factors.ai

Issued by Amazon

About this certificate

This digital certificate with serial number 09:f0:fe:ef:47:15:9b:66:55:04:de:39:ad:97:43:52 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=factors.ai

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:f0:fe:ef:47:15:9b:66:55:04:de:39:ad:97:43:52
Serial Number (int): 13214373897682326914472363258314965842
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8c:ab:ff:26:82:ec:a7:90:9f:90:25:d1:ca:af:4f:13:47:91:9b:6b
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): cf:ce:9f:16:ae:a8:ee:2f:41:1b:e0:0d:f5:b9:fa:86:26:78:38:ea
Fingerprint (sha256): 30:5c:5e:c0:2a:6f:70:0b:75:ae:30:6d:a7:cb:33:46:4d:a2:9c:bb:bc:71:33:d9:52:e8:2f:62:8d:a7:76:f3

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate factors.ai

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for factors.ai

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

factors.ai
*.factors.ai

Other certificates including the domain name factors.ai

(limited to 100 certificates)
us4certificate-1-202203310714.us4.opv1.com
beta.resqueapp.com
us4certificate-1-202206091118.us4.opv1.com
us4certificate-1-202209281315.us4.opr1.com
cert7us4-20211026044230-req.us4.opv1.com
app.reelertech.com
us4certificate-1-202306240559.us4.opr1.com
www.johndavidstatus.com
us4certificate-1-202206261535.us4.opv1.com
us4certificate-1-202203200819.us4.opv1.com
us4certificate-1-202204250707.us4.opv1.com
cert7us4-20211124050849-req.us4.opv1.com
us4certificate-1-202308281356.us4.opr1.com
api.factors.ai
feasibility.cway.28east.co.za
cert7us4-20211108044736-req.us4.opv1.com
us4certificate-1-202206241041.us4.opv1.com
us4certificate-1-202308251232.us4.opr1.com
cert7us4-20211026044230-req.us4.opv1.com
www.ejmotivation.com
www.midcenturymodernmusic.com
us4certificate-1-202203110648.us4.opv1.com
us4certificate-1-202308261636.us4.opr1.com
us4certificate-1-202201171318.us4.opv1.com
www.factors.ai
www.logs.tools
www.tuca.app
cert7us4-20211111032303-req.us4.opv1.com
us4certificate-1-202308120831.us4.opr1.com
us4certificate-1-202308021247.us4.opr1.com
link.bascool.app
staging-app.factors.ai
us4certificate-1-202202220738.us4.opv1.com
us4certificate-1-202308031257.us4.opr1.com
app.qargo.io
novagrids.com
jivegraphics.com
us4certificate-1-202306231647.us4.opr1.com
fortum.se
www.timeytim.com
cert7us4-20211228095313-req.us4.opv1.com
cert7us4-20211213033450-req.us4.opv1.com
us4certificate-1-202202140852.us4.opv1.com
us4certificate-1-202204071525.us4.opv1.com
us4certificate-1-202208200633.us4.opv1.com
fortum.se
www.factors.ai
zportalstudios.com
www.astlanox.com
app.wnegocios.com.br
us4certificate-1-202209200939.us4.opr1.com
factors.ai
us4certificate-1-202201171318.us4.opv1.com
us4certificate-1-202308120831.us4.opr1.com
toutigame.com
tufte-prod.factors.ai
gimnasioelite.turnosweb.app
us4certificate-1-202206261535.us4.opv1.com
tst.sirrapa.com
kruispunt.citolab.nl
us4certificate-1-202206091118.us4.opv1.com
us4certificate-1-202206161242.us4.opv1.com
us4certificate-1-202307121303.us4.opr1.com
us4certificate-1-202205210552.us4.opv1.com
us4certificate-1-202201281023.us4.opv1.com
us4certificate-1-202205121120.us4.opv1.com
cert7us4-20211108044736-req.us4.opv1.com
us4certificate-1-202308031257.us4.opr1.com
app.factors.ai
lounastaja.app
cpn-uml.com
app.treeps.ai
www.j5kmusic.com
us4certificate-1-202205121120.us4.opv1.com
us4certificate-1-202207271237.us4.opv1.com
us4certificate-1-202306231647.us4.opr1.com
us4certificate-1-202308191833.us4.opr1.com
us4certificate-1-202209281315.us4.opr1.com
www.factors.ai
factors.ai
staging.apphive.io
gimnasioelite.turnosweb.app
us4certificate-1-202202040525.us4.opv1.com
us4certificate-1-202206161242.us4.opv1.com
cert7us4-20211228095313-req.us4.opv1.com
cert7us4-20211028062105-req.us4.opv1.com
us4certificate-1-202308221656.us4.opr1.com
us4certificate-1-202202040525.us4.opv1.com
us4certificate-1-202204120609.us4.opv1.com
us4certificate-1-202308121251.us4.opr1.com
us4certificate-1-202308281356.us4.opr1.com
us4certificate-1-202308161246.us4.opr1.com
app.factors.ai
factors.ai
hhhwww.jau.co.jp
www.fagerlund.com
app.factors.ai
mailrecipe.com
www.factors.ai
us4certificate-1-202308071238.us4.opr1.com

