*.audeering.com

Issued by Thawte TLS RSA CA G1

About this certificate

This digital certificate with serial number 01:9b:64:e9:9d:c5:f7:5d:9d:c8:5f:5a:ce:6e:df:14 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.audeering.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 01:9b:64:e9:9d:c5:f7:5d:9d:c8:5f:5a:ce:6e:df:14
Serial Number (int): 2136080758808518225812255509654200084
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: f7:66:52:36:67:5b:7b:a0:e1:cf:bd:60:b1:2d:dd:c9:6f:4f:85:f4
AuthorityKeyId: a5:8c:fe:32:cc:eb:0f:2c:d4:19:c6:08:b8:00:24:88:5d:c3:c5:b7

Fingerprint (sha1): 15:25:e1:70:26:71:d7:5a:ff:93:57:70:a3:ec:94:2f:d2:4b:95:28
Fingerprint (sha256): 3d:99:cf:9c:7d:ad:c4:e2:f9:c9:a9:2f:b3:41:af:be:00:de:0a:43:f1:02:4a:b2:d1:eb:8e:d5:0c:ae:10:01

Issuing Certificate URL: http://cacerts.thawte.com/ThawteTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteTLSRSACAG1.crl

Check the revocation status for certificate *.audeering.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.audeering.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.audeering.com
audeering.com

Other certificates including the domain name audeering.com

(limited to 100 certificates)
newsite.ladystartup.com
utter.audeering.com
www.jobgen.co
admin.dennysautomotive.com
voteforkorea.org
voiceback.audeering.com
kansha.app
introwise.com
dev-app.forumm.events
connect.petleo.app
madamepauletteportal.smartrvideo.com
www.bkmmanagementco.com
www.getinvite.co
*.audeering.com
impuls.dev
cstsht.codecraft.no
the22murdersofmadisonmay.com
www.angelawedsjeffrey.com
new.piscinapp.com.br
mhvroyalmotors.com
marmope.ml
merveille.dev
santoshanand.me
myvirtsimple.com
view.dev.virtecsolutions.com.au
*.audeering.com
www.balsfulland.app
examainer.audeering.com
www.2lvrs.com
www.course.glowbe.com
*.audeering.com
www.diskkm.app
www.diskkm.app
www.jgwphotography.com.au
www.nortenoboots.com.mx
www.retkella.com
baejunman.com
audeering.com
gokulamdroptaxi.com
led-vertising.be
beta.b2b4-check.com
quake.jp
emotion-coach.audeering.com
emotioncoach.audeering.com
*.audeering.com
racoonnetwork.com
loyalty.gagnet.ch
bumdash.com
*.audeering.com
www.epitco.es
hypnose-st-symphorien-sur-coise.fr
funwarioisii.me
performancepros.co.uk
prochazka.app
www.gundu.id
audeering.com
www.nortenoboots.com.mx
www.danielzfranklin.org
twitpile.com
www.voteforfuture.eu
smartcctv.witchelec.com
examainer.audeering.com
admin.curativiti.com
quickshop.tw
www.jgwphotography.com.au
pillway.com
pulse.cash
login-test.new.de
app.metabolicmacros.com
www.tatianefugimoto.com.br
examainer.audeering.com
buscocontratista.com.ar
voncerts.in
audeering.com
musicuat.inyarwanda.com
brasserieloustic.be
luckytube.cf
tumascota2022.com
link.guardianscollective.com
*.audeering.com
elitehomessolutions.in
view.smoky.no
uitzendkrachten.cao.app
realbudget.litapplications.com
firebasedev.aido.id
www.chatpro.com.br
app.growthhub.io
mustangdds.com
app.storybit.io
*.audeering.com
don.campus-discounts.com
lotosena.com.br
reviews.relayapp.us
songpedia.techguypro.in
layout.simulaton.com
audeering.com
*.audeering.com
*.audeering.com
www.audeering.com
www.jobgen.co

