bcs.sd70.bc.ca

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0a:0e:dd:c4:ee:32:eb:98:ee:32:3b:19:a0:35:c0:4a was issued on by DigiCert, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=bcs.sd70.bc.ca

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:0e:dd:c4:ee:32:eb:98:ee:32:3b:19:a0:35:c0:4a
Serial Number (int): 13369470128829897336464635725381746762
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 8f:db:d7:54:a1:26:7e:88:96:f8:b6:80:42:8a:fc:1c:fb:ea:cd:d5
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 06:56:ad:9d:a5:87:1f:aa:e7:0a:42:bb:5b:d8:22:82:5c:f2:f3:f2
Fingerprint (sha256): 38:32:44:1a:da:a7:35:a1:2c:c3:ec:3d:c4:a1:e2:0b:70:cb:aa:32:94:e4:f7:63:a5:d1:88:23:b2:61:38:47

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate bcs.sd70.bc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bcs.sd70.bc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bcs.sd70.bc.ca

Other certificates including the domain name sd70.bc.ca

(limited to 100 certificates)
admin-portal.lafmty.edu.mx
www.hardesty.k12.ok.us
admin-portal.lafmty.edu.mx
*.sd70.bc.ca
bcs.sd70.bc.ca
admin.aechs.mcallenisd.org
adss.sd70.bc.ca
www.sd70.bc.ca
mail.sd70.bc.ca
aes.sd70.bc.ca
mail.sd70.bc.ca
sdsweb.sd70.bc.ca
*.sd70.bc.ca
adss.sd70.bc.ca
*.sd70.bc.ca
mail.sd70.bc.ca
admin-portal.lafmty.edu.mx
www.aspenridgeprepschool.org
admin.aechs.mcallenisd.org
admin-portal.lafmty.edu.mx
*.sd70.bc.ca
mail.sd70.bc.ca
mail.sd70.bc.ca
ined.sd70.bc.ca
awnes.sd70.bc.ca
admin-portal.lafmty.edu.mx
sdsweb.sd70.bc.ca
sdsweb.sd70.bc.ca
admin-portal.lafmty.edu.mx
www.enterprisecharter.org
mail.sd70.bc.ca
admin-portal.lafmty.edu.mx
*.sd70.bc.ca

