www.shanghaidisneyresort.com.cn

- Disney Enterprises, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 04:3b:22:5d:0b:b3:bd:d7:00:00:00:00:50:e2:d6:08 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Disney Enterprises, Inc

Organization: Disney Enterprises, Inc
State / Province: Washington
Locality: Seattle
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:3b:22:5d:0b:b3:bd:d7:00:00:00:00:50:e2:d6:08
Serial Number (int): 5623954471560485628137390520777496072
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 12:ff:62:5b:86:20:e5:31:71:0e:60:60:53:f6:9e:bc:ea:6b:02:e0
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): fa:2e:89:5c:8b:ce:87:5f:3c:0b:0c:c2:23:27:11:16:02:c1:58:e2
Fingerprint (sha256): 3c:fc:ec:d1:8b:38:b5:a1:b7:9c:b0:be:b6:ca:5c:0e:82:f4:18:39:88:67:a6:6b:26:5b:3c:36:0e:b9:cd:6d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.shanghaidisneyresort.com.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.shanghaidisneyresort.com.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.shanghaidisneyresort.com.cn
shanghaidisneyresort.com.cn

Other certificates including the domain name shanghaidisneyresort.com.cn

(limited to 100 certificates)
VWMS.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp-qa.shanghaidisneyresort.com.cn
printer-qa.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
www.chinacache.com
www.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
dcs.shanghaidisneyresort.com.cn
d3security.shanghaidisneyresort.com.cn
d3security-qa-tmp.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
wechatapi.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
shdr-passportscan.shanghaidisneyresort.com.cn
shdrltweb.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
wmmobile81-qa.shanghaidisneyresort.com.cn
dmeeting.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
d3security-qa.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
VWMS.shanghaidisneyresort.com.cn
customer-service-portal.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
shdrdevapi.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
TenantSales.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
latest.gw.fsts.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdr-sjlt-qa.shanghaidisneyresort.com.cn
media-cast.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdrbuzz-qa.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
bbstudio.disney.com
shdr-delphi.shanghaidisneyresort.com.cn
news.shanghaidisneyresort.com.cn
shdrdevweb.shanghaidisneyresort.com.cn
SHDR-OWS-QA.starwave.com
ehour.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
shdrbuzz-lt.shanghaidisneyresort.com.cn
www.chinacache.com
bsp.disney.com
sw88.shanghaidisneyresort.com.cn
www.chinacache.com
unveilthemagic.shanghaidisneyresort.com.cn
wmmobileq.shanghaidisneyresort.com.cn
media-static.shanghaidisneyresort.com.cn
tenantsales-qa.shanghaidisneyresort.com.cn
shdr-dam.shanghaidisneyresort.com.cn
bbstudio.disney.com
ehskp.shanghaidisneyresort.com.cn
sw88.shanghaidisneyresort.com.cn
shdr-dam-qa.shanghaidisneyresort.com.cn
wmmobilep.shanghaidisneyresort.com.cn
ehskp-qa.shanghaidisneyresort.com.cn
tenantsales.shanghaidisneyresort.com.cn
www.chinacache.com
wmmobileq.shanghaidisneyresort.com.cn
ehour.shanghaidisneyresort.com.cn
shdr-delphi.shanghaidisneyresort.com.cn
view.shanghaidisneyresort.com.cn
SHDR-OWS-DEV.starwave.com
SHDR-OWS-DEV.starwave.com
SHDR-OWS.starwave.com
wmmobile.shanghaidisneyresort.com.cn
www.shanghaidisneyresort.com.cn
printer.shanghaidisneyresort.com.cn
bsp.disney.com
dhour.shanghaidisneyresort.com.cn
bsp.shanghaidisneyresort.com.cn
bsp.disney.com
printer.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
tsaservice.shanghaidisneyresort.com.cn
shdrqaweb.shanghaidisneyresort.com.cn
wmmobile.shanghaidisneyresort.com.cn
unveilthemagic.shanghaidisneyresort.com.cn
bluebeam.shanghaidisneyresort.com.cn

Certificate

The complete raw certificate details for www.shanghaidisneyresort.com.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzaDPRX9Qy5FgZXB3XHYE
ZuOQbtS//O4gq3SiqYOYA9c+5PKFHNKCMjtVwM+LQ6wh88gKOa83Cud6hQ/Cs/mo
mgXQPVjZGCwyEf7AO42gX4k+I+OzScGgim20tF9aD9pouM5+BdJXChzH5fc6ESeB
H1AtJYOiiHD04JzAGsT5RSll9e3xhZ4byRoG1Ipq7+8DRjPt6wEMVwpT1wHXZCFM
Syne17Zq1xGfz6U1NM2P8tl1M5TKpK7RORj2/sVLR+W6Q0eEi0Y/QtDdcYX8Bm53
YEa6AN/gimLB/BXbpyrioEMwqXMl6cSInr01NeLp8STri8OrlYBmphyz+7QxlYt8
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5623954471560485628137390520777496072
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-17 11:42:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 12:12:32 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Seattle'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Disney Enterprises, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.shanghaidisneyresort.com.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25958150714009832977140291763703193047950158137220845284480654239848162004391617299354205990071636281060697138449861748025296314302317676684889327972794478817205829123004628587995650181832997791112348255565449570164776350672250623625394365198946816962634670878480205701123538501370092656109782972076107543038498925242762197092006846820466525084283204492944945224646662666705360912126610770168611929717624429543101921310307542335637132156580379806900778515990400947335111013751443853202246986396694571962596484556819917730118681675218058636772208648491254020191344576660577386554012597638286449802785513716819704904951
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.shanghaidisneyresort.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'shanghaidisneyresort.com.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							12ff625b8620e531710e606053f69ebcea6b02e0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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