Certificate

The complete raw certificate details for factors.ai in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIQCfD+70cVm2ZVBN45rZdDUjANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xOTAxMTgwMDAwMDBaFw0yMDAyMTgx
MjAwMDBaMBUxEzARBgNVBAMTCmZhY3RvcnMuYWkwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCpBqzO8KGK1Eq9ObsizJLGjndkawXD8K4DEI+Bd50Kf9RY
bZeZlUks4oSRrukSfHPZnmjgULzhMu1sXHd5IyNc9Oh9Gl8NvbUWzLXirOtSGwu1
dH1fLsxY7+Ixuc+3Pfk/IXLQU7iukH1m/qEH0mTKHMIEOokEmZzBsjnPru95qaj9
CXERht3D64ir6ZpfmtBCYYRHe+Xj/vv4J1Yhg56X6O4UCA8qCxleJp6LSlpe0RVY
zVgkVpgZcSf0c4uJN32FEvi2AhuPpdNIb3BXuYEvNB4xhBY/X1taORLl2C8MCa7T
nc1/6maR9rxTlYgHmfeq8BG7zi7z+QHJjl4GOd5/AgMBAAGjggKDMIICfzAfBgNV
HSMEGDAWgBRZpGYGUqB7lZI8o5QHJ5Z0W/k90DAdBgNVHQ4EFgQUjKv/JoLsp5Cf
kCXRyq9PE0eRm2swIwYDVR0RBBwwGoIKZmFjdG9ycy5haYIMKi5mYWN0b3JzLmFp
MA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw
OwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5zY2ExYi5hbWF6b250cnVzdC5j
b20vc2NhMWIuY3JsMCAGA1UdIAQZMBcwCwYJYIZIAYb9bAECMAgGBmeBDAECATB1
BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3NwLnNjYTFiLmFt
YXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5zY2ExYi5hbWF6
b250cnVzdC5jb20vc2NhMWIuY3J0MAwGA1UdEwEB/wQCMAAwggEDBgorBgEEAdZ5
AgQCBIH0BIHxAO8AdgDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAA
AWhfqUG6AAAEAwBHMEUCIQDVCY0aBsgjB2KOuhP46WxuZdY1LT2Xl2lEdD3OKRXZ
EAIgYI3ixR/2x3P2JtanVGXTIZZ/afcKd7tvthMk0SXtI2IAdQCHdb/nWXz4jEOZ
X73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWhfqUJVAAAEAwBGMEQCIDBpYXCmEZwp
JDzB5C4Nr6x34xi3xAdyeChFrvp/FXD0AiBE2Z3NlAKub2zdfGd3Yh7UJKk7IqsR
ItV7YtSUmnAMTTANBgkqhkiG9w0BAQsFAAOCAQEAnClTHgChQe7080HXU5cAJ4lv
e0Gw665+7wHe94McoJhXaIIZFWNQcXurqw67YATw+i3WgkkX6TWNkTHzN69qR45o
c90XbQPXW2l9jtRsPRXqkueO4yan1QACa0aTuA9h2fKlQa/7cA9QLu4FaoVTPrnL
b4BO/14/PxLNfzWmoTTWqGJXoJKpFa8dBINWu12QJUEJUaMRVS9ph6jDFtqNwRJj
s6XKMv6LYE1FDYFrOnEeo8rJK7n9TZgH3l32ZrOgCX2gAxzzrBPWJaP6/2coLmUJ
E3O9wNuWGe8izIyIMMBZac3XjW5Aaa/LuW0B2wvaPj4dO0bN/zlkuVm5sYxGtQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQaszvChitRKvTm7IsyS
xo53ZGsFw/CuAxCPgXedCn/UWG2XmZVJLOKEka7pEnxz2Z5o4FC84TLtbFx3eSMj
XPTofRpfDb21Fsy14qzrUhsLtXR9Xy7MWO/iMbnPtz35PyFy0FO4rpB9Zv6hB9Jk
yhzCBDqJBJmcwbI5z67veamo/QlxEYbdw+uIq+maX5rQQmGER3vl4/77+CdWIYOe
l+juFAgPKgsZXiaei0paXtEVWM1YJFaYGXEn9HOLiTd9hRL4tgIbj6XTSG9wV7mB
LzQeMYQWP19bWjkS5dgvDAmu053Nf+pmkfa8U5WIB5n3qvARu84u8/kByY5eBjne
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13214373897682326914472363258314965842
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-18 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-18 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'factors.ai'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21337565120544150735959410638352293317355686843130601230940990631201626173421818954386156699565195476988162841366724886729413123796633110702757260693928694106145999493824289475225312524208061327433747769526677922013331677198098352387747718233561075543863019939356290803488757959723366278096003167558664751835576427148624851267415554705837100196826088020555799177234042411026091120581377049819289888884495549856562106359209225712894974439788726223027718309516384344642095427720225884234641176138418621690363810888006506788074591015887578065151641172425186525084128224828838028223284611400966679428043852131567083839103
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8cabff2682eca7909f9025d1caaf4f1347919b6b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'factors.ai'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.factors.ai'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb000001685fa941ba0000040300473045022100d5098d1a06c82307628eba13f8e96c6e65d6352d3d97976944743dce2915d9100220608de2c51ff6c773f626d6a75465d321967f69f70a77bb6fb61324d125ed23620075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001685fa942550000040300463044022030696170a6119c29243cc1e42e0dafac77e318b7c40772782845aefa7f1570f4022044d99dcd9402ae6f6cdd7c6777621ed424a93b22ab1122d57b62d4949a700c4d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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