vpnac.tenethealth.com

- Tenet Healthcare -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 65:b1:1c:fe:a6:69:18:48:00:00:00:00:50:e4:fb:ec was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Tenet Healthcare

Organization: Tenet Healthcare
State / Province: Texas
Locality: Dallas
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 65:b1:1c:fe:a6:69:18:48:00:00:00:00:50:e4:fb:ec
Serial Number (int): 135171652201160912029812009873373985772
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 0b:2e:ac:48:59:cc:c6:73:77:0e:b4:a9:cd:6a:9b:44:ac:4d:b6:d3
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): e1:de:f0:ec:8a:7e:a4:1e:ee:e5:98:10:d0:7d:33:7c:15:3b:b7:1e
Fingerprint (sha256): 3f:8f:5c:51:d2:2d:fe:bc:f5:6c:ce:b1:db:96:73:18:15:8e:88:a5:da:76:e3:8c:79:61:c6:71:c8:96:df:e9

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vpnac.tenethealth.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vpnac.tenethealth.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vpnac.tenethealth.com

Other certificates including the domain name tenethealth.com

(limited to 100 certificates)
expe.coniferhealth.com
*.tenethealth.com
pacsimaging.tenethealth.com
investor.tenethealth.com
tenhqtapp02.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
mobilecms.tenethealth.com
tenethealth.com
tenethealth.com
kdbk1201.tenethealth.com
delltenetvpn.tenethealth.com
tenethealth.com
expe2.coniferhealth.com
vpnweb.tenethealth.com
tenethealth.com
f1-imfedasa1.tenethealth.com
smart.tenethealth.com
mobilecms.tenethealth.com
vpn123.tenethealth.com
tenethealth.com
jobs.tenethealth.com
airwatch.tenethealth.com
tenethealth.com
smartws.tenethealth.com
vital.tenethealth.com
huhpacs.tenethealth.com
tenethealth.com
vactrac.tenethealth.com
vpnac.tenethealth.com
jobs.tenethealth.com
expe2.coniferhealth.com
jobs.tenethealth.com
tenethealth.com
securitynewsletter.tenethealth.com
*.tenethealth.com
investAka2.investorhq.businesswire.com
tca.tenethealth.com
*.tenethealth.com
airstripweb.tenethealth.com
delltenetvpn.tenethealth.com
tenethealth.com
jobs.tenethealth.com
ahinternet.tenethealth.com
*.etrainingsaba.tenethealth.com
securitynewsletter.tenethealth.com
tendbkdmzmx12.tenethealth.com
sfca.vidistar.tenethealth.com
huhpacs.tenethealth.com
thc-exp-c2.tenethealth.com
tenethealth.com
thc-exp-e2.tenethealth.com
tenethealth.com
connect.tenethealth.com
tenethealth.com
kdbk1203.tenethealth.com
securemail.tenethealth.com
delltenetvpn.tenethealth.com
securemail.tenethealth.com
vpnac.tenethealth.com
connect.tenethealth.com
tenazure-pexipteamsconn-sc.tenethealth.com
imfedasa.tenethealth.com
floridacardiology.vidistar.tenethealth.com
ps360-e.tenethealth.com
thc-exp-c3.tenethealth.com
elpaso.vidistar.tenethealth.com
tenethealth.com
securemail.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
tenethealth.com
tenethealth.com
tenethealth.com
cpacs.chn.tenethealth.com
thc-exp-e1.tenethealth.com
kdbk1209.tenethealth.com
spwsbc1.tenethealth.com
pacsimaging.tenethealth.com
hqhosting.newshq.businesswire.com
thc-exp-c1.tenethealth.com
connect.tenethealth.com
airwatch.tenethealth.com
cpacs.chn.tenethealth.com
paybill.Tenethealth.com
tenethealth.com
thc-exp-e1.tenethealth.com
airstripweb.tenethealth.com
jobs.tenethealth.com
tenethealth.com
imfedasa.tenethealth.com
*.tenethealth.com
guest.tenethealth.com
mtm.vidistar.tenethealth.com
hie-is-test.tenethealth.com
cyberarkdr.tenethealth.net
tenethealth.com
cylancesyslog.tenethealth.com
cpacs.chn.tenethealth.com
expe2.coniferhealth.com

Certificate

The complete raw certificate details for vpnac.tenethealth.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArj2+HkV7N5WOMnGz/sSH
9ZJqarP5LhGqq3hGaR4jjLoQtmwXxdCHb0Y96EM6yZ2SlwiJcGiJmjg290PstgmM
MRdwg4ufJozhNjKjFF9+lDQY6bDQhBWxMO80Ockn7wN5xD9ioSPNqYB6HYV5G/qP
MmQMw2xucV1pAcL9LK5clJ3WkQWbXzEZSsCr3f6JJQDNXBlqurF8qI3siPgRARDr
f/0em79UKY5kMrMIdCMGmSdxdLPWzNBj12WZihwHOrhFIpf6M+mQJAIGLDA4y0Fz
1OwxREt/h8xDfYe60h2HQAzcSF/YhvGr7fj3J1HwVgs5YdWccPs7Z6Oj/6t6XhFW
sQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 135171652201160912029812009873373985772
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-16 20:57:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-01 21:27:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Dallas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Tenet Healthcare'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpnac.tenethealth.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21995911499270024744435307197248758196609884834941409554544631109450711559657118730200346575501056130142717197701112319060751922660113274209727178416965125151085827038437221964996608822503274692694025104498202386929486126637575030387242575532487121439879908914332838970627935255558296159673072266184756094835533942854508101058409460618840770942238533780240001057847087570372748462258973872823297087481782307589236795882790198045577349843233611611689856241014372572487559640686249105777553094922665531966057534010656259011873251323140716520753418032121691408548582624379549488595768633767551163722540726990503242978993
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpnac.tenethealth.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							01e30077005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c00000164a4fe05b10000040300483046022100f2171d93689abff5dc42b7f5a30bea8bf06267a3b7ad14afa38dc7f461c09d72022100e84d92e0fa0affbc5b5048b995d2f7f214cdbecf0437183a592a8067f56f007f0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164a4fe05bf00000403004830460221009b12f73c92bde797285772bbea6ffd7218da96455e85eaedb2cee8e833c4e71a0221009f13f11bc4bc9958495bf017563240198998a6425dcb3702fecd545045f80c41007700ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000164a4fe05b30000040300483046022100e8c0d71100128a5a4cc6842ac4c95f07e11bab69058c1c90bc23bf22f84f5951022100967b711e21242d00a7c61115515f75ee44e918d2b23738c75498f10736e7d23f007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164a4fe05c00000040300473045022002e2fd536083241e3f69fd170cee5cf03df22d7d905a025f92ce857bef463cde022100ed6215f80152efa38330b37e0964ccae7d6202e425886ace3b2d3893e0c5ea55
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0b2eac4859ccc673770eb4a9cd6a9b44ac4db6d3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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