www.lexus.com.my

- UMW Toyota Motor Sdn Bhd -

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 0a:f4:29:68:71:02:49:6f:f5:1b:d4:66:68:ad:04:88 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

UMW Toyota Motor Sdn Bhd

Organization: UMW Toyota Motor Sdn Bhd
State / Province: Selangor
Locality: Shah Alam
Country: MY

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:f4:29:68:71:02:49:6f:f5:1b:d4:66:68:ad:04:88
Serial Number (int): 14560040244828878631833010863088665736
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: b5:d0:04:6d:95:31:a0:13:47:e7:65:9e:4e:01:9d:bb:8d:75:f8:13
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): 98:c7:4d:b4:08:e5:7c:7a:8e:1c:9e:34:0e:bc:2c:68:b4:f0:49:68
Fingerprint (sha256): 38:97:32:83:17:85:29:bf:26:e4:2a:a9:f2:74:32:99:38:7d:01:03:5a:5a:2e:c7:76:c4:fc:25:42:3d:98:97

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate www.lexus.com.my

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lexus.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lexus.com.my
lexus.com.my

Other certificates including the domain name lexus.com.my

(limited to 100 certificates)
golf.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
apps.lexus.com.my
www.golf.lexus.com.my
golf.lexus.com.my
www.lexus.com.my
www.golf.lexus.com.my
lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
*.lexus.com.my
www.lexus.com.sg
drivers.lexus.com.my
sni.cloudflaressl.com
www.lexus.com.sg
drivers.lexus.com.my
*.lexus.com.my
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
www.lexus.com.sg
lexus.com.my

