konki.pori.fi

- Porin kaupunki -

Issued by Entrust Certification Authority - L1C

About this certificate

This digital certificate with serial number 4c:1b:76:53 was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The keyUsage extension SHOULD be critical (RFC 5280: 4.2.1.3)

Porin kaupunki

Organization: Porin kaupunki
Organization unit: IT
Locality: Pori
Country: FI

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: www.entrust.net/rpa is incorporated by reference
Organization unit: (c) 2009 Entrust, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4c:1b:76:53
Serial Number (int): 1276868179
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 4b:17:05:62:ed:40:64:90:31:00:60:67:c4:df:91:ab:8a:dd:1e:d7
AuthorityKeyId: 1e:f1:ab:89:06:f8:49:0f:01:33:77:ee:14:7a:ee:19:7c:93:28:4d

Fingerprint (sha1): bd:95:58:33:c5:6d:d7:d6:1e:65:21:52:1e:c7:ce:ec:33:11:53:d7
Fingerprint (sha256): 4f:25:73:8b:a9:28:43:21:de:5d:a9:86:2c:f4:58:6d:b7:f2:ea:3f:00:0f:a2:95:1a:01:30:1f:31:16:79:11

Issuing Certificate URL: http://aia.entrust.net/l1c-chain.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1c.crl

Check the revocation status for certificate konki.pori.fi

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for konki.pori.fi

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

konki.pori.fi

Other certificates including the domain name pori.fi

(limited to 100 certificates)
verkkokauppa.pori.fi
satakirjastot.tapahtumat.pori.fi
taavi.pori.fi
satakirjastot.tapahtumat.pori.fi
*.pori.fi
satakirjastot.tapahtumat.pori.fi
verkkokauppa.pori.fi
vavyritys.pori.fi
pori.fi
*.pori.fi
*.pori.fi
taavi.pori.fi
vavyritys.pori.fi
outlook.pori.fi
pori452.pori.fi
vavyritys.pori.fi
verkkokauppa.pori.fi
vavyritys.pori.fi
pori.fi
*.pori.fi
outlook.pori.fi
outlook.pori.fi
*.pori.fi
*.pori.fi
outlook.pori.fi
fedmail.pori.fi
vavyritys.pori.fi
pori-events.prod.wunder.io
vavyritys.pori.fi
vavyritys.pori.fi
vavyritys.pori.fi
pori452.pori.fi
vavyritys.pori.fi
pori-events.prod.wunder.io
vavyritys.pori.fi
vavyritys.pori.fi
pori.fi
aarre.pori.fi
vavyritys.pori.fi
fs.pori.fi
vavyritys.pori.fi
*.pori.fi
pori.prod.wunder.io
vavyritys.pori.fi
outlook.pori.fi
vavyritys.pori.fi
tiketti.pori.fi
pori.fi
www.pori.fi
pori-events.prod.wunder.io
vavyritys.pori.fi
taavi.pori.fi
poriartmuseumcollections.pori.fi
pori452.pori.fi
satakirjastot.tapahtumat.pori.fi
online.pori.fi
pori.fi
raktun.pori.fi
satakirjastot.tapahtumat.pori.fi
*.pori.fi
*.pori.fi
pori-events.prod.wunder.io
outlook.pori.fi
*.pori.fi
konki.pori.fi
pori-events.prod.wunder.io
aarre.pori.fi
pori.fi
vavyritys.pori.fi
*.pori.fi
*.pori.fi
*.pori.fi
pori-events.prod.wunder.io
pori.fi
satakirjastot.tapahtumat.pori.fi
konki.pori.fi
pori.fi
online.pori.fi
vavyritys.pori.fi
vavyritys.pori.fi
satakirjastot.tapahtumat.pori.fi
www.pori.fi
pori.prod.wunder.io
*.pori.fi
vavyritys.pori.fi
*.pori.fi
aarre.pori.fi
aarre.pori.fi
pori.fi
vavyritys.pori.fi
vavyritys.pori.fi
pori.fi
vavyritys.pori.fi
vavyritys.pori.fi
statowww.pori.fi
pori.fi
*.pori.fi
vavyritys.pori.fi
outlook.pori.fi
vavyritys.pori.fi

