schooltool.pycsd.org

- Wayne-Finger Lakes BOCES -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 01:28:97:b0:55:00:73:66:b2:80:2c:4e:b9:96:79:02 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Wayne-Finger Lakes BOCES

Company registration number: 800000040514
Organization: Wayne-Finger Lakes BOCES
State / Province: New York
Locality: Newark
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 01:28:97:b0:55:00:73:66:b2:80:2c:4e:b9:96:79:02
Serial Number (int): 1539996484439833692192545033711679746
Serial Number lenght: 121 bits, 16 octets

SubjectKeyId: 4b:ba:dc:7b:6e:78:07:54:5f:62:49:c7:47:e9:fe:3b:81:ad:6b:59
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 70:df:43:17:df:ee:65:69:c0:42:30:a8:60:d9:27:ad:5d:bf:86:9d
Fingerprint (sha256): 44:44:78:44:65:fc:18:8f:da:7e:30:bd:34:49:47:20:02:0c:f1:dc:6a:2d:73:c8:2e:c2:1e:f2:dc:0b:d9:2a

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g3.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g3.crl

Check the revocation status for certificate schooltool.pycsd.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for schooltool.pycsd.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

schooltool.pycsd.org
www.schooltool.pycsd.org

Other certificates including the domain name pycsd.org

(limited to 100 certificates)
www.fra.edu
academy.pycsd.org
pycsd.org
academy.pycsd.org
marvin.wisd.org
portal.pycsd.org
admin.southeast.varnett.org
www.tricityselpa.org
fhclergue.adsb.on.ca
3rcs.org
academy.pycsd.org
schooltool.pycsd.org
admin.preescolar.semperaltius.edu.mx
pycsd.org
cce.leusd.k12.ca.us
pycsd.org
mail.pycsd.org
www.tricityselpa.org
academy.pycsd.org
3rcs.org
ros.ldcsb.ca
mta-sts.pycsd.org
es.pycsd.org
gradebook.pycsd.org
admin.3rcs.org
schooltool.pycsd.org
smclassroom.pycsd.org
formit.pycsd.org
schooltool.pycsd.org
schooltool.pycsd.org
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
admin.tricityselpa.org
nhstitans.org
schooltool.pycsd.org
admin.ecacademy.scrsd.org
mail.pycsd.org
wes.bibbed.org
admin.keillerleaders.org
poecenter246.com
3rcs.org
admin.crumpton.mpusd.net
admin.ecacademy.scrsd.org
www.cairoschooldistrict1.com
pycsd.org
rsu14.org
admin.pycsd.org
es.glendaleacademy.org
3rcs.org
3rcs.org
3rcs.org
academy.pycsd.org
3rcs.org
admin.ecacademy.scrsd.org
www.hscnewhaven.org
www.boyslatinms.org
steam.erusd.org
bradleyschools.org
admin.elc.aacs.net
admin.mas.mpusd.net
academy.pycsd.org
pycsd.org
admin.ecacademy.scrsd.org
3rcs.org
admin.delreywoods.mpusd.net
jla.jubileeacademies.org
www.rebsamen.mx
www.calvaryschools.org
academy.pycsd.org
3rcs.org
admin.pennekampschool.org
kailuaintermediate.org
admin.ecacademy.scrsd.org
schooltool.pycsd.org
*.pycsd.org
admin.es.glendaleacademy.org
mail.pycsd.org
3rcs.org
pycsd.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.athletics.rsu14.org
admin.vapa.mvusd.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
3rcs.org
3rcs.org
admin.cchs.mpusd.net
ms.pycsd.org
admin.poecenter246.com
schooltool.pycsd.org
academy.pycsd.org
cch.ldcsb.ca
www.salisburycatholicschool.org
schooltool.pycsd.org
mail.pycsd.org
cat.ldcsb.ca
jd.jubileeacademies.org

Certificate

The complete raw certificate details for schooltool.pycsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bo7GvkBP5UfwRitFxO+
q9jIkkx3JRcdhMjwDAQILTK1UsmO1dKg1UkWSRcEM5tkI+VzaLfG9jJug1n+5oi1
4mOoB+AmGjwaG6SFonyvMUtvEatemms/ySuxTVlzbiJ8EvggjUm9s96medSXj7aZ
08Gruf3t/Pe7qnzg2t3hRYxsVn5XpuWO1mdWHwR8rl0KlzoVSTZRSCjUjfPkv9+q
yenTr2K6D3yxbojfW7EBVgO3ugMciDrCmkBkMgaaJUOaMRtWeOqM/137dskZ09/1
e0OdtSV1BFXofHjk+zPk3WiWYDQAVAwJbjVKrKnIoCrbRvFyu/s18lrmNq6qlWHK
vQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1539996484439833692192545033711679746
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-29 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '800000040514'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Newark'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wayne-Finger Lakes BOCES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'schooltool.pycsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27990499267280125553851214920347308525876499597066511798431198838092628387358348119495280146958988693687708080109851483548217676112268117110570912405227816734248948869693008143860655019564448161861540420413145467550469398573133156602523434098624558616356124713522099117314873563800018408194795476543932921817355954332247907476488432326036568184553471346410732011268545958194115703026478234863343429022142639853166324908503900897195869265547559115456544860270939436168302460638058928204790858843216118348332949028750585643177203417093272263893053517130078058549116350919658943024856291450184017946757290685632834816701
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4bbadc7b6e7807545f6249c747e9fe3b81ad6b59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'schooltool.pycsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.schooltool.pycsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							01680077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001791d56c4da0000040300483046022100a1d37a84bf72481fdf83fde59a5d36ba92faa73c563e956a9eda8607896a8e1e022100a56a2d338f8beed5ac47ba365f29823c3a6c90aa22bfa57b34946ef4ec4541180075002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001791d56c53a000004030046304402206f803eae4460032e4d2861ff0670461531535f7370e062150e76ba147889b40302200a84979e34e73171e3bf6e97a9cde62e46c02f640f7b052f8500aa800f25888e00760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e5000001791d56c5c400000403004730450221008a7589912124ddffefc610355ca54ae70c1b2fb7e9e710e7c46d9bc115ebbff402206b555f4cfccf18c41d19453b6d29903446598373b57128fdc344851489666e64
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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