secure5.exceda.com

- Exceda LTDA -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 04:6f:04:a9:58:61:b5:89:9c:97:92:ef:e6:50:4c:a0 was issued on by DigiCert Inc.

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Exceda LTDA

Organization: Exceda LTDA
State / Province: Sao Paulo
Locality: Sao Paulo
Country: BR

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:6f:04:a9:58:61:b5:89:9c:97:92:ef:e6:50:4c:a0
Serial Number (int): 5893351480987712831338833963775970464
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 28:7e:c0:0e:d7:9e:c4:e6:d8:fa:7b:8f:9b:d1:49:91:06:d9:81:c5
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 3b:e1:1a:54:d2:6d:2e:2c:3e:88:a4:1c:29:5b:b4:69:29:1e:9a:17
Fingerprint (sha256): 40:f1:46:5c:3b:58:b1:3d:83:71:3a:97:b0:a3:4e:6d:9e:8d:73:ee:77:71:e0:16:f7:ea:d6:7f:af:bc:fc:aa

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate secure5.exceda.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for secure5.exceda.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

secure5.exceda.com
www.chavesnamao.com.br
www.lacoscorporativos.com.br
www.tenda.com
www.centraldafisioterapia.com.br
homologacao.lockey.com.br
alock.lockey.com.br
images.a12.com
www.lockey.com.br
www.coroasparavelorio.com.br
www.emporioforte.com.br
tendacomvoce.tenda.com.br
api.lockey.com.br
www.sacolao.com
pegasus.lockey.com.br
dev.lockey.com.br
www.a12.com
oferta.lockey.com.br

Other certificates including the domain name exceda.com

(limited to 100 certificates)
secure3.exceda.com
secure1.exceda.com
secure5.exceda.com
secure2.exceda.com
secure3.exceda.com
secure5.exceda.com
secure5.exceda.com
secure3.exceda.com
secure1.exceda.com
*.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1.exceda.com
secure1.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure4.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure2.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure1.exceda.com
secure4.exceda.com
secure5.exceda.com
secure1.exceda.com
secure1.exceda.com
secure3.exceda.com
secure2.exceda.com
secure3.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1us.exceda.com
secure3.exceda.com
secure5.exceda.com
secure4.exceda.com
secure3.exceda.com
secure1.exceda.com
secure1.exceda.com
secure3.exceda.com
secure2.exceda.com
secure1us.exceda.com
secure2.exceda.com
secure1.exceda.com
secure2.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure3.exceda.com
secure3.exceda.com
secure5.exceda.com
secure1us.exceda.com
secure3.exceda.com
secure1us.exceda.com
secure1us.exceda.com
secure2.exceda.com
secure2.exceda.com
secure1.exceda.com
secure1.exceda.com
secure1.exceda.com
www.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure1.exceda.com
secure3.exceda.com
*.exceda.com
secure1.exceda.com
secure3.exceda.com
secure1.exceda.com
secure3.exceda.com
secure3.exceda.com
secure1.exceda.com
secure4.exceda.com
secure1.exceda.com
secure3.exceda.com
stls1us.exceda.com
secure1.exceda.com
secure2.exceda.com
secure1.exceda.com
secure3.exceda.com
secure4.exceda.com
secure1us.exceda.com
*.exceda.com
secure3.exceda.com
secure1.exceda.com
secure5.exceda.com
secure1.exceda.com
secure3.exceda.com
secure5.exceda.com
secure4.exceda.com
secure3.exceda.com

Certificate

The complete raw certificate details for secure5.exceda.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswfiM5bGiXjR6V1TtMCv
OSk0/dYs6Dbm1JzQkveXv7t8av67CQ9Vpc3NQF9neJFicd8a28YXaEg9LDgIp9wy
lSoaizdLufjyAeKMe+84NyjwefLbtaaQ7OOcmE4EqSiotKe0DK4zUZnfwQ4uB6Bb
08smqk2qtphYRBBE8jvRJTVxd5cLXGmSLbaZqXlwiKGJWyx+RqkL/z/UG9VejJ0x
26d2j8Hue9ugAXFKkBWOOz7IDubMmsnGGWSDDpAvNOS5i/cGby2bxCZy8RMXeDgZ
h0yB0R0XfZjiZ241UFxcIcZk1aYKu/yBd0I5uUseDUyT1b0i0aBE437xCXaMQIMs
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5893351480987712831338833963775970464
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-24 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-04 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sao Paulo'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Exceda LTDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'secure5.exceda.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22600544136820142243184342407246492775118896718796986823091485889150255764222720415679617787658977934937486806678245267524028205611451108384670888440504471945387266587212115136459941351841713983338288776887988966319548344122200984706660495715100489104208789356385531327336720321469815767019465730312768556148270578374630916157549359795480958218080492440870626890953465277211516105605612988911522103309700879716186873152428954789016890559010502592189833075204894820263860078552055454479575894229482315360983787621637508639630933426494626257152917397996887440758941590951359200874240636255318874292528331689893837352101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							287ec00ed79ec4e6d8fa7b8f9bd1499106d981c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (405 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'secure5.exceda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.chavesnamao.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lacoscorporativos.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tenda.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.centraldafisioterapia.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'homologacao.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alock.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.a12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.coroasparavelorio.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.emporioforte.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tendacomvoce.tenda.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'api.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.sacolao.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pegasus.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dev.lockey.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.a12.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'oferta.lockey.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000016b8bcd60960000040300473045022100fb9de45d709fbc63bd5451927dbe1d0d08a0ae90bab2ae276af25008cbe9af6f02200dbe966aeb29a13e4315072372d42d2c667b78674ef70b2d11bb2fd690aee59b0077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016b8bcd612d0000040300483046022100eed2d64c0a799d5cfe7eed24a4517cb9e563bece0a319990aafe62045f5f58ef022100a5ff000483213608ecca6b9c1c7a0b7e6e1eccf62ddd3593f6942ea3ca092bc1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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