificate details for *.recargagic.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFszCCBJugAwIBAgIQBkjbXR38LwnirmdsO4AjjTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN
MjAwMjI2MDAwMDAwWhcNMjEwMzI3MTIwMDAwWjAbMRkwFwYDVQQDDBAqLnJlY2Fy
Z2FnaWMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mn8KwfD
7idp7U5VsqlYPEJ4fPzSKauT21Z7WqWoretMFZlnhJSUHEbVa4iHcZ7dTU8/5nto
dxDOgHW1v597skme3T5lIPz60y1od1+eo/jV9eJRRLQgqcMnb64IYoB2U+dGpkaD
674yIw6ia1RJjQhvSSPvIwAIHPDd6h0D2SVVgF/f+OtXzCZGERJmexOixUx5CWYs
E6we+nNb6CbzeOnBFujfk99ytd4MawCXjbZKjvcKZoubEPsgeVXTQHqRUHUk/BnQ
/YB38bCd4CQ50jN6p1rHZJQMkPee5k2QbeMozrI89dpGxir3kY6OMaD3FsjK9mn9
b/COptyFeZMXlQIDAQABo4ICsDCCAqwwHwYDVR0jBBgwFoAUo8heZVTlMHjBBeoH
CmpZzLn+3lowHQYDVR0OBBYEFLuaS4IeXnZWnnUsSLFZxX17U0DPMCsGA1UdEQQk
MCKCECoucmVjYXJnYWdpYy5jb22CDnJlY2FyZ2FnaWMuY29tMA4GA1UdDwEB/wQE
AwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMwMTAv
oC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5jcmww
TAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6Ly93
d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwbwYIKwYBBQUHAQEEYzBhMCQG
CCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUHMAKG
LWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNydDAJ
BgNVHRMEAjAAMIIBBgYKKwYBBAHWeQIEAgSB9wSB9ADyAHcA9lyUL9F3MCIUVBgI
MJRWjuNNExkzv98MLyALzE7xZOMAAAFwgh0THgAABAMASDBGAiEAu9c1XUOFWi+T
SCaNy52i3iAxQboxPq6yd6Zt1T09vv0CIQDw5xPwVUFryPwEXg9RGM66Lma5LRoM
M75ozEjYoevT6AB3AFzcQ5L+5qtFRLFemtRW5hA3+9X6R9yhc5SyXub2xw7KAAAB
cIIdE4oAAAQDAEgwRgIhAI1obdV3xrjKsodjG6y6ARynZtUrdablwnxsH6Nn+jF8
AiEAzPF4XqjqI7K9e6WzFtMJ7wWjuXhL6B0qXxM08mWWYlcwDQYJKoZIhvcNAQEL
BQADggEBACAGEWB1HdWoNM1qGfTE+u4CKNADDs2ZJZmNaCUomJEOIx7BJv/o1My4
LH9IJZLgn60g6FsnV57uHR+FF+mAT8PLaZJEOKm6IftufOM+FySStUqR9kZpq6Y1
a6R1sCzHmUccvohIUpl5fjnIjna8UPo97oBWvX3t/yWVQq4Tv405LjgD7mQNJ6Bx
A9d1sfdHqeE8ChloAl1EW020bVk0vxBq3pJR0gL/v9mkOZ81r1shgIjOAhjj6uSS
YH+mr0l0DzWz0fypVuEYZ6rbEWsK7qcKo8U6s311Moh9ZDBhwDQrjiyv4ETGRk6q
YxLJnYmfp4KzUIPNhl9fkj543AkNo40=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mn8KwfD7idp7U5VsqlY
PEJ4fPzSKauT21Z7WqWoretMFZlnhJSUHEbVa4iHcZ7dTU8/5ntodxDOgHW1v597
skme3T5lIPz60y1od1+eo/jV9eJRRLQgqcMnb64IYoB2U+dGpkaD674yIw6ia1RJ
jQhvSSPvIwAIHPDd6h0D2SVVgF/f+OtXzCZGERJmexOixUx5CWYsE6we+nNb6Cbz
eOnBFujfk99ytd4MawCXjbZKjvcKZoubEPsgeVXTQHqRUHUk/BnQ/YB38bCd4CQ5
0jN6p1rHZJQMkPee5k2QbeMozrI89dpGxir3kY6OMaD3FsjK9mn9b/COptyFeZMX
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8353662573726253094024670439832298381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-27 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.recargagic.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28077166869417335787430881754065120507824621616858959097650306106022225231224584621324189762759303831716316664531862444144467997837285805805541065122995770469864395859922054421563896815086414502636674229464078119101597334111429344419912580656178706995451774037792826494137810823882861737745789024341998775268264249175750080052757310992242507998751092727121582190730524523965146667081088658926860577177560376093332177079789770547033194377770417764674174965198869393675072651533097266450572451103668179050541827344307009097135496362713262081734364301712491639684742217713164292804383345605665551968853458430410253080469
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb9a4b821e5e76569e752c48b159c57d7b5340cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recargagic.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recargagic.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (247 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
							00f2007700f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e300000170821d131e0000040300483046022100bbd7355d43855a2f9348268dcb9da2de203141ba313eaeb277a66dd53d3dbefd022100f0e713f055416bc8fc045e0f5118ceba2e66b92d1a0c33be68cc48d8a1ebd3e80077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca00000170821d138a00000403004830460221008d686dd577c6b8cab287631bacba011ca766d52b75a6e5c27c6c1fa367fa317c022100ccf1785ea8ea23b2bd7ba5b316d309ef05a3b9784be81d2a5f1334f265966257
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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