*.java.us1.oraclecloudapps.com

- Oracle Corporation -

Issued by DigiCert SHA2 Secure Server CA

About this certificate

This digital certificate with serial number 0c:2f:fc:60:46:21:12:78:6c:e3:87:8e:a5:41:ea:60 was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Certificate had 3 embedded SCTs from distinct log IDs. Browser policy may require 4 for this certificate. Check if certificate has enough embedded SCTs to meet Apple CT Policy (https://support.apple.com/en-us/HT205280)

Oracle Corporation

Organization: Oracle Corporation
Organization unit: Oracle CSEC ADC
State / Province: California
Locality: Redwood City
Country: US

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0c:2f:fc:60:46:21:12:78:6c:e3:87:8e:a5:41:ea:60
Serial Number (int): 16199892696597781427303543833178008160
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 31:6f:75:cc:9d:fd:59:27:26:63:20:56:b1:11:f3:88:8e:e0:34:0a
AuthorityKeyId: 0f:80:61:1c:82:31:61:d5:2f:28:e7:8d:46:38:b4:2c:e1:c6:d9:e2

Fingerprint (sha1): 9d:01:40:90:14:6a:43:aa:1c:2d:a2:9f:17:8d:3f:75:ac:d2:71:34
Fingerprint (sha256): 51:56:af:b7:b5:d8:9e:21:fc:77:c5:65:ec:4a:78:2e:69:6f:79:20:4f:bc:8d:b7:22:27:23:39:ca:9b:62:2b

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ssca-sha2-g6.crl
CRL Distribution Point: http://crl4.digicert.com/ssca-sha2-g6.crl

Check the revocation status for certificate *.java.us1.oraclecloudapps.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.java.us1.oraclecloudapps.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.java.us1.oraclecloudapps.com

Other certificates including the domain name oraclecloudapps.com

(limited to 100 certificates)
stg-cloud.oracle.com
adb.us-ashburn-1.oraclecloudapps.com
*.developer.us0.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
dbaccess.pp1.oraclecloudapps.com
*.db.em3.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
*.db.pp1.oraclecloudapps.com
*.java.em2.oraclecloudapps.com
*.adb.ap-mumbai-1.oraclecloudapps.com
*.java.us2.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.db.em2.oraclecloudapps.com
*.java.em2.oraclecloudapps.com
*.adb.eu-amsterdam-1.oraclecloudapps.com
adb.ap-dcc-canberra-1.dedicated.oraclecloudapps.com
*.stg-java.us1.oraclecloudapps.com
*.stg-dbv2.us1.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.java.us2.oraclecloudapps.com
*.db.em3.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
dbaccess.em2.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
adb-preprod-internal-admin.us-phoenix-1.oraclecloudapps.com
*.java.ap1.oraclecloudapps.com
adb.eu-dcc-dublin-2.dedicated.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
dbaccess.pp1.oraclecloudapps.com
*.db.ap1.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
*.javav2.em1.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
adb.mx-queretaro-1.oraclecloudapps.com
*.adb.us-phoenix-1.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.java.em2.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.db.us1.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
stg-cloud.oracle.com
*.db.em2.oraclecloudapps.com
*.java.us2.oraclecloudapps.com
*.adb.us-ashburn-1.oraclecloudapps.com
*.adb.ca-toronto-1.oraclecloudapps.com
*.adb.sa-saopaulo-1.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
*.db.em2.oraclecloudapps.com
*.adb.us-phoenix-1.oraclecloudapps.com
stg-cloud.oracle.com
*.java.em2.oraclecloudapps.com
*.java.us2.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.stg-javav2.us1.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
*.java.em1.oraclecloudapps.com
adb.us-sanjose-1.oraclecloudapps.com
*.adb.ap-sydney-1.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.db.em2.oraclecloudapps.com
adb-internal-admin.us-phoenix-1.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
adb.ap-osaka-1.oraclecloudapps.com
*.java.em2.oraclecloudapps.com
*.db.pp1.oraclecloudapps.com
*.db.us2.oraclecloudapps.com
*.java.us2.oraclecloudapps.com
*.java.us1.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
dbaccess.pp1.oraclecloudapps.com
adb.eu-dcc-rating-2.dedicated.oraclecloudapps.com
dbaccess.pp1.oraclecloudapps.com
*.java.em2.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
*.java.em2.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.db.us2.oraclecloudapps.com
*.db.us1.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.java.ap1.oraclecloudapps.com
*.db.em2.oraclecloudapps.com
adb.ap-mumbai-1.oraclecloudapps.com
*.adb.uk-london-1.oraclecloudapps.com
paas-stage-1.oraclecloud.com
*.adb.ap-sydney-1.oraclecloudapps.com
*.db.em1.oraclecloudapps.com
*.db.pp1.oraclecloudapps.com
dbaccess.pp1.oraclecloudapps.com
stg-cloud.oracle.com
*.adb.me-jeddah-1.oraclecloudapps.com

Certificate

The complete raw certificate details for *.java.us1.oraclecloudapps.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuOyZf8sJXrNjK/Czx5qt
R8IrIZUA63HgEyXAjYVMYUrMcWxcLny30fZKmI4A+gyAoEqBxWDhcqdif8cEuGoY
VUt7E72yk+fx9X0l0zNuJMf6TToHkxqI57xs0SlWVGI8q2kjWlQCOmR7fyXTwBZf
G7vaWoV8mBgRD88QzITZevjlGeDVQxp8zRAijgQV8l5og7AnOFu/tcNtrct5aiVV
8WQ3hbvUY3V1N3TPjnd14lcOykim7CDfkMiI8smH7ZQ5VfFuo7axcfxSyABMbvaA
NAwXvrMJYXbGDUuidhR1+u/0YRIiRxaJLdedtjy6JPQ2Xhx2bLHee2RQR63ldj4g
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 16199892696597781427303543833178008160
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Secure Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-11 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Redwood City'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oracle CSEC ADC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.java.us1.oraclecloudapps.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23344519727991561343696863814183818126086699617324209629479427349555229052815212581535274689424186024218491938409898587269003054986417023741691224975025863929521706406497626050047548123956576365543690552111842737695662700554970725926245212015150832008252085737860813541695257128194414258922033783703884284735600351910898102258392675400252604738769988887596527077949837164148701101136577201797268600989404462077837036017506071472597469739436440726184697104308164530669421993369743246709023905422045983145783152291764850691200691570893688026900857955699256493664167304894747182582592635906515005654012660039009913675877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0f80611c823161d52f28e78d4638b42ce1c6d9e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							316f75cc9dfd592726632056b111f3888ee0340a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.java.us1.oraclecloudapps.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (100 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ssca-sha2-g6.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.1 (digiCertOVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2SecureServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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