owa2.derpart.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 03:ee:2a:7a:4b:c2:33:6b:47:b5:68:82:8a:1a:31:cf was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=owa2.derpart.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:ee:2a:7a:4b:c2:33:6b:47:b5:68:82:8a:1a:31:cf
Serial Number (int): 5224312190171366869974183014540390863
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 2b:98:9b:4b:38:cb:af:b2:1d:a8:64:47:14:d5:84:cd:b9:97:9a:75
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): 4f:10:bb:f1:c7:5e:f9:d5:df:1b:1f:6e:cc:c8:b2:c4:ce:0f:12:bd
Fingerprint (sha256): 51:2f:8e:a3:15:e6:2a:62:63:0d:e6:0b:8e:6c:d4:3b:c2:5a:2c:ee:29:01:d4:ec:d2:ca:2e:8b:57:f0:4d:3c

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate owa2.derpart.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for owa2.derpart.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

owa2.derpart.com

Other certificates including the domain name derpart.com

(limited to 100 certificates)
touristik.derpart.com
tagesspiegel.kiosk.plus
mitteilungsblatt.seifert-medien.de
www.derpart.com
kiosk.am-weststrand.com
magazine.suncoastergroup.com
kiosk.am-weststrand.com
media.hirschmann-automotive.com
publications.cwgc.org
touristik.derpart.com
www.derpart.com
kiosk.der-kleine-georg.de
downloads.yspi.ie
fewo.derpart.com
kiosk.der-kleine-georg.de
quals.truebeck.com
www.digital.britishtraveljournal.com
kiosk.vidaglobal.de
magazin.tellz.me
dev.derpart.com
owa2.derpart.com
www.derpart.com
kiosk.vidaglobal.de
quals.truebeck.com
emag.indianjeweller.in
derpart.com
publikationen.contipark.de
publications.cwgc.org
flyer.aqua-dome.at
kundenmagazin.derpart.com
magazine.roarkidsmagazine.com
kiosk.vidaglobal.de
news.vdmno.de
owa.derpart.com
kiosk.vidaglobal.de
mitteilungsblatt.seifert-medien.de
publikationen.contipark.de
magazine.elektropraktiker.de
flyer.aqua-dome.at
kiosk.antalis-verpackungen.de
brochures.waterrower.co.uk
magazine.elektropraktiker.de
magazine.inversionesciel.com
publications.cwgc.org
touristik.derpart.com
kiosk.der-kleine-georg.de
kiosk.der-kleine-georg.de
brochure.ntpwarranty.com
wirbeicontipark.contipark.de
www.derpart.com
www.derpart.com
mitteilungsblatt.seifert-medien.de
imperva.com
magazine.cioa.com
kataloge.weilermoebel.at
downloads.yspi.ie
dev.derpart.com
imperva.com
owa2.derpart.com
katalog.gartenmode.de
flyer.aqua-dome.at
brochure.ntpwarranty.com
brochure.ntpwarranty.com
brochures.waterrower.co.uk
quals.truebeck.com
flyer.aqua-dome.at
www.derpart.com
publications.cwgc.org
mitteilungsblatt.seifert-medien.de
mitteilungsblatt.seifert-medien.de
brochures.keepmoat.com
kiosk.vidaglobal.de
magazine.cioa.com
wirbeicontipark.contipark.de
magazine.elektropraktiker.de
owa2.derpart.com
fewo.derpart.com
www.derpart.com
magazine.ausemergencyservices.com.au
kiosk.vidaglobal.de
kataloge.teppich-stark.de
owa2.derpart.com
ebooks.royalafricansafaris.com
bkdmno.vdmno.de
kiosk.der-kleine-georg.de
webkiosks.corshamprint.co.uk
publications.cwgc.org
kiosk.der-kleine-georg.de
emag.indianjeweller.in
owa2.derpart.com
magazine.legacylighthouse.org
tagesspiegel.kiosk.plus
kiosk.am-weststrand.com
kiosk.am-weststrand.com
kundenmagazin.derpart.com
www.derpart.com
news.vdmno.de
magazine.legacylighthouse.org
kiosk.am-weststrand.com
downloads.yspi.ie

