learn.education2020.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:e8:87:ee:e4:93:1c:37:37:44:5c:3a:04:35:93:46 was issued on by Amazon.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=learn.education2020.com

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:e8:87:ee:e4:93:1c:37:37:44:5c:3a:04:35:93:46
Serial Number (int): 7853509902444258324322570528938627910
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 50:05:53:15:1e:15:71:cf:f9:f5:7a:37:0e:ed:43:47:33:e4:91:bc
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): f9:1a:c8:71:35:80:92:dc:39:44:b4:a3:c9:7c:ac:ea:06:79:b2:84
Fingerprint (sha256): 4e:dd:25:1b:0c:05:3a:bb:f8:7c:f4:08:86:b8:7b:16:62:1a:3d:24:eb:39:4e:59:56:7f:ac:3e:d0:c8:6b:19

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate learn.education2020.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for learn.education2020.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

learn.education2020.com
educator.education2020.com
family.education2020.com
classroom.education2020.com
magic.education2020.com
parent.education2020.com
student.education2020.com
teacher.education2020.com
admin.education2020.com

Other certificates including the domain name education2020.com

(limited to 100 certificates)
media.edgenuity.com
sip.education2020.com
media.edgenuity.com
media.45sandbox.education2020.com
origin-learn.education2020.com
origin-apps.education2020.com
qa.edgenuity.com
mail.education2020.com
helpdesk.edgenuity.com
origin-apps.education2020.com
learn.education2020.com
media.edgenuity.com
learn.education2020.com
*.learn.edgenuity.com
*.education2020.com
origin-learn.education2020.com
qf.qa.edgenuity.com
apps.education2020.com
*.learn.edgenuity.com
qf.qa.education2020.com
learn.perf.education2020.com
qa.edgenuity.com
qa.edgenuity.com
dev.edgenuity.com
dev.education2020.com
45sandbox.education2020.com
origin-learn.education2020.com
45sandbox.education2020.com
media.edgenuity.com
*.edgenuity.com
*.qa.education2020.com
*.edgenuity.com
pre.sandbox.education2020.com
auth.perf.education2020.com
learn.education2020.com
*.learn.edgenuity.com
qa.edgenuity.com
qa.edgenuity.com
*.qa.education2020.com
bugs.education2020.com
qf.qa.edgenuity.com
core.learn.edgenuity.com
learn.education2020.com
helpdesk.edgenuity.com
learn.perf.education2020.com
*.edgenuity.com
45sandbox.education2020.com
*.edgenuity.com
learn.education2020.com
qp.qa.edgenuity.com
media.education2020.com
lync.edgenuity.com
learn.education2020.com
qa.edgenuity.com
45sandbox.education2020.com
learn.education2020.com
auth.perf.edgenuity.com
media.education2020.com
dev.edgenuity.com
sip.education2020.com
45sandbox.education2020.com
e2c-ocsweb2-az.education2020.com
*.qa.education2020.com
learn.education2020.com
mail.education2020.com
qa.edgenuity.com
qa.edgenuity.com
qf.qa.edgenuity.com
media.education2020.com
media.education2020.com
qf.qa.edgenuity.com
access.education2020.com
learn.perf.education2020.com
origin-apps.education2020.com
pre.sandbox.education2020.com
pre.sandbox.education2020.com
45sandbox.education2020.com
qa.learn.education2020.com
sip.edgenuity.com
apps.education2020.com
qa.edgenuity.com
*.qa.education2020.com
core.learn.education2020.com
dev.education2020.com
helpdesk.edgenuity.com
qp.qa.education2020.com
dev.education2020.com
qa.edgenuity.com
mail.education2020.com
qa.learn.education2020.com
*.edgenuity.com
core.learn.edgenuity.com
*.education2020.com
learn.education2020.com
qa.edgenuity.com
access.education2020.com
dev.edgenuity.com
media.qa.education2020.com
media.45sandbox.education2020.com
media.edgenuity.com

