lamborghini-pol.connectauto.io

Issued by Amazon

About this certificate

This digital certificate with serial number 0a:be:cf:85:62:d7:ca:52:75:ac:dd:99:04:82:22:79 was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=lamborghini-pol.connectauto.io

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:be:cf:85:62:d7:ca:52:75:ac:dd:99:04:82:22:79
Serial Number (int): 14283025387694751724244433495530807929
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: c7:03:5b:79:89:c6:ce:94:33:df:ae:85:4b:cd:85:3d:3f:ec:ec:ca
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): ed:02:db:e6:e5:66:52:4b:b8:eb:1b:31:91:01:62:30:19:b9:df:a9
Fingerprint (sha256): 2a:21:b3:b1:89:f3:16:27:68:1a:f0:d7:2a:60:f1:f6:02:e0:6e:ec:b3:8e:83:f5:16:3e:ea:2a:c6:b0:c7:21

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b-1.crl

Check the revocation status for certificate lamborghini-pol.connectauto.io

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for lamborghini-pol.connectauto.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

lamborghini-pol.connectauto.io
*.lamborghini-pol.connectauto.io
*.preowned.lamborghini.com
preowned.lamborghini.com

Other certificates including the domain name connectauto.io

(limited to 100 certificates)
*.landroverapproved.it
publish.connectauto.io
rolls-royce-avl.connectauto.io
rolls-royce-pol.connectauto.io
rolls-royce-pol.connectauto.io
it.jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
landrover-avl.connectauto.io
approved.br.landrover.com
it.landrover-avl.connectauto.io
approved.br.jaguar.com
*.connectauto.io
locator.bentleymotors.com
soldwithrys.com
*.connectauto.io
cms-reader-kia.connectauto.io
*.jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
*.landrover-avl.connectauto.io
es.landrover-avl.connectauto.io
claenge.com
*.connectauto.io
app.domaimobiliaria.com.br
*.connectauto.io
*.connectauto.io
lamborghini-pol.connectauto.io
coconutplace.kr
app.yourtimeline.io
*.connectauto.io
it.jaguar-avl.connectauto.io
cms-reader-north-america.connectauto.io
es.landrover-avl.connectauto.io
approved.br.landrover.com
*.connectauto.io
rolls-royce-pol.connectauto.io
translator.connectauto.io
*.landroverapproved.it
*.connectauto.io
junglesutras.com
www.sairsapata.online
*.connectauto.io
qa.lpx.fund
*.connectauto.io
lamborghini-pol.connectauto.io
*.connectauto.io
qa.ims2.connectauto.io
publish-north-america.connectauto.io
lamborghini-pol.connectauto.io
getbeacon.app
preowned.bentleymotors.com
jaguar-avl.connectauto.io
lamborghini-pol.connectauto.io
publish.connectauto.io
*.connectauto.io
*.landrover-avl.connectauto.io
*.connectauto.io
translator.connectauto.io
www.approved.landrover.de
*.jaguar-avl.connectauto.io
*.landroverapproved.it
redirect-it.landrover-avl.connectauto.io
rolls-royce-pol.connectauto.io
*.connectauto.io
goodhuman.me
*.jaguar-avl.connectauto.io
www.notatia.org
*.connectauto.io
*.landroverapproved.it
*.connectauto.io
*.connectauto.io
publish.connectauto.io
fire.extrafounder.com
preowned-uk.genesis.com
*.connectauto.io
*.connectauto.io
*.landroverapproved.it
rolls-royce-pol.connectauto.io
www.approved.jaguar.de
jaguar-avl.connectauto.io
*.landroverapproved.it
publish.connectauto.io
erayozs.com
it.landrover-avl.connectauto.io
*.kia-ucl.connectauto.io
lamborghini-pol.connectauto.io
redirect-it.jaguar-avl.connectauto.io
*.landroverapproved.it
approved.br.jaguar.com
*.jaguar-avl.connectauto.io
docs.fragments.app
*.landroverapproved.it
approved.br.landrover.com
*.connectauto.io
*.connectauto.io
*.kia-ucl.connectauto.io
*.connectauto.io
*.connectauto.io
app-dev.sknups.gg
ivoryacestructures.com
publish.connectauto.io