Certificate

The complete raw certificate details for *.audeering.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGIDCCBQigAwIBAgIQAZtk6Z3F912dyF9azm7fFDANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRUaGF3dGUgVExTIFJTQSBDQSBHMTAe
Fw0yMzEwMTEwMDAwMDBaFw0yNDExMDEyMzU5NTlaMBoxGDAWBgNVBAMMDyouYXVk
ZWVyaW5nLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANPE5NpS
XtBLMmpyZPnq6VQAMo5vxT1JcKe4jz8zBJljczYrPcUKTL2+Tpux0sF1D90v8hwB
Rkge+i4QKhv0KzDc9LalTbPSsEwb5bPxYSSRCsR3V7GGAkEI2ZsmZmM/2w79IBBN
00wOSOqrb28+wbnZT3JZX06ozjqUT/+a1QaTO6CVqqgLO9I+/AvPUe7aOdDc028X
VmuWMh+StIPXsjUPfpSEesYZMchcYqxb7YXf1kWyIPQ1xxxo9MRRXGmaqHY1A0/j
H8UP6jPhZWuinjY5uj5jMDxR3coKMEBvzrV1xPoFeYpcwT67mrxYsNbX1AgM1sDB
Bh2nCUiqn3NbEzUCAwEAAaOCAxwwggMYMB8GA1UdIwQYMBaAFKWM/jLM6w8s1BnG
CLgAJIhdw8W3MB0GA1UdDgQWBBT3ZlI2Z1t7oOHPvWCxLd3Jb0+F9DApBgNVHREE
IjAggg8qLmF1ZGVlcmluZy5jb22CDWF1ZGVlcmluZy5jb20wPgYDVR0gBDcwNTAz
BgZngQwBAgEwKTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20v
Q1BTMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH
AwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0
ZVRMU1JTQUNBRzEuY3JsMHAGCCsGAQUFBwEBBGQwYjAkBggrBgEFBQcwAYYYaHR0
cDovL3N0YXR1cy50aGF3dGUuY29tMDoGCCsGAQUFBzAChi5odHRwOi8vY2FjZXJ0
cy50aGF3dGUuY29tL1RoYXd0ZVRMU1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQCMAAw
ggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8
vOzew1FIWUZxH7WbAAABix6dDK0AAAQDAEcwRQIhAJlImPFiHCo2z18AUe2ex0cS
Lg7yCdpGDownPGUHrOn3AiBkvR2jScF5/aeEpKC8RhF6XDOSbmDC6IP/Uj2DnmDS
5AB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABix6dDNMAAAQD
AEcwRQIgXZRAj0mjzDJi2O81w14Rzrw1W1vt1IpgYKlEorXKvUUCIQDl9lNrAzeS
Iz/oGZ+4zmPFJA0yBMVgvydYzGceHgqcGgB1ANq2v2s/tbYin5vCu1xr6HCRcWy7
UYSFNL2kPTBI1/urAAABix6dDLAAAAQDAEYwRAIgTj1TGD30pIwbpOt1YE+8RDnR
iVIHiTO2VbwdRwH4RhoCIG2OCTYT7LO4cbitRP75B51woc58aUN6zOuseM5HSbkF
MA0GCSqGSIb3DQEBCwUAA4IBAQBWe/DF5LSMeLuu4NGlPhT66WovB4eAKeyC4ENU
r8ezTY92RuaRgoIrZoTIgNLUZBK7K2Q2vThNM4RZGWCdoJv5U5Ux4xAu0JD9kfo3
be7z6p/DxcbriczFWCXEK1uaVWq7PVXoshIaHxfcnxDmgoL5Bc1znd7KcCRZ6yzm
gFmc1Qv9MNN7SMKtE7T2+oRAHbFayPVaxcO6vrEpCWnxh0HDGQcN/ZZEeFW4CDra
mPND9HuMjclBJ3Ia1Py0qYj0+w7j7Xtf+eXor6KlOCDw+wNXws+sjk6yq8ppQcy7
PoKCC3FqY9Kvv60XNVQ2haqTsO0X7XnqoidnhUrWoQKHMQu2
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08Tk2lJe0EsyanJk+erp
VAAyjm/FPUlwp7iPPzMEmWNzNis9xQpMvb5Om7HSwXUP3S/yHAFGSB76LhAqG/Qr
MNz0tqVNs9KwTBvls/FhJJEKxHdXsYYCQQjZmyZmYz/bDv0gEE3TTA5I6qtvbz7B
udlPcllfTqjOOpRP/5rVBpM7oJWqqAs70j78C89R7to50NzTbxdWa5YyH5K0g9ey
NQ9+lIR6xhkxyFxirFvthd/WRbIg9DXHHGj0xFFcaZqodjUDT+MfxQ/qM+Fla6Ke
Njm6PmMwPFHdygowQG/OtXXE+gV5ilzBPruavFiw1tfUCAzWwMEGHacJSKqfc1sT
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 2136080758808518225812255509654200084
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-10-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-11-01 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.audeering.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26733374376372017781202585316503116477416422455097190229261948397200680434265783693656935575275331285967242807409043563556073204745248540255720623350791914840509885531891696945429377676109556942712675500611060858910604455222599851654936961922032840036996679895610681509128916145063374427306051482285213886894914063803950705535561251461744805202204452448802858270676262323535306469540676477515016455876153724343798879050676479136839790656586478067446632684791161149579813918444615381733823081928937918558695474945817671203448666375789802885262624279530717759056856549361510011649551343118378545689646154381985532547893
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a58cfe32cceb0f2cd419c608b80024885dc3c5b7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f7665236675b7ba0e1cfbd60b12dddc96f4f85f4
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.audeering.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'audeering.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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