Certificate

The complete raw certificate details for bcs.sd70.bc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHjDCCBXSgAwIBAgIQCg7dxO4y65juMjsZoDXASjANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMxMjIxMDAwMDAwWhcNMjQwNjIxMjM1OTU5WjAZMRcwFQYDVQQDEw5iY3Muc2Q3
MC5iYy5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrGjiXu1bZi
V+zwCFcZk7hgBRcrC2R1zogH6LJQhAtBTtsio+P9brJXnK59kUjfvPp1UF6qbJI/
/zXpsBfyEqJxxTy9QZR+/czXl0tRLT+/OW1CmI0cJQ6GEnFdVW8XAno27NaPvxv2
qJ0tCPNNBuYFZMymIVsO7+aWr8smeKTmCELkz/WQPTkMXqI7OEdu979d4ECgwIB+
SWKT1DVlH96aR9Lfijs5e3wbLkvj0mODQX5DDC6/0WSm0wv0ciltra7qHu7oyVJa
ty+tC/sxuisvsyWoozN4sod9MDRomLRo6/eGLgOVFmg0MBcpI9sB6qi0pBiNQLTm
5ZH6Q0PjeY0CAwEAAaOCA4swggOHMB8GA1UdIwQYMBaAFKW01us2xOdrpt/EZAsB
KiAEuGYjMB0GA1UdDgQWBBSP29dUoSZ+iJb4toBCivwc++rN1TAZBgNVHREEEjAQ
gg5iY3Muc2Q3MC5iYy5jYTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUF
BwIBFhtodHRwOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWg
MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEig
RqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS
U0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2lj
ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy
bDCBhwYIKwYBBQUHAQEEezB5MCQGCCsGAQUFBzABhhhodHRwOi8vb2NzcC5kaWdp
Y2VydC5jb20wUQYIKwYBBQUHMAKGRWh0dHA6Ly9jYWNlcnRzLmRpZ2ljZXJ0LmNv
bS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNydDAMBgNV
HRMBAf8EAjAAMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAYyNkOVLAAAEAwBIMEYCIQCOSU5e3bR7
LgQGA/zjCgzcMWTCR/5qI/MXiAuPFyJtvgIhAKvz9YxyGZN07JLqO/H/2F38slQ6
HSegIpiCiWipI1eJAHYASLDja9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMA
AAGMjZDlPAAABAMARzBFAiAXEBuzri2kT5HUnfloNs+LHCmU8UwUZ+LFMoe2UPA8
WgIhALkCAhdLpqjoFGaD2ogm0eWwQv6kE8cI4iJcmqCxMo3fAHYA2ra/az+1tiKf
m8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGMjZDlQAAABAMARzBFAiEA8amPNjgD
WflF/gJZYZVtL8SAbXpsgkZjOoFOLoRYSNkCIEjg05g8uvT3SYXOglyEBQbKLVmv
av2dENRP2C3lSDsEMA0GCSqGSIb3DQEBCwUAA4ICAQB6xFNnoYI4YJ/Ni7lR1L3p
Qdr8/Lo2F64818n2yrr0oSfHW7xJL6Hxq8wLBDHSZDlf+XTGpOFDO+/DJv0X+nRF
2Riq1+1rJ6FRrxhxzaDCB+ZjxX1ahQ3dHeie+cRbzkqVyamULunHqGZL3uBcYxaM
gtho8N7yonly3P5f87vr2DJTzs6Hhsa4z1in34OwZbop+CErclIj6xD1j0yv8mqH
gs/K+PwISeYHjAYOcHzm1/MaPCI43fcgHzfU+gGRxw+hUcI5ms2rR73o1paYLhnk
gO8aPGdbEjABNUt09rGbK0XANgRmfRy2J2m9mLuYTknHWkMOmDuu2BgYvd9/hoQ2
v5JDQEalAT3bktB1npX1Y88WyVbxrnzhl/gn7CXsTfI/FZOHwJhXLrWpK5QFIFLj
YyoGxXa4//GoK/937H7fIi1PyZDVLNHOPpyx3ZzBmppWovV3IEKpvuQ9cklppI9n
RGXCg5VSRrDPVBefefqaPfioyz/Q1Lj0SK/VkN/UEmPgBXxWCaMa/fc21jVOHu0V
FOAxoAQoeVdw/gyKqlmi+V+DYI30HDZOgIAYgzqnuOAG1i1E78cn7kl6szj0Tw10
HM25ONC232+VTNaDk0pvDymcWdN9g2D8il2dDQmqkFUyY/j54hkwWPhSlN7BSAd0
slo1hC+1Xn9nQeccmLnGww==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusaOJe7VtmJX7PAIVxmT
uGAFFysLZHXOiAfoslCEC0FO2yKj4/1uslecrn2RSN+8+nVQXqpskj//NemwF/IS
onHFPL1BlH79zNeXS1EtP785bUKYjRwlDoYScV1VbxcCejbs1o+/G/aonS0I800G
5gVkzKYhWw7v5pavyyZ4pOYIQuTP9ZA9OQxeojs4R273v13gQKDAgH5JYpPUNWUf
3ppH0t+KOzl7fBsuS+PSY4NBfkMMLr/RZKbTC/RyKW2truoe7ujJUlq3L60L+zG6
Ky+zJaijM3iyh30wNGiYtGjr94YuA5UWaDQwFykj2wHqqLSkGI1AtOblkfpDQ+N5
jQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13369470128829897336464635725381746762
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bcs.sd70.bc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23578235974707088415227133057387779395850483698945345269136117353920682969127452965791365138234151301657473670159448911631130087877839395552508672531058567748327898494453279931018481660597257811887514075936832112006306487462743410274436961261082226659712925674140451002547177357188830473760295215237999400328131329257216867004911561789205777050346475501271767789471654958619718233408743993492273952311023731241294338036318377419548382011795464632462183726298466131214653996971807223357734181023662461342051715587358421795070684706439672389301297533593559797647064565430487664210584926131330956626345462076192193739149
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8fdbd754a1267e8896f8b680428afc1cfbeacdd5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcs.sd70.bc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		007ac45367a18238609fcd8bb951d4bde941dafcfcba3617ae3cd7c9f6cabaf4a127c75bbc492fa1f1abcc0b0431d264395ff974c6a4e1433befc326fd17fa7445d918aad7ed6b27a151af1871cda0c207e663c57d5a850ddd1de89ef9c45bce4a95c9a9942ee9c7a8664bdee05c63168c82d868f0def2a27972dcfe5ff3bbebd83253cece8786c6b8cf58a7df83b065ba29f8212b725223eb10f58f4caff26a8782cfcaf8fc0849e6078c060e707ce6d7f31a3c2238ddf7201f37d4fa0191c70fa151c2399acdab47bde8d696982e19e480ef1a3c675b123001354b74f6b19b2b45c03604667d1cb62769bd98bb984e49c75a430e983baed81818bddf7f868436bf92434046a5013ddb92d0759e95f563cf16c956f1ae7ce197f827ec25ec4df23f159387c098572eb5a92b94052052e3632a06c576b8fff1a82bff77ec7edf222d4fc990d52cd1ce3e9cb1dd9cc19a9a56a2f5772042a9bee43d724969a48f674465c283955246b0cf54179f79fa9a3df8a8cb3fd0d4b8f448afd590dfd41263e0057c5609a31afdf736d6354e1eed1514e031a00428795770fe0c8aaa59a2f95f83608df41c364e808018833aa7b8e006d62d44efc727ee497ab338f44f0d741ccdb938d0b6df6f954cd683934a6f0f299c59d37d8360fc8a5d9d0d09aa90553263f8f9e2193058f85294dec1480774b25a35842fb55e7f6741e71c98b9c6c3