avivaadvantage.com

Issued by Amazon RSA 2048 M01

About this certificate

This digital certificate with serial number 0a:90:44:07:1d:b6:18:37:ab:56:44:65:9b:ed:43:b0 was issued on by Amazon.

With 54 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=avivaadvantage.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:90:44:07:1d:b6:18:37:ab:56:44:65:9b:ed:43:b0
Serial Number (int): 14041350473123563968687166702113080240
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 5b:6e:79:c9:49:08:c1:6c:3d:f1:f4:33:16:b7:e9:f1:14:36:c0:95
AuthorityKeyId: 81:b8:0e:63:8a:89:12:18:e5:fa:3b:3b:50:95:9f:e6:e5:90:13:85

Fingerprint (sha1): e4:9f:39:d2:ca:b0:30:0e:48:47:21:ea:fc:4b:a1:d0:b6:30:20:2d
Fingerprint (sha256): 5b:2e:12:82:3d:b0:f6:c4:a5:d1:fe:f5:74:53:7b:20:94:2b:ee:47:80:90:8f:31:cd:1c:52:60:ae:b3:99:c9

Issuing Certificate URL: http://crt.r2m01.amazontrust.com/r2m01.cer

Revocation information

OCSP Server: http://ocsp.r2m01.amazontrust.com
CRL Distribution Point: http://crl.r2m01.amazontrust.com/r2m01.crl

Check the revocation status for certificate avivaadvantage.com

54

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for avivaadvantage.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

avivaadvantage.com
avivabroker.ie
apprentices.aviva.co.uk
avivaequine.ca
avivastaffpensions.co.uk
avivahealth.ie
aviva-labs.co.uk
avivasurety.biz
avivadirect.ie
bcmotorcycle.com
bcmotorcycle.uk
aviva-digital.net
avivawellbeingrewards.co.uk
advantageaviva.ca
aviva.co.uk
brokertechlaunchpad.com
avivasurety.com
avantageaviva.com
avivaresults.com
avivapartenaire.ca
avivaworld.at.aviva.com
brokertechlaunchpad.ca
43.fpinternational.com
avivawellbeingrewards.com
aviva-digital.co.uk
avivawaterprotection.ca
advantageaviva.com
avivacorpsite.at.aviva.com
aviva-digital.uk
aviva-digital.com
bcmotorcycle.co.uk
avivawaterprotection.com
avivasaleshub.com
avivastaffpension.co.uk
aviva-labs.uk
avivatrouduncoup.com
bcmotorcycle.ca
avivademosauto-enrolment.co.uk
avivasavesmarter.co.uk
avivawebcast.com
avivamerchandise.com
avivaadvantage.ca
avivatransfer.co.uk
aviva-direct.ie
autoenrolmentplanner.co.uk
avantageaviva.ca
aviva.com
avivashareplans.at.aviva.com
bcmotorcycle.net
avivabrand.com
avivasurety.ca
apc-online.aviva.com
avivamarine.com
avivasurety.net

Other certificates including the domain name avivaadvantage.com

(limited to 100 certificates)
avivaadvantage.com
www.avivapartenaire.ca
43.fpinternational.com
www.bcmotorcycle.com
www.avantageaviva.com
avivaadvantage.com
avivahealth.ie
aviva-digital.co.uk
www.bcmotorcycle.com
www.avantageaviva.com

Certificate

The complete raw certificate details for avivaadvantage.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu70D/E9ohmsqNT9d1onQ
oAm0z9QTnQJRBZZRvJLxNmU0ad+ouSbNWpQLtFljYJOlp5uAz8Dw8VVNZ9y/HXkX
1e6bRHOhXbJIkM7c0+S9wo5w2tzrGpYJG5X2M16RXhRFHjGlMDVJuwv+8cGS48tc
EId+YTHDMy2O2TnxY7AhZBnnjUiMGKRMFbTyoTELRa8+Djg3sR/+NDytTzaQuQsm
TeHbN/OlAcheZZsfZSZokV78QK1v3lT0qvCg002gtc/RMzihUD1V6gVz/cXyMx/S
yRilhE7+ZB87HHciolxbTCnzwTosoPZnGFf+TW4WdKzWK7U7mG+iVJpDqPLkgg45
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14041350473123563968687166702113080240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M01'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-05-03 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-31 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'avivaadvantage.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23699770079452276734319845257025486969414594710596447865368018624517712986582231858748253287365665787059865999404221556395202360300543110104988531166274825594177908792377590741908904273972647324845686419997595310829497264683783932161999643736963638633719292965336879785777887173431563506024748292406643932455026538681817650412438751599672298066510114086512013860303453237075355692342604289921873919206152953044590834161583647091995937036355387749547774927465365875201522347542536113163003199826149666562246231342361144564971368726757935814921830675291541749913638997533152663381279141588438443627545517964420216404309
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 81b80e638a891218e5fa3b3b50959fe6e5901385
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b6e79c94908c16c3df1f43316b7e9f11436c095
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1109 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabroker.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaequine.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaresults.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaworld.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'brokertechlaunchpad.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivacorpsite.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-digital.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasaleshub.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-labs.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatrouduncoup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivademosauto-enrolment.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivawebcast.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamerchandise.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivashareplans.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apc-online.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivamarine.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivasurety.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m01.amazontrust.com/r2m01.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m01.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m01.amazontrust.com/r2m01.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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