WTSFK88B.unitopr.unitint.test.statefarm.org

- State Farm Mutual Automobile Insurance Company -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 10:2b:f9:17:c4:66:c3:e4:00:00:00:00:50:fd:41:35 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State Farm Mutual Automobile Insurance Company

Organization: State Farm Mutual Automobile Insurance Company
State / Province: Illinois
Locality: Bloomington
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:2b:f9:17:c4:66:c3:e4:00:00:00:00:50:fd:41:35
Serial Number (int): 21495968900497996074409185857553383733
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 76:f1:28:17:52:1f:76:50:f9:fa:26:00:61:a4:47:0e:0b:1d:b8:c7
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b6:2a:b0:f8:8f:d6:02:f7:cc:dd:70:32:31:0d:c2:2e:f8:21:5a:ee
Fingerprint (sha256): 31:04:52:b2:7f:43:d1:c7:c4:20:c1:c4:c5:89:51:f5:0c:13:53:ae:f7:a6:0a:2c:c2:55:b2:7e:9b:b8:5a:c0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate WTSFK88B.unitopr.unitint.test.statefarm.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for WTSFK88B.unitopr.unitint.test.statefarm.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

WTSFK88B.unitopr.unitint.test.statefarm.org
www.wtsfk88b.unitopr.unitint.test.statefarm.org

Other certificates including the domain name statefarm.org

(limited to 100 certificates)
ex90dev1vin2.statefarm.com
SFHumanaTest.statefarm.org
servicejourney.env2.pcmngd01.test.ic1.statefarm
sfmeet.statefarm.com
uc71bse1.opr.test.statefarm.org
expw-e53.statefarm.com
mft.statefarm.com
wtsfk9c5.opr.system.test.statefarm.org
test.statefarm.com
vcse-rdc.statefarm.com
sfpcinfra-sbx-mc.pcmngd02.test.ic1.statefarm
GuestInternet2.opr.statefarm.org
testcenterdev.statefarm.com
iwhrdir.statefarm.com
fcm.cfpa.test.ic1.statefarm
access-o.statefarm.com
WPSFCP7Y.opr.statefarm.org
access-o.statefarm.com
iwhrdir.statefarm.com
iwh.statefarm.com
sfmeet.statefarm.com
wtsfk88b.unitopr.unitint.test.statefarm.org
credentialretrieval.appquote.test.ic1.statefarm
sfap71pkiaasedmpoc.opr.test.statefarm.org
test.statefarm.com
sf-accenture-sops.opr.statefarm.org
statefarm.com
smft.tcidv.statefarm.com
smft.tcidv.statefarm.com
*.paasutil.test.ic1.statefarm
ap71ucegw2.opr.test.statefarm.org
sfgitlab.opr.test.statefarm.org
vcse-rdc.statefarm.com
sf.venfi.statefarm.org
WTSD6BYH.UNITOPR.UNITINT.TEST.STATEFARM.ORG
sf-velocloud-public.statefarm.com
requestdelete.appquote.test.ic1.statefarm
WTSFK88B.unitopr.unitint.test.statefarm.org
servicejourney.env6.pcmngd01.test.ic1.statefarm
quoteretrievalsvc.appquote.ic1.statefarm
guestcert-w.wg-iscw.statefarm.org
Guestinternet2.opr.statefarm.org
servicejourney.env8.pcmngd01.test.ic1.statefarm
iwh.statefarm.com
guestinternet-sim.opr.statefarm.org
iwh.statefarm.com
*.paasutil.test.ic1.statefarm
iwhrdir.statefarm.com
iwhrdir.statefarm.com
sf-accenture-sops.opr.statefarm.org
access.tcisp.statefarm.com
access-r-ng.statefarm.com
WTSFK88F.unitopr.unitint.test.statefarm.org
SFHumana.statefarm.org
WPSFCP7W.opr.statefarm.org
keith22.test.statefarm.org
guestinternet-dev.opr.statefarm.org
WTSFK876.unitopr.unitint.test.statefarm.org
uc71bse2.opr.test.statefarm.org
portal.opr.statefarm.org
expw-e56.statefarm.com
sfap95cr001.opr.test.statefarm.org
xnexsvr1t0.opr.statefarm.org
maven-nexus.opr.statefarm.org
sfmediacenter.createsvc.ic1.statefarm
sf-attsdwan2.opr.statefarm.org
xnexsvr1p0.opr.statefarm.org
access-r.statefarm.com
xdocker1pq.opr.statefarm.org
appretrieval.sys.appquote.test.ic1.statefarm
xnexsvr1t0.opr.test.statefarm.org
guestcert-corp.wg-corp.statefarm.org
maven.nexus.opr.statefarm.org
WPSFCP7R.opr.statefarm.org
wtsfk879.unitopr.unitint.test.statefarm.org
nexus.opr.test.statefarm.org
devchat.opr.test.statefarm.org
keith.test.statefarm.org
sfap71pkiaasedmpoc.opr.test.statefarm.org
ui.bundle.test.c1.statefarm
WTSFK879.unitopr.unitint.test.statefarm.org
*.paasutil.test.ic1.statefarm
iwh.statefarm.com
guestcert-corp.wg-corp.statefarm.org
statefarm.com
test.statefarm.com
*.statefarm.org
azure.sync.statefarm.org
iwh.statefarm.com
iwh.statefarm.com
vault.opr.statefarm.org
fai.cfpa.test.ic1.statefarm
iwh.statefarm.com
WPSFCP7Z.opr.statefarm.org
sfap95cr101.opr.test.statefarm.org
ui.bundle.c1.statefarm
statefarm.com
lt00es00.opr.statefarm.org
keith.test5.statefarm.org
statefarm.com

Certificate

The complete raw certificate details for WTSFK88B.unitopr.unitint.test.statefarm.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzvU773vhpu3V7e6oNknp
jBgb3f0KBZ9DtrDVjXnvEf1lLSye2VxzkT+Vn2KW5htco8BI0xh83ScMqKvG3mMV
fOjhjTzYR60TWbIJC9k8hAlg6DGhwkwl3luw5rPlKw5Fbx9thyM2jUgMfZibW7DO
kQ/ZtLh9o9i3Yz+HwtOfoyMHkSDXJuQu9DhDCR4+3Kkwn+NfltoxUduqlqhYCppB
X3L56lbg66QA1xgvh+EDTxy3zR73cuCngHaC8VyHiFaWUSCTSBx9zfhK4ioA8Wo5
sxFyDZ3kkxoughwBnZ/ITMFzRmSN7DkjRWach/uaekXzFVelv4k9WJj+qfCTYn8i
/QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21495968900497996074409185857553383733
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-01-17 15:03:39 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-16 15:33:37 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bloomington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State Farm Mutual Automobile Insurance Company'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WTSFK88B.unitopr.unitint.test.statefarm.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26126020276154172778571461369277065977048210417809050647631123208227398934564785232022912463820936664828644208272081507242955583769341436002899383976584164489466435119614944337387259862027990078986325015860196660520591063312925139893009182501293380460737064641775811543501612701099216939214884880106922185226425556663649195888326113475106306443275401340758054405319093383927673432731456619869263148658945150380798416372722476346876642100136812470708858618836758798432994851987659549130504201023217164703467939990150325018114707429507395631524014174929414153190410005971674299123440884774938523408431386654646764249853
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WTSFK88B.unitopr.unitint.test.statefarm.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wtsfk88b.unitopr.unitint.test.statefarm.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							76f12817521f7650f9fa260061a4470e0b1db8c7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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