Readytowork.absa.africa

- Absa Group Limited -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 9c:28:3d:c0:8a:ee:63:4c:00:00:00:00:54:d0:47:84 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Absa Group Limited

Company registration number: M1986003934
Organization: Absa Group Limited
State / Province: Gauteng
Locality: Johannesburg
Country: ZA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 9c:28:3d:c0:8a:ee:63:4c:00:00:00:00:54:d0:47:84
Serial Number (int): 207568511698578419385432054925494339460
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 97:4e:e8:18:22:df:1e:30:b5:02:8d:e8:03:6c:f4:c6:36:49:40:b3
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 28:27:9d:84:ec:cd:22:e7:08:8a:26:1d:6d:1a:9a:e1:43:9b:e1:a6
Fingerprint (sha256): 2a:e5:f0:28:15:55:5a:52:c7:db:31:55:63:a5:02:4a:46:f0:b1:fb:39:6a:bb:46:06:47:ae:ba:68:67:8a:ed

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate Readytowork.absa.africa

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Readytowork.absa.africa

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Readytowork.absa.africa
Readytowork.absa.co.za

Other certificates including the domain name absa.africa

(limited to 100 certificates)
click.cibmc.absa.africa
sso.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
sdr-estatement.absa.africa
sso-test.absa.africa
netbanking.ke.absa.africa
marketplace.absa.africa
exuhomeloans.absa.africa
webchat.absabank.co.ke
gena.absa.africa
Mail.Absa.co.za
demo.prod.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
ssohub-test.absa.africa
pocketflow.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
absa-rbbshortterm-test.absa.africa
ib-secure.mz.absa.africa
shugo-internal-nonprod.absa.africa
cloud.absarbb.absa.africa
readytowork.absa.africa
latelier.absa.africa
eventsdesk.absa.africa
mail.absa.co.za
cibclientaccount.absa.africa
supportandservicemanagement.absa.africa
akamai-san130.exacttarget.com
iboc-test.absa.africa
image.email.sweet.tv
chatbot-ug.absa.africa
short.dev.absa.africa
ea.uat.absa.africa
webchat.absa.co.mu
akamai-san130.exacttarget.com
mra-e-cluster-1.absa.co.za
api.absa.africa
www.absafinancialservices.co.za
iboc.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
habari.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
image.email.sweet.tv
webchat.absa.co.bw
shugo-bc-uat.absa.africa
shugo-b.absa.africa
digitaldistribution.absa.africa
ibocnbc-test.absa.africa
ea.prod.absa.africa
trk-estatement.absa.africa
webhook.absa.africa
notify.prod.absa.africa
image.email.sweet.tv
iboc-dev.absa.africa
webchat.absa.co.tz
homeloans.absa.africa
ea.uat.absa.africa
mftmobile-uat.absa.africa
demo1.dev.absa.africa
events.absa.africa
shugo-a.absa.africa
jhbpsr000001200-cluster1.absa.co.za
image.email.sweet.tv
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
netbanking.ug.absa.africa
MailInbound.absa.africa
iboc-test.absa.africa
vpn-za.absa.africa
Readytowork.absa.africa
ea.dev.absa.africa
kyc.uat.absa.africa
shugo-internal-prod.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
latelier.absa.africa
sso-test.absa.africa
onboarding.absa.africa
latelier.absa.africa
onboarding.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
api.absa.africa
kyc.dev.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
aroweb.absa.africa
san-4-s50.tlsprovisioning.exacttarget.com
aiss.absa.co.za
ea.prod.absa.africa
webchat.absabank.co.ke
shugo-b.absa.africa
webhook.absa.africa
tails.prod.absa.africa
webhook-staging.absa.africa
san-19-s50.tlsprovisioning.exacttarget.com
san-19-s50.tlsprovisioning.exacttarget.com
tails.dev.absa.africa
notify.prod.absa.africa
MailInbound.absa.africa
cibclientaccount.absa.africa
digitaldistribution.absa.africa

Certificate

The complete raw certificate details for Readytowork.absa.africa in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ZDjnHTgFwy9emo79k8h
a3Ey6nGXVXBghR8YWfzmu9IEn17fZex0zUqXyghKWo8Wx/kA5oGXRLZigR+HM/aX
hGSosEywhEHG4oTn2cfimIPxMWq9RvXS/BDgH9sgDgjOAJmDTvIdmYI+OGXqpkmB
YURbV2ff+uSz/vT+KV6DT4/LOjaJsItHnqK1W7MTpfmZH3vRUkzyGcqMzJwEnyDk
WJRc9/QrBk/GeJ2LLkk8j7uYvmo4oEUMGCN03GWYb0vlOESWLOyQA42ZBWQ5Gpq+
+0QsO0hObc3eFoKNyLweH630Fr5+HC5kBWBTuDilsEj6tIXrxNiUo3B4pZYx2tkH
MwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 207568511698578419385432054925494339460
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-16 11:21:32 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-09-16 11:51:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gauteng'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Johannesburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Absa Group Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'M1986003934'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Readytowork.absa.africa'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26960206438866274737800862231131939645007663115636149679494419055309410172255448216022871195248595344969794268410429743892332448729612232727678510834030678356900393740575834461858385008663019481471391934838140429839724440615978750769630297797141730722394322403270507680371060804233291288378518990142131148703114362345177882204452508323217058640626855364517903344550042687974627354212223311933708837852425927918330172638166207198300317612859664366695689092144428182897772114278173992352849778446539805176379918978343486106870276666978669175106749507701263432125339699372613345920050244111326885324641009906218352314163
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Readytowork.absa.africa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Readytowork.absa.co.za'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (479 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							974ee81822df1e30b5028de8036cf4c6364940b3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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