Certificate

The complete raw certificate details for www.lexus.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfjCCBWagAwIBAgIQCvQpaHECSW/1G9RmaK0EiDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0yMjA1MjQwMDAwMDBaFw0yMzA2MjQyMzU5NTlaMHIxCzAJBgNVBAYTAk1ZMREw
DwYDVQQIEwhTZWxhbmdvcjESMBAGA1UEBxMJU2hhaCBBbGFtMSEwHwYDVQQKExhV
TVcgVG95b3RhIE1vdG9yIFNkbiBCaGQxGTAXBgNVBAMTEHd3dy5sZXh1cy5jb20u
bXkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChF9M8ZQ4+T1LKzThH
oExIHOifwh2nQKTrfmSWti0fRrZPwQled6VImIq7q0GOmPVQR/P/gY8dQ/oszOLi
5ajNP/DEj4J4cT29kMW9enP1ZkOEbButIbZ4rDe2bkFZqy7C9bsCy/KQFR95VMt/
UKg03MS8qP3OYkr8Ti8PF72l12MXKA1whNNKnKuGZxRQxfaxWzpwaRouBQPCepqQ
n8TgdjJuR/C/3rRefyzjmVzyQfMDahvsOQR5Us/WvxnzTiPACJ9wqxMMxIaSqg6k
+wodWPoRT9jYvPoUoUvWlRw/bBuH9B0jnqPBwnbdXP8sX2tztoAypFJkxhnbn6fE
8t41AgMBAAGjggMiMIIDHjAfBgNVHSMEGDAWgBSQWP+wnHWoUVR3se3yo0MWOJ5s
xTAdBgNVHQ4EFgQUtdAEbZUxoBNH52WeTgGdu411+BMwKQYDVR0RBCIwIIIQd3d3
LmxleHVzLmNvbS5teYIMbGV4dXMuY29tLm15MA4GA1UdDwEB/wQEAwIFoDAdBgNV
HSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0
cDovL2NkcC5nZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMD4GA1Ud
IAQ3MDUwMwYGZ4EMAQICMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cuZGlnaWNl
cnQuY29tL0NQUzB1BggrBgEFBQcBAQRpMGcwJgYIKwYBBQUHMAGGGmh0dHA6Ly9z
dGF0dXMuZ2VvdHJ1c3QuY29tMD0GCCsGAQUFBzAChjFodHRwOi8vY2FjZXJ0cy5n
ZW90cnVzdC5jb20vR2VvVHJ1c3RSU0FDQTIwMTguY3J0MAkGA1UdEwQCMAAwggF+
BgorBgEEAdZ5AgQCBIIBbgSCAWoBaAB1AOg+0No+9QY1MudXKLyJa8kD08vREWvs
62nhd31tBr1uAAABgPUfjmMAAAQDAEYwRAIgTs/iLm/MLgQIx6gEXKvGfpzha2gr
3oFg9EecpvZlRgoCIHqbnw2cdXyjdzPto9C4NPQI7J7EAgExq3LrJacnuVKIAHcA
Nc8ZG7+xbFe/D61MbULLu7YnICZR6j/hKu+oA8M71kwAAAGA9R+ObwAABAMASDBG
AiEA2f2qBOfGDr4U3EzpnrtsXx/cU5agAMY0Yn27jX9uibECIQCwtGHij9Fo4uov
Y0yz+5LzKAmBoiHhxIJCQz59PDXa4QB2ALc++yTfnE26dfI5xbpY9Gxd/ELPep81
xJ4dCYEl7bSZAAABgPUfjlgAAAQDAEcwRQIhAO9ZS8L0uELN1SjF1UGbMPzwODI0
oZXyxpfvL4kyIuPoAiBp8rdL6YDtImBO4SY+U9BdM98DF1wXcJAAAjMp4yZtOTAN
BgkqhkiG9w0BAQsFAAOCAQEAEjNrEd51CDsNpyzs4PjAUs4m+a1O+d7rTPXp8fLu
5pPi9taxaYCbMnVS7EsicGzuANYLBbAmcoGt9Y80ta8/E1AuWB411ZmnhNKaicl3
V3Pk37vXUla0Uiqvvkj5AnbOk7XO85SCT//Ah6QRM7PYcBiwoVukFuhKAgnWn2HK
aS1QYiO9/Jck+fU0h3UuzlfobhFUs7xnbRfu5xW5XDW9QbC3KT030A7lm5MGn0DJ
R6LmMYsB3b0BSoWGpRDnRVWBGq9NmonMR4xwkbUZt0lbOKMWD1RnY+09XLmlNSPF
DjVqd5l53YdY4GxzJXAC4j16GOAvlZUWjXZnOzXBy81rfQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRfTPGUOPk9Sys04R6BM
SBzon8Idp0Ck635klrYtH0a2T8EJXnelSJiKu6tBjpj1UEfz/4GPHUP6LMzi4uWo
zT/wxI+CeHE9vZDFvXpz9WZDhGwbrSG2eKw3tm5BWasuwvW7AsvykBUfeVTLf1Co
NNzEvKj9zmJK/E4vDxe9pddjFygNcITTSpyrhmcUUMX2sVs6cGkaLgUDwnqakJ/E
4HYybkfwv960Xn8s45lc8kHzA2ob7DkEeVLP1r8Z804jwAifcKsTDMSGkqoOpPsK
HVj6EU/Y2Lz6FKFL1pUcP2wbh/QdI56jwcJ23Vz/LF9rc7aAMqRSZMYZ25+nxPLe
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14560040244828878631833010863088665736
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-24 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Selangor'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shah Alam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'UMW Toyota Motor Sdn Bhd'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lexus.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20336115714094588899382998853012032171344804072084241683733483504989082442422929078610317055200187632810064862143741613555507214104117280400202960080961104497956386283962415899826802691993074097389269382157717129420472662984446737113862374920903709784304066944534805188892370572170039365186124022556785910166187308302367666794677798500055312828625736646528147454435701904625118948910889121185989450500938436461386765362078666789042727632591067940900355479913007314875296770349764361105244905158393990634921123583006713434251246301131416199365759879143877603699652223261936270226443579027333451530452380655246912970293
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b5d0046d9531a01347e7659e4e019dbb8d75f813
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lexus.com.my'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lexus.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							0168007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e00000180f51f8e63000004030046304402204ecfe22e6fcc2e0408c7a8045cabc67e9ce16b682bde8160f4479ca6f665460a02207a9b9f0d9c757ca37733eda3d0b834f408ec9ec4020131ab72eb25a727b9528800770035cf191bbfb16c57bf0fad4c6d42cbbbb627202651ea3fe12aefa803c33bd64c00000180f51f8e6f0000040300483046022100d9fdaa04e7c60ebe14dc4ce99ebb6c5f1fdc5396a000c634627dbb8d7f6e89b1022100b0b461e28fd168e2ea2f634cb3fb92f3280981a221e1c48242433e7d3c35dae1007600b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb49900000180f51f8e580000040300473045022100ef594bc2f4b842cdd528c5d5419b30fcf0383234a195f2c697ef2f893222e3e8022069f2b74be980ed22604ee1263e53d05d33df03175c17709000023329e3266d39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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