gcp-prod1-front-end.proflowers.com

- Florists Transworld Delivery, Inc -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 83:6b:2c:05:cb:5c:d7:29:00:00:00:00:50:e1:37:29 was issued on by Entrust, Inc..

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Florists Transworld Delivery, Inc

Organization: Florists Transworld Delivery, Inc
State / Province: Illinois
Locality: Downers Grove
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 83:6b:2c:05:cb:5c:d7:29:00:00:00:00:50:e1:37:29
Serial