seg.mdm.wynnpalace.com

- Wynn Resorts (Macau) S.A. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 0f:d2:e0:1e:f3:80:7b:7a:36:21:76:23:83:12:19:ce was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wynn Resorts (Macau) S.A.

Company registration number: 52/2016
Organization: Wynn Resorts (Macau) S.A.
Organization unit: Information Technology
Locality: Macau
Country: MO

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0f:d2:e0:1e:f3:80:7b:7a:36:21:76:23:83:12:19:ce
Serial Number (int): 21033347989022328294631824964533230030
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b1:5c:55:94:a5:49:bf:f6:70:36:6e:d6:ab:0c:ba:17:6a:28:e2:50
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 58:1b:08:c6:34:bc:62:f6:ac:8c:b9:0c:26:23:0e:59:f6:6e:9c:00
Fingerprint (sha256): 38:6e:71:6f:92:5d:d3:52:fd:dd:e5:26:5c:ea:9d:57:e4:82:4a:6b:13:92:a4:35:12:93:b7:63:af:5e:73:b6

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate seg.mdm.wynnpalace.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for seg.mdm.wynnpalace.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

seg.mdm.wynnpalace.com

Other certificates including the domain name wynnpalace.com

(limited to 100 certificates)
creditauthorization.wynnpalace.wynnorigins.com
press.wynnpalace.com
sip.wynnpalace.com
acedge.wynnmacau.com
sip.wynnpalace.com
sip.wynnpalace.com
*.wynnpalace.com
wynnresorts.com
wynnresorts.com
hrappointment.wynnpalace.com
playbook.wynnpalace.com
spa-booking.wynnpalace.com
seg.mdm.wynnpalace.com
prolc.wynnpalace.com
securemail.wynnpalace.com
wynnimpcms.wynnpalace.com
wynnqaimpcms.wynnpalace.com
ds.mdm.wynnpalace.com
mail.wynnpalace.com
securemail.wynnpalace.com
wynnqaimpcms.wynnpalace.com
moments.wynnpalace.com
spa-booking.wynnpalace.com
creditauthorization.wynnpalace.com
hrappointment.wynnpalace.com
sip.wynnpalace.com
sso.wynnpalace.wynnorigins.com
localskycab.wynnpalace.com
creditauthorization.wynnpalace.wynnorigins.com
ext-lyncwebapp.wynnpalace.com
wynnrespak.wynnpalace.com
ext-lyncwebapp.wynnpalace.com
synixs.wynnpalace.com
eat2eat-int.wynnpalace.com
ptw.wynnpalace.com
localskycab.wynnpalace.wynnorigins.com
pressroom.wynnpalace.wynnorigins.com
wynnpalace.com
sso.wynnpalace.com
ext-lyncwebapp.wynnpalace.com
wynnpalace.com
wynnresorts.com
wynnresorts.com
hrappointment.wynnpalace.com
seg.mdm.wynnpalace.com
wynnimpcms.wynnpalace.com
spa-booking.wynnpalace.com
sip.wynnpalace.com
idp.wynnpalace.com
wynnresorts.com
ext-offwebappfarm.wynnpalace.com
mail.wynnpalace.com
wynnresorts.com
qathewire.wynnpalace.com
spa-booking.wynnpalace.com
sslvpn.wynnpalace.com
hrappointment.wynnpalace.com
wynnresorts.com
creditauthorization.wynnpalace.wynnorigins.com
imt.wynnpalace.com
wynnpalace.com
wynnresorts.com
ext-lyncwebapp.wynnpalace.com
qareport.wynnpalace.com
segc2.mdm.wynnpalace.com
wynnresorts.com
*.wynnpalace.com
securemail.wynnpalace.wynnorigins.com
*.wynnpalace.com
wynnresorts.com
mail.wynnpalace.wynnorigins.com
wynnpalace.com
securemail.wynnpalace.com
rrs.wynnpalace.com
sso.wynnpalace.com
pressroom.wynnpalace.com
report.wynnpalace.com
resources.wynnpalace.com
scm.wynnpalace.com
Bomgar.wynnpalace.com
moments.wynnpalace.com
hrappointment.wynnpalace.com
wynnspa-int.wynnpalace.com
seg.mdm.wynnpalace.com
ext-offwebappfarm.wynnpalace.com
wpvrmss.wynnpalace.com
creditauthorization.wynnpalace.com
prolc.wynnpalace.com
www.wynnpalace.com
securemail.wynnmacau.com
securemail.wynnpalace.com
sip.wynnpalace.com
fcs.wynnpalace.com
hrappointment.wynnpalace.com
ds.mdm.wynnpalace.com
INT-DEVIMSURVEY.WYNNPALACE.COM
localskycab.wynnpalace.wynnorigins.com
qalc.wynnpalace.com
synxis.wynnpalace.wynnorigins.com
rs.wynnpalace.com

Certificate

The complete raw certificate details for seg.mdm.wynnpalace.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+2+YkbtEeq1kFgNRmOx
lXECuhqjrFM4GyHJZTMWUKVL5arv5l3BOcpMMUH29GdW8mzsV4qtXJj/Mq6i93o1
J9rBMpFRBC2Yzp9mfSXsphgpST7KhNtKBIdu3E5rtg8H305HzfFEhknQ0Hgn7lBl
8AcWdJB4GmDMAiibYx3uNMuDUDnKZWgCOXKAnNwOQlK3WkHz1nY1yhKlsmjsXFGA
EWocr2DpLSN2dGpeuQS082J7FZkq+JkzkY6fEVbYuDEZ+FfSoiDTUsguDlO5uxA+
g2dwwwL4a9eIubU0K1HzLSQvN9vV/uJ/NO5zhCvJv/FS8yM/i4D9NFaRmvlZulUP
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 21033347989022328294631824964533230030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-06 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '52/2016'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Macau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wynn Resorts (Macau) S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'seg.mdm.wynnpalace.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24228752030058124637505800777682469400312750769679559055163048862739523224058265236503214667788609887555003788064340366624752788356182914943888779922635077931061147878483189328912482449052142246772058519751770960619202487410811600480622953696347901119562638742336795821141194011649142130122248588561804665053840785568530357955975482807850947953729449941685221212382578712521452292517962909984257217914049125612918482742872867794348656881772772195412008840248715649596296802809182635685081599595124822828269062378686622817198319980162075895269033612624640498387008413857766127680823575516071227598002554316670912237507
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b15c5594a549bff670366ed6ab0cba176a28e250
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seg.mdm.wynnpalace.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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