www.cox.com

- Cox Communications, Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0a:69:6a:77:de:81:59:43:00:00:00:00:50:e9:c8:14 was issued on by Entrust, Inc..

With 18 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Cox Communications, Inc.

Organization: Cox Communications, Inc.
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:69:6a:77:de:81:59:43:00:00:00:00:50:e9:c8:14
Serial Number (int): 13839630560426687042172605516497930260
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 39:bb:da:59:da:6d:88:30:85:ae:10:07:0c:f9:bc:98:80:94:3c:a1
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8b:67:ad:cb:fd:14:bc:46:85:f1:8e:f6:93:d6:3e:3a:3f:7c:6c:a5
Fingerprint (sha256): 43:76:c1:01:22:63:c1:3b:8f:ac:ee:e1:87:0b:0f:fc:27:1e:49:04:99:22:24:12:7a:0e:78:6e:18:a7:aa:7c

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate www.cox.com

18

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.cox.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.cox.com
cox.com
test.cox.com
ww2.cox.com
myaccount.cox.net
store.cox.com
activation.cox.net
framework.cox.com
images.coxbusiness.com
intercept.cox.com
images.cox.net
framework.cox.net
framework.coxbusiness.com
images.cox.com
testimages.cox.com
testframework.cox.com
origin-test.cox.com
origin-www.cox.com

Other certificates including the domain name cox.com

(limited to 100 certificates)
newsroom.cox.com
media.cox.com
www.privacy.dev.cox.com
lbtest20.cox.com
mail-content.rm.cox.com
*.ecs-np.cloud.cox.com
chat1dev.cox.com
unifyoffcycle.cei.cox.com
connect2.cox.com
www.two.qa.cox.com
CATL5PWSM20122.corp.cox.com
testinglemur.cox.com
measurementapp-origin.nonprod.aws.cox.com
m.mc.cox.com
newsroom.cox.com
*.eps-nonprd.corp.cox.com
duketrdd113.corp.cox.com
widget.qaint.cox.com
measurementapp-origin.prod.aws.cox.com
issues.stg.cox.com
cxc.cox.com
mobile.store.cox.com
jobs.cox.com
dark-voicetools.cox.com
DT-VOIP-2801-3.cox.com
mail-content.rmt.cox.com
jenkins.stg.cox.com
m-intercept.cox.com
publ.one.qa.cox.com
bi-discovery.corp.cox.com
porting.cox.com
nops.cox.com
www.cox.com
portal.cxqa.corp.cox.com
uwp-wifi-access-portal.cox.com
measurementapp.cox.com
sso.cox.com
cmac.dev.cox.com
*.ossprov-np.corp.cox.com
issues.corp.cox.com
idm.cox.com
wifi.cox.com
m-idm-east.cox.com
publ.one.staging.cox.com
idm-extread-qa.cox.net
ccirecruit.cox.com
dev-webview.wifi.cox.com
myaccount-business.qaa4.cox.com
webapi-svc.int.dev.cox.com
*.staging1.services.coxlab.net
atmos.cox.com
platform.ecs-ddtc.cloud.cox.com
privacy.dev.cox.com
test.cox.com
cxconnect-stage.cox.com
chat1.cox.com
bi.cox.com
coxmule.cox.com
login.cox.com
DUKEISEC15.corp.cox.com
oa.mail.cox.com
CATL0PWAS10933.CORP.COX.COM
ccidev.cox.com
ewfmm3.cox.com
wfo.cox.com
mobile.console.cox.com
webview.wifi.cox.com
secure06.lithium.com
porting-qa2.cox.com
coxlaw.cox.com
UCEEPOOL01.corp.cox.com
wfo.cox.com
capdev.sb.cox.com
OSPVault.cox.com
reportsdev.cox.com
api-load.cox.com
repo.corp.cox.com
*.modops-dvtc.cloud.cox.com
forums.cox.com
sip.cox.com
portal.cxdev.corp.cox.com
idm.east.one.qa.cox.com
jump.cox.com
wfo.cox.com
serv-boundless.dev.cox.com
uet.corp.cox.com
mdm.cox.com
es.mobile.store.cox.com
connect2.cox.com
psp6cwaaaqv99.corp.cox.com
dukencwgqv99.corp.cox.com
csap-stg.bbd-np.corp.cox.com
testlemurcert.cox.com
secure06.stage.lithium.com
login.qa.cox.com
fbc-qa.cox.com
portal.cx.corp.cox.com
caps.cox.com
wam-stg.cox.com
ww3.cox.com

Certificate

The complete raw certificate details for www.cox.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvazrL6FtkewGkChZJbpk
u5D4N0g48V7yL4E9IC6RRp1vSFeQFdXJ5HkJIhl9nDAkVYQFEB2IAIQ30/yHXzZn
XpEtuBb08aksuOW/3ogNyFXD02sc8M8QluWzX/HUmlrkXHBdgpt0v7HhYM47Gyqc
moOEIBoblB0XZ5pcHPQvJQZ89WShLB1yQyKooMky7rLhRwybyJUNvLAyj91Gfdbt
M8M/AVe8qM35v1GbI7ZCoACOHxV5wg/4dU6BNDmop8AJCffj+MsXS2e98H767GM4
3LA7W3N4ZZP3LO9nn5l8ThMnVPSHrRQ+GhjdgRmBeA/1eu3WVAAsyaHzORHlQLaX
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13839630560426687042172605516497930260
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 13:55:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-05 14:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cox Communications, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cox.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23944309025386928931107187409905234324494012160544112085723755866301573824875298360411265546571463554436007006088315975400754710345774541038344055120135278958742515630781521702877357930445580419213921098281491220044183308313076799878034611411970772679116621631003314886323161441789610431343753067278416191571246547509626393444790500594815607194986175422366059267964401269813037658285347618938416450097831691218086725778341717201410679388501316722035946538652459688905243654086010820510846479671303897322657065170131281166943278581349398894771444203233859214917557730510409173885327439408855399582765418592860508690203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (331 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'test.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ww2.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'myaccount.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'store.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'activation.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.coxbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'intercept.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.cox.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'framework.coxbusiness.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'images.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testimages.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'testframework.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-test.cox.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'origin-www.cox.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							39bbda59da6d883085ae10070cf9bc9880943ca1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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