Certificate

The complete raw certificate details for learn.education2020.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGtDCCBZygAwIBAgIQBeiH7uSTHDc3RFw6BDWTRjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIzMDMwMTAwMDAwMFoXDTIzMDkxMTIzNTk1OVowIjEg
MB4GA1UEAxMXbGVhcm4uZWR1Y2F0aW9uMjAyMC5jb20wggEiMA0GCSqGSIb3DQEB
AQUAA4IBDwAwggEKAoIBAQDPfiTXEu1or6RgBl3GlMMqAqmreX+RF70apSuwd0Ci
VVRN95qS4QShFJUf2s3QYH3TQrQHTMokCwU0brdBE9W0EWGo3hCrYa4MnzEgq3iP
IVzqtOKVx0Vz7dOBiNctjmZG5bzZCP5EY8iJt812jZAHkTLbiArpbPIeyDCXCopB
MBJwWREteVADRhegej6xJyNlVEjsKVMUxbzawW+aBlSHSWmDPZ03H9Lov0lXPw9z
ruyeauUf2D+ZjOl8NljqD2bV9qvfm3E5oK9PYkc3UPWIQ0YFS1vyaby0tPkTP0mF
QsQ9guuzDKvYn6R6/viG+ZWLxw3qy9C818g9D0YHvVHDAgMBAAGjggPKMIIDxjAf
BgNVHSMEGDAWgBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQUUAVTFR4V
cc/59Xo3Du1DRzPkkbwwgfkGA1UdEQSB8TCB7oIXbGVhcm4uZWR1Y2F0aW9uMjAy
MC5jb22CGmVkdWNhdG9yLmVkdWNhdGlvbjIwMjAuY29tghhmYW1pbHkuZWR1Y2F0
aW9uMjAyMC5jb22CG2NsYXNzcm9vbS5lZHVjYXRpb24yMDIwLmNvbYIXbWFnaWMu
ZWR1Y2F0aW9uMjAyMC5jb22CGHBhcmVudC5lZHVjYXRpb24yMDIwLmNvbYIZc3R1
ZGVudC5lZHVjYXRpb24yMDIwLmNvbYIZdGVhY2hlci5lZHVjYXRpb24yMDIwLmNv
bYIXYWRtaW4uZWR1Y2F0aW9uMjAyMC5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCgLqAshipodHRw
Oi8vY3JsLnIybTAyLmFtYXpvbnRydXN0LmNvbS9yMm0wMi5jcmwwEwYDVR0gBAww
CjAIBgZngQwBAgEwdQYIKwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8v
b2NzcC5yMm0wMi5hbWF6b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9j
cnQucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNlcjAMBgNVHRMBAf8EAjAA
MIIBgAYKKwYBBAHWeQIEAgSCAXAEggFsAWoAdgCt9776fP8QyIudPZwePhhqtGcp
Xc+xDCTKhYY069yCigAAAYadXBlXAAAEAwBHMEUCIQCJANvwD0UdRYLMnToniuX/
O673a8/3fe0aathQGwzSeAIgHC+JBBrz9jd3A1jOCPTwYuKSCKxhTM2g3MIWhjJ4
VQ8AdwCzc3cH4YRQ+GOG1gWp3BEJSnktsWcMC4fc8AMOeTalmgAAAYadXBlRAAAE
AwBIMEYCIQCN/9/ghv3Y+W2jl+o5G3vrpBoShbmDWIJgOjRbGjZ4JAIhAIR3UVlO
v3ceVxTnHcOYlYr0ZxCuKqNUpXIj6kKLA5a3AHcAtz77JN+cTbp18jnFulj0bF38
Qs96nzXEnh0JgSXttJkAAAGGnVwZIAAABAMASDBGAiEAiV++ZtKdyQS+n0wiaUVi
3rfuFJCX0FDgKFUVZx0hUeMCIQCjfLPN6d29QO5peyHkXr5Ovr6j1OJknDFA8By8
t2fjjjANBgkqhkiG9w0BAQsFAAOCAQEAT259BehzF3TflmLuuWdraiy885IvA3mJ
lUERS2S0NPKulk2AqhYeHV1Jz6bGzu9/as+K6LCFwpgmUeYW5dnryp3gs+3E1ky1
kNlAfDJFkzEk8guF0rhpUpYc29dbZyVkl5gxWwMenNKjapcZOfIbx2LbX+fUF/Gc
EIbZLWsezQgKPnhJ5QO01O/7t+mvd/l2qQuR6z8vTgpzttx6viOIdr8s1fnRt6d/
wC2Tp0nKb6327frBxXy8mJOvrJPnQrhw/szOURHV10aEf+GQkv9z6DiNno0/4DpJ
NfWFeUesuCRMcH3kdneo6IVLMehKkALXEQw8gWfMIpwEr74/bVdh1g==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz34k1xLtaK+kYAZdxpTD
KgKpq3l/kRe9GqUrsHdAolVUTfeakuEEoRSVH9rN0GB900K0B0zKJAsFNG63QRPV
tBFhqN4Qq2GuDJ8xIKt4jyFc6rTilcdFc+3TgYjXLY5mRuW82Qj+RGPIibfNdo2Q
B5Ey24gK6WzyHsgwlwqKQTAScFkRLXlQA0YXoHo+sScjZVRI7ClTFMW82sFvmgZU
h0lpgz2dNx/S6L9JVz8Pc67snmrlH9g/mYzpfDZY6g9m1far35txOaCvT2JHN1D1
iENGBUtb8mm8tLT5Ez9JhULEPYLrswyr2J+kev74hvmVi8cN6svQvNfIPQ9GB71R
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7853509902444258324322570528938627910
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'learn.education2020.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26193533006771652885050701384659591002243259638557513789684168335369918908179937559462134280875960000692143487500534856142498182406926512663047269806251789352442683906775622796601089022642979639788863340242872515056105068425821459076230462687288177039932764534822885591786611063030858392577066560238587813782098641065746090169210574016916984326271381325243688448138233885386176231327597015741641978723624001541941573528104703723101285233744768880983503937217994792303283920448922742939697951887123468751109433513585224594020988289236900009831168173228802961750354576175990273456735243865050811491009303748679479153091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							500553151e1571cff9f57a370eed434733e491bc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'educator.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'family.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'classroom.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'magic.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'parent.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'student.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'teacher.education2020.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.education2020.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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