elancochannel.com
- Eli Lilly and Company -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number cf:84:4c:51:00:00:00:00:50:d6:c4:e8 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)
Eli Lilly and Company
Organization:
Eli Lilly and Company
State / Province:
Indiana
Locality: Indianapolis
Country: US
Locality: Indianapolis
Country: US
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): cf:84:4c:51:00:00:00:00:50:d6:c4:e8Serial Number (int): 64223335635246528341957068008
Serial Number lenght: 96 bits, 12 octets
SubjectKeyId: d9:11:68:52:1f:58:3c:4a:36:17:7f:e6:dd:80:4b:ac:39:7f:62:25
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 44:9a:b9:3b:aa:44:4f:21:17:60:96:7c:8f:63:d3:36:84:d4:72:a4
Fingerprint (sha256): 46:25:2d:50:7f:2a:5b:b9:50:5b:60:ab:c7:3d:cb:bf:22:66:1d:c6:f9:bc:ff:43:b4:81:a9:d1:ed:ad:23:1d
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate elancochannel.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for elancochannel.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
elancochannel.com
Other certificates including the domain name elancochannel.com
(limited to 100 certificates)
www.elancochannel.com
mta-sts.uniterra.ca
covid19.mayamd.ai
www.covidtestnearme.app
www.cafemanet.com
sandbox.admin.satsy.com
phio.eql.ai
www.oneupconsulting.solutions
covid19.mayamd.ai
phio.eql.ai
beta.getbeatlink.com
elancochannel.com
static.artometa.ai
articles.libertytips10.com
impact.coffeecircle.com
www.tossmath.com
apconnect.tk
elancochannel.com
tamil-football.dk
elancochannel.com
hello.parlor.io
filmflu.com
bancosemear.creditoexpress.com.br
share.handit.app
www.winners-enclosure.club
www.diegofelipemoreno.com
app.ke-journal.de
neo-vid.com
app.igniteretail.io
videollamadas.mymoons.co
gmelius.io
www.kaseyandthom.com
thegreatdavid.ml
elancochannel.com
www.bookself.app
api.t-christ.com
elancochannel.com
gmelius.io
gintas.dev
qingqi.dev
api.t-christ.com
cucurucu.love
bpvisualizer.neodev.se
manage.silverfoxmetals.com
elancochannel.com
sandbox.admin.satsy.com
thepavedroad.tech
ikweethetniet.be
ikweethetniet.be
share.handit.app
mta-sts.uniterra.ca
covid19.mayamd.ai
www.covidtestnearme.app
www.cafemanet.com
sandbox.admin.satsy.com
phio.eql.ai
www.oneupconsulting.solutions
covid19.mayamd.ai
phio.eql.ai
beta.getbeatlink.com
elancochannel.com
static.artometa.ai
articles.libertytips10.com
impact.coffeecircle.com
www.tossmath.com
apconnect.tk
elancochannel.com
tamil-football.dk
elancochannel.com
hello.parlor.io
filmflu.com
bancosemear.creditoexpress.com.br
share.handit.app
www.winners-enclosure.club
www.diegofelipemoreno.com
app.ke-journal.de
neo-vid.com
app.igniteretail.io
videollamadas.mymoons.co
gmelius.io
www.kaseyandthom.com
thegreatdavid.ml
elancochannel.com
www.bookself.app
api.t-christ.com
elancochannel.com
gmelius.io
gintas.dev
qingqi.dev
api.t-christ.com
cucurucu.love
bpvisualizer.neodev.se
manage.silverfoxmetals.com
elancochannel.com
sandbox.admin.satsy.com
thepavedroad.tech
ikweethetniet.be
ikweethetniet.be
share.handit.app
Certificate