Certificate

The complete raw certificate details for konki.pori.fi in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgIETBt2UzANBgkqhkiG9w0BAQUFADCBsTELMAkGA1UEBhMC
VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xOTA3BgNVBAsTMHd3dy5lbnRydXN0
Lm5ldC9ycGEgaXMgaW5jb3Jwb3JhdGVkIGJ5IHJlZmVyZW5jZTEfMB0GA1UECxMW
KGMpIDIwMDkgRW50cnVzdCwgSW5jLjEuMCwGA1UEAxMlRW50cnVzdCBDZXJ0aWZp
Y2F0aW9uIEF1dGhvcml0eSAtIEwxQzAeFw0xMTEwMjgwNTE5NDVaFw0xMjEwMjgx
MDI3NTBaMFoxCzAJBgNVBAYTAkZJMQ0wCwYDVQQHEwRQb3JpMRcwFQYDVQQKEw5Q
b3JpbiBrYXVwdW5raTELMAkGA1UECxMCSVQxFjAUBgNVBAMTDWtvbmtpLnBvcmku
ZmkwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdFFuKCOw2tbV06Eib
ninOn4M77Z5rD+kntrOFKKbAHJjOwcirWVVfVyzyjDppBxFyUSVbcfS12FGms/Gj
4+WBrdMRFq4dBOJXe2jgiipi/DDStQSnTkqLfSOt0rflr5RAW/5+4YTzWJP3KIcA
b3c4EVtuZPgHp2moM/uVA8ZCH7qkStOXpkHw1yWYZ14aFiQE9G/Q1KFyxYAIMnOT
e4ZzQ9mqsiWNKJmgB2wz4kwlp5dp3mwjZUXrRTdr298nGkDt2uC4GUWRyzwAgnrH
9HsORRbjJNnTqpab6QuInbiudiIC/c4ENZFJR2DD+T0wkeb4mZMPgv1R9qPXU2dB
GUHtAgMBAAGjggFzMIIBbzALBgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz
dC5uZXQvbGV2ZWwxYy5jcmwwZQYIKwYBBQUHAQEEWTBXMCMGCCsGAQUFBzABhhdo
dHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAwBggrBgEFBQcwAoYkaHR0cDovL2FpYS5l
bnRydXN0Lm5ldC9sMWMtY2hhaW4uY2VyMEAGA1UdIAQ5MDcwNQYJKoZIhvZ9B0sC
MCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93d3cuZW50cnVzdC5uZXQvcnBhMBgGA1Ud
EQQRMA+CDWtvbmtpLnBvcmkuZmkwHwYDVR0jBBgwFoAUHvGriQb4SQ8BM3fuFHru
GXyTKE0wHQYDVR0OBBYEFEsXBWLtQGSQMQBgZ8TfkauK3R7XMAkGA1UdEwQCMAAw
DQYJKoZIhvcNAQEFBQADggEBAHUUlKH25gf6HVc7jkI7q0mKhUwyCJFZjjH5WCf3
+huxLVTtiv48d9yjenEvLZxI1gDsck6hIVJ3f41ZKN6oAn59vm4KscsUEfg5l6TU
RtXn2vfvtS24fbgweu1hxgXqClo22IAlwMfvPqbNl+tc0xT+jo76MtBrgvtbM3ry
lzhwfGa46i+ft5GBKbGlMCCBoxk7lrPN1EDnvnRfBQGIEd1x2Rh/2Rwsl70Ba+ev
GWqtPCouo58NLldobGfG0sZGuHdQ/e6p+6ftI8qB2ZAdl5iAmqKcaA697oPh+vzw
5AG+J3bMcyMPJlrgPcfutz41lBu/QilJFyz8SLIffbYYzoI=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3RRbigjsNrW1dOhIm54p
zp+DO+2eaw/pJ7azhSimwByYzsHIq1lVX1cs8ow6aQcRclElW3H0tdhRprPxo+Pl
ga3TERauHQTiV3to4IoqYvww0rUEp05Ki30jrdK35a+UQFv+fuGE81iT9yiHAG93
OBFbbmT4B6dpqDP7lQPGQh+6pErTl6ZB8NclmGdeGhYkBPRv0NShcsWACDJzk3uG
c0PZqrIljSiZoAdsM+JMJaeXad5sI2VF60U3a9vfJxpA7drguBlFkcs8AIJ6x/R7
DkUW4yTZ06qWm+kLiJ24rnYiAv3OBDWRSUdgw/k9MJHm+JmTD4L9Ufaj11NnQRlB
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1276868179
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.entrust.net/rpa is incorporated by reference'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2009 Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1C'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-10-28 05:19:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-28 10:27:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FI'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Pori'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Porin kaupunki'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'konki.pori.fi'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27908704091876117928276860806841237873527302384437961070134553429242672055763586329598958685605788416504529870345162998427243644574289053177401849362543992892712405718665995188970792088409007289719845745100622918424159112067079535554296238655161158166340476758474361129936624511692774018117196919060882703442162083703745355743200163705533124035163590332336292529880728466376091033318385546208431788452439479265586129190861607167035552183556435599891763690528081379933962130293492154136200099679642701209232386861507431826526231368702252410404170159704349654700450398992461972373709506742925911726822660159059374195181
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1c.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (89 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1c-chain.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113533.7.75.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (17 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'konki.pori.fi'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 1ef1ab8906f8490f013377ee147aee197c93284d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4b170562ed40649031006067c4df91ab8add1ed7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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