CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca

- Canadian Food Inspection Agency -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 56:23:b9:64:95:19:de:c5:00:00:00:00:50:ef:89:ca was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Canadian Food Inspection Agency

Organization: Canadian Food Inspection Agency
State / Province: Ontario
Locality: Ottawa
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 56:23:b9:64:95:19:de:c5:00:00:00:00:50:ef:89:ca
Serial Number (int): 114499098242288952630426724704252299722
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: b7:18:06:fb:59:d6:39:61:48:5b:3a:a2:3f:8f:4b:5f:44:f0:e2:0d
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 11:93:a8:cb:f1:14:7d:45:5f:ca:c4:17:5d:62:7c:0a:69:74:c0:db
Fingerprint (sha256): 53:e6:9d:6f:34:33:09:8a:b2:48:96:43:1b:4f:dc:1e:04:9e:4e:80:e9:f3:73:4a:0d:bd:27:58:b5:12:6e:66

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca
Devops.cfia-acia.inspection.gc.ca

Other certificates including the domain name inspection.gc.ca

(limited to 100 certificates)
services.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
cfonk1awvasd052.cfia-acia.inspection.gc.ca
cfonk1awvasp122.cfia-acia.inspection.gc.ca
services-pre.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
services1.inspection.gc.ca
CFONK1AWVWSP009.cfia-acia.inspection.gc.ca
CFONK1AWVAST008.CFIA-ACIA.inspection.gc.ca
services1.inspection.gc.ca
avs-svs.inspection.gc.ca
CFONK1AWVASD061.cfia-acia.inspection.gc.ca
NCOTTA330.cfia-acia.inspection.gc.ca
CFONK1AWVASP150.CFIA-ACIA.inspection.gc.ca
AGR.GC.CA
active.inspection.gc.ca
cfonk1awvasd050.cfia-acia.inspection.gc.ca
CFONK1AWVASD070.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
CFONK1AWVASP165.cfia-acia.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
shipmenttracker-suividesenvois.inspection.gc.ca
cfonk1awvasp136.cfia-acia.inspection.gc.ca
services-pre.cfia-acia.inspection.gc.ca
vpn.inspection.gc.ca
wwwqa.inspection.gc.ca
NCOTTA330.cfia-acia.inspection.gc.ca
inspection.gc.ca
inspection.gc.ca
cfonk1awvasd049.cfia-acia.inspection.gc.ca
inspection.gc.ca
aem-prod-disp.cloud-nuage.inspection.gc.ca
wwwqa.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
CFONK1AWVASP168.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
cfonk1awvasd051.cfia-acia.inspection.gc.ca
CFONK1AWVASD071.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
CFONK1AWVWSS001.cfia-acia.inspection.gc.ca
avs-svs.inspection.gc.ca
services.inspection.gc.ca
CFONK1AWVASP048.CFIA-ACIA.inspection.gc.ca
secure.inspection.gc.ca
cfonk1awvasd048.cfia-acia.inspection.gc.ca
arcgis.cfia-acia.inspection.gc.ca
avs-svs.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
cfonk1awvast006.cfia-acia.inspection.gc.ca
CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca
vpn-bcp.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca
geo.inspection.gc.ca
cfonk1awvasp120.cfia-acia.inspection.gc.ca
active.inspection.gc.ca
CFONK1AWVASP148.CFIA-ACIA.inspection.gc.ca
sms-sigs.cfia-acia.inspection.gc.ca
BB10UDS.inspection.gc.ca
cfonk1awvasp138.cfia-acia.inspection.gc.ca
prod.inspection.canada.ca
cfonk1awvast005.cfia-acia.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
smartvue.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
int-search-recherche.cfia-acia.inspection.gc.ca
active.inspection.gc.ca
phpkb-dev.agr.gc.ca
sso-iu.inspection.gc.ca
active.inspection.gc.ca
inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
dsdpportal.cfia-acia.inspection.gc.ca
cfsin-es-dev.cloud.inspection.gc.ca
CFONK1AWVASD062.cfia-acia.inspection.gc.ca
secure.inspection.gc.ca
collab.cfia-acia.inspection.gc.ca
cfonk1awvasd048.cfia-acia.inspection.gc.ca
asisst-orasi.inspection.gc.ca
wwwqa.inspection.gc.ca
cfonk1awvasd051.cfia-acia.inspection.gc.ca
airs-sari.inspection.gc.ca
phpkb-dev.agr.gc.ca
asisst-orasi.inspection.gc.ca
airs-sari.inspection.gc.ca
apps.cfia-acia.inspection.gc.ca
CFONK1AWVWSP002.cfia-acia.inspection.gc.ca
CFONK1AWVAST010.cfia-acia.inspection.gc.ca
splunk.cfia-acia.inspection.gc.ca
CFONK1AWVWSP005.cfia-acia.inspection.gc.ca
services.inspection.gc.ca
cfsin-rcisa.inspection.gc.ca
cfonk1awvasp120.cfia-acia.inspection.gc.ca
CFONK1AWVASP169.cfia-acia.inspection.gc.ca
CFONK1AWVASP185.cfia-acia.inspection.gc.ca
CFONK1AWVASD063.cfia-acia.inspection.gc.ca

Certificate

The complete raw certificate details for CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKxq7vOSsgVRxeq3alK8
P8yU8pBOxoubgOm6Jx+G7hR5kni8FtmAwlVBHO0PFqypGWGFdvOlQAwGue9WQjd2
M08XhZZZiCZQecyoRkrQAP+UDB1N9Q8uJrObZMEqpDbivfHFEkQRG1m5bLR5bOvW
QadhaF85Yp5POlDmtTywjymbYfqZv/AzLidBQsmnZRZcmY1Linl0Ry/LRPyaY89r
MnFC0bdgfZRcdzQ3yNp6oG9njqrM8hUBc1as9lQ05yw/MEzTGtxG9BBgL9p3BG7Q
D+mdlmImmk2DVpMBs7yWB9KBW61ZCY+CCpYCKnWJtYoYBgzxo396AULmcDVPJwYZ
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 114499098242288952630426724704252299722
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-28 14:32:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-27 15:02:43 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ottawa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Canadian Food Inspection Agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20788104355375188880480415494391965755981049355301626905731420004571079895060989560360779014434682891875141739136503807337878620240104459991348133737368352946716419579312609278630167446136661957952848660688718618828584681867506385887742582528788912535215434237409123608831148815019500293907921820876752236984471934037527871896610501439998214199009117491115246266304421908128460198759281783353680951226182061168843421215795170232650693900953857445475241507216778478246735392359478922461878783545690784604422804306797559113286447618268825997157181315050863899601995986057560243908403312513684728027013560659710228961773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (81 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'CFONK1AWVASP147.CFIA-ACIA.inspection.gc.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Devops.cfia-acia.inspection.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							b71806fb59d63961485b3aa23f8f4b5f44f0e20d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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