The complete raw certificate details for elancochannel.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgINAM+ETFEAAAAAUNbE6DANBgkqhkiG9w0BAQsFADCBujEL MAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1Nl ZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEy IEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UE AxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNjAx MjExODUyMzVaFw0xODAxMjExOTIyMzRaMHIxCzAJBgNVBAYTAlVTMRAwDgYDVQQI EwdJbmRpYW5hMRUwEwYDVQQHEwxJbmRpYW5hcG9saXMxHjAcBgNVBAoTFUVsaSBM aWxseSBhbmQgQ29tcGFueTEaMBgGA1UEAxMRZWxhbmNvY2hhbm5lbC5jb20wggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqkBay+vAeaCXrQ1FThJ+/DYpp uIW/oZ+QP+eSL2SZoPyoUI6Mxf9FdIChfKNIYRgzEqdpJvWfG5SYXP0rAoAqXy3q Me/DfbChSu+LMQTbUo1c03BMOl3d7Qq2O5RAyEsFnjhDBcqCW51nG5iPVDpqBANq mzmQEj0++O7DfU16wcE0c8jQLeMrN/jabBorcovchJEOMwhGScba7bbfJq3k4dVm JjcW9e5Iccf3uoff8yaPheXkk8zUAVUvawPQHg68CeH8TXR32126CQTExFV/XG2J E7XdMBcZuwtUZ728lhK5yfpdoerJWofrM4jo7+Xe2ihzqvTa9wz7wrsNyMRVAgMB AAGjggF7MIIBdzALBgNVHQ8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwMwYD VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy bDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYaaHR0cDov L3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEBBFwwWjAj BggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKG J2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAcBgNVHREE FTATghFlbGFuY29jaGFubmVsLmNvbTAfBgNVHSMEGDAWgBSConB03bxTP8971PfN f6dgxgpMvzAdBgNVHQ4EFgQU2RFoUh9YPEo2F3/m3YBLrDl/YiUwCQYDVR0TBAIw ADANBgkqhkiG9w0BAQsFAAOCAQEANjtt5nC73W+RB++oIz6I77/Pb8qOrSHm/ahb 8zrwAotcIKsBf3YDmGB4JKUUwmgL+r+17KOBwo6Z9R0tK/502Bjv3twPwBCzhTzb Aq/nvB5kRQuvTOj6WMMPu59f058NCPS3W5yRoCOB7LPP/CRBrH9Yw2Pv8Xb7USIG h8RiJY8FrTI78zfgQgQCspjnc9tDk6HlSFBoaJdJC6gkJam3Z62LCjPOYRH0APU2 ahAPjd0VeQ6rNYn3OXLMBgTMQUKzxL4tSWXq07Zr2RncZAf6G/JpsLkkiZRsoukJ ecV/JnygLZf2Q1v7Q2QTFdeRw3rtRzyC4Ooyh2pMVCzPQzG4Fg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpAWsvrwHmgl60NRU4Sf vw2KabiFv6GfkD/nki9kmaD8qFCOjMX/RXSAoXyjSGEYMxKnaSb1nxuUmFz9KwKA Kl8t6jHvw32woUrvizEE21KNXNNwTDpd3e0KtjuUQMhLBZ44QwXKgludZxuYj1Q6 agQDaps5kBI9Pvjuw31NesHBNHPI0C3jKzf42mwaK3KL3ISRDjMIRknG2u223yat 5OHVZiY3FvXuSHHH97qH3/Mmj4Xl5JPM1AFVL2sD0B4OvAnh/E10d9tdugkExMRV f1xtiRO13TAXGbsLVGe9vJYSucn6XaHqyVqH6zOI6O/l3tooc6r02vcM+8K7DcjE VQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 64223335635246528341957068008 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-21 18:52:35 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-01-21 19:22:34 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indianapolis' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Eli Lilly and Company' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'elancochannel.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21531564614850954615962677671646345594849878757680134791878044238662938762473892825415904301172094706125568865533807090054219930621399443304409427330662131115742119162738913105547841312901330702742248595915185455763108880450223437444465772076048123121312477006955470090101716930850972143377534087189153445882253431689290783137100835991196890209948971645597434866624200799882392578274198548976662624993104021115701006437600179401110805078874316569584259122485081095447194751270588336939521731637721036990668251467444283254552712905094430865918052403132954585614615399676260633043032570794411248951117534809356029707349 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'elancochannel.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d91168521f583c4a36177fe6dd804bac397f6225 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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