Certificate

The complete raw certificate details for lamborghini-pol.connectauto.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIQCr7PhWLXylJ1rN2ZBIIieTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMjAyMTkwMDAwMDBaFw0yMzAzMjAy
MzU5NTlaMCkxJzAlBgNVBAMTHmxhbWJvcmdoaW5pLXBvbC5jb25uZWN0YXV0by5p
bzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOK3umfs00SvGTvb2mRL
809wUuw/DrmBP56mglwHRb31IZYDJAivVjuoVQM652SqlxDPM7h8zmWDmezfGiu8
SwlJdmBL0mYzwvjm2KVglTaRbIVFmUGuayuQiGG1paFMJgbs0bqxyQk8zqFihjre
Ao3YXHI2PI3bmjwosImxshFgMXOX777O9eniR6bhEM6SVFTnqvYFtcP9NN7oYLZT
OVsSfS3NICt54Q/9vLietbPxz6nIqu3G0W3A9ofNEtrioChgyXKMcku71JVZIkCA
y65ChkcihIdINroluc49a8IrS+5ij+wT4mDpTvuc7ZvrxDYpP5KtOkCyTVwCvafD
X6sCAwEAAaOCA1MwggNPMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3Q
MB0GA1UdDgQWBBTHA1t5icbOlDPfroVLzYU9P+zsyjCBgQYDVR0RBHoweIIebGFt
Ym9yZ2hpbmktcG9sLmNvbm5lY3RhdXRvLmlvgiAqLmxhbWJvcmdoaW5pLXBvbC5j
b25uZWN0YXV0by5pb4IaKi5wcmVvd25lZC5sYW1ib3JnaGluaS5jb22CGHByZW93
bmVkLmxhbWJvcmdoaW5pLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYI
KwYBBQUHAwEGCCsGAQUFBwMCMD0GA1UdHwQ2MDQwMqAwoC6GLGh0dHA6Ly9jcmwu
c2NhMWIuYW1hem9udHJ1c3QuY29tL3NjYTFiLTEuY3JsMBMGA1UdIAQMMAowCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Au
c2NhMWIuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNj
YTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAX8G
CisGAQQB1nkCBAIEggFvBIIBawFpAHYArfe++nz/EMiLnT2cHj4YarRnKV3PsQwk
yoWGNOvcgooAAAF/EEGITAAABAMARzBFAiEA8wV1MqnmuZGoPCEKccHJsPDd92Sc
rUt0O7jUlsD8YG8CICXf1Ta0gInyaNf0or6N89ZlC7dtGM1XOq2YJVFlK1UxAHYA
Nc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAF/EEGIUwAABAMARzBF
AiAuoJy2Xug2v4QUuryVOcSLoXSKkt93fX5dAQ6SiXnKOQIhAPBTRiRL905kGUHR
L/8tqXatdy2DvuKoLxylDGGshjTuAHcAs3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH
3PADDnk2pZoAAAF/EEGIhwAABAMASDBGAiEA+wEUqkUMd+FGfVZT1o1svgR731+P
ZsstkF43GniHyN0CIQCPwdYKb+di7cFJLCXh7zuXy7jWqiFZscJd0dfOKgJIdTAN
BgkqhkiG9w0BAQsFAAOCAQEAAvEA8H1Uob7biWJW/O92QPgG2fDL896T0+6KTvaZ
dJhYEued+sr3q0ZFpvWrqLLDu2xG8TTp+VvfcKvdNiz97yV34Uuk4bbsmxHSSO7Y
hjkkXRiCmoOkDrpnQ/TSNkm/RtDxA7jQhCkY4LzPkwzclk3gvefYtavZkKqLLn3Z
tlRWZIFaQoyM9RxNa2K6QvEdkZaZ8mArovdL8uyULepUl6oODxwAWYVnkGwuZNbM
iMhQtAKAsORAlo51uu6nNhw4TISSmiBIDGIDpqKqkLfmaggxgjgqPpDd/govZezf
WmqmijTkZnMjBBUfNYBPJ7a1Rk+l4RSLqyMSL3ch0wSypw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4re6Z+zTRK8ZO9vaZEvz
T3BS7D8OuYE/nqaCXAdFvfUhlgMkCK9WO6hVAzrnZKqXEM8zuHzOZYOZ7N8aK7xL
CUl2YEvSZjPC+ObYpWCVNpFshUWZQa5rK5CIYbWloUwmBuzRurHJCTzOoWKGOt4C
jdhccjY8jduaPCiwibGyEWAxc5fvvs716eJHpuEQzpJUVOeq9gW1w/003uhgtlM5
WxJ9Lc0gK3nhD/28uJ61s/HPqciq7cbRbcD2h80S2uKgKGDJcoxyS7vUlVkiQIDL
rkKGRyKEh0g2uiW5zj1rwitL7mKP7BPiYOlO+5ztm+vENik/kq06QLJNXAK9p8Nf
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14283025387694751724244433495530807929
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-19 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'lamborghini-pol.connectauto.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28620456648939810541787014023066407562811571014518184183174847632428858895849502727005394250974201311107103937279719859111600456124305444020043556435643924799871865035094223294006713022453847128583187623074468516566583726463146480572004887665703160862033909571834029033970334401964120876924495371197749188977928372018766597384083643334538161106011323003692249673097516749771193757526593802149525604278594857352535791322942084452392119718774152987678950290740819767590703398166218354926357770418359423300804251000052253760610931072539503790297567068735173647902343812747498322734325879673472766298210322347386380443563
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c7035b7989c6ce9433dfae854bcd853d3fececca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lamborghini-pol.connectauto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lamborghini-pol.connectauto.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.preowned.lamborghini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'preowned.lamborghini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (54 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002f100f07d54a1bedb896256fcef7640f806d9f0cbf3de93d3ee8a4ef69974985812e79dfacaf7ab4645a6f5aba8b2c3bb6c46f134e9f95bdf70abdd362cfdef2577e14ba4e1b6ec9b11d248eed88639245d18829a83a40eba6743f4d23649bf46d0f103b8d0842918e0bccf930cdc964de0bde7d8b5abd990aa8b2e7dd9b6545664815a428c8cf51c4d6b62ba42f11d919699f2602ba2f74bf2ec942dea5497aa0e0f1c00598567906c2e64d6cc88c850b40280b0e440968e75baeea7361c384c84929a20480c6203a6a2aa90b7e66a083182382a3e90ddfe0a2f65ecdf5a6aa68a34e466732304151f35804f27b6b5464fa5e1148bab23122f7721d304b2a7