Certificate

The complete raw certificate details for owa2.derpart.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIQA+4qekvCM2tHtWiCihoxzzANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTIwMTIxNDAwMDAwMFoXDTIyMDExMjIzNTk1OVowGzEZMBcGA1UEAxMQb3dh
Mi5kZXJwYXJ0LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALsl
wAnhDcQdQ0dDVrKjfiYKgD7UD9GrbAs4h4xJUpakFdWn3pBC1wVVm06E+7lM5UzQ
0IUiIPk3kuIqIXjQPPP0hH5GoKkofeCuq54Ft0dykgp9DX1tLdMWsgCddNQd5lmP
Bo+Na2WQEMoOkFuD4UL0Q/53brWEe4HNmIduQTtEPiZThbNZV5iVnUmzF2DjTW2t
/GPSqUwbpQJwrY+kvr1aJ/5XuUcn8G/WY45OmMClL4XN3LxPeFfFA/KM4tBdZefe
Ql2NveMsW1OXzxdwROE14Xl9SPUrtgqBidcSk2J/MBHZ5IJwRixLJ06/UokoFsch
u02EpGgGL/9nwuadDacCAwEAAaOCAqswggKnMB8GA1UdIwQYMBaAFAzbbIJJD0pn
CrgU7nrESFKI61Y4MB0GA1UdDgQWBBQrmJtLOMuvsh2oZEcU1YTNuZeadTAbBgNV
HREEFDASghBvd2EyLmRlcnBhcnQuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDov
L2NkcC5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNybDBMBgNVHSAE
RTBDMDcGCWCGSAGG/WwBAjAqMCgGCCsGAQUFBwIBFhxodHRwczovL3d3dy5kaWdp
Y2VydC5jb20vQ1BTMAgGBmeBDAECATB2BggrBgEFBQcBAQRqMGgwJgYIKwYBBQUH
MAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD4GCCsGAQUFBzAChjJodHRw
Oi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcxLmNydDAJ
BgNVHRMEAjAAMIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDxAHcAKXm+8J45OSHwVnOf
Y6V35b5XfZxgCvj5TV0mXCVdx4QAAAF2Xo616gAABAMASDBGAiEAkjcW2uaUK6J5
NrYPjWQVcMd01bB9NgflqAVcbPP0shwCIQD1ygrkiYKnBXxhZ4ONisDj0Zng7G5v
DajaqxdQH3MBwwB2ACJFRQdZVSRWlj+hL/H3bYbgIyZjrcBLf13Gg1xu4g8CAAAB
dl6OtlMAAAQDAEcwRQIgVuepHdz30xSb+07nTNnhjVC9uEDdkxwWm8BYmfhXRloC
IQDOwu+oIlnFVFrgziDPJrjFRrPNjLPPySynzuDjcnCtzDANBgkqhkiG9w0BAQsF
AAOCAQEAgBcayclQ91Poe3rNZPXwIzmQN19pwKpBZtW7ZUJQO2pMLvS/onczzcLp
5SqooqPjMsFo5dLOXl6Qn1JgP8YN6btxmF7fTheuzZtEUYD0lHkEQuuVEW8GD4h3
ke741qXDowroMXTvlNdVCKa4sPKUevMF/fmr7wNCCeaPn3wnvw7HasbaGtqKo0nu
Lj2QupOsmpLJhycfUBJiibuejPAZMLWn5aAVzvzFgklhDSGi07mx9NNzeI/7hQUS
JrJC0ZO4XVYB4mO/OTjabmuy8yNVffWtZHhqk3UTO0FOBKGj1EHQpZy9dVZeBORt
SsXhUdlC1K6QDo2E/WFcTonluxUczQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuyXACeENxB1DR0NWsqN+
JgqAPtQP0atsCziHjElSlqQV1afekELXBVWbToT7uUzlTNDQhSIg+TeS4ioheNA8
8/SEfkagqSh94K6rngW3R3KSCn0NfW0t0xayAJ101B3mWY8Gj41rZZAQyg6QW4Ph
QvRD/ndutYR7gc2Yh25BO0Q+JlOFs1lXmJWdSbMXYONNba38Y9KpTBulAnCtj6S+
vVon/le5Ryfwb9Zjjk6YwKUvhc3cvE94V8UD8ozi0F1l595CXY294yxbU5fPF3BE
4TXheX1I9Su2CoGJ1xKTYn8wEdnkgnBGLEsnTr9SiSgWxyG7TYSkaAYv/2fC5p0N
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5224312190171366869974183014540390863
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-14 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-12 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'owa2.derpart.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23625178321785985524963595035473598404359604231407798779022492243547412177492735814981313321402431883229239794903186687301145541100190802950773549198284776794672623977178622037701332685448602567781113135445627886700942607645885463261747480260521305243088354209303599694466257678203587263243509891887242683128284535118732700435382796300284338278669794645476450142683449609146916454675197520555397806998996871047150853557032153271788159265617806511113012048775259186394600384936653274081373755551726220536755186463866163739381399064250791179937001302733786667593048284849137806627082190818450329495156921049548473568679
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2b989b4b38cbafb21da8644714d584cdb9979a75
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa2.derpart.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10077002979bef09e393921f056739f63a577e5be577d9c600af8f94d5d265c255dc784000001765e8eb5ea0000040300483046022100923716dae6942ba27936b60f8d641570c774d5b07d3607e5a8055c6cf3f4b21c022100f5ca0ae48982a7057c6167838d8ac0e3d199e0ec6e6f0da8daab17501f7301c30076002245450759552456963fa12ff1f76d86e0232663adc04b7f5dc6835c6ee20f02000001765e8eb6530000040300473045022056e7a91ddcf7d3149bfb4ee74cd9e18d50bdb840dd931c169bc05899f857465a022100cec2efa82259c5545ae0ce20cf26b8c546b3cd8cb3cfc92ca7cee0e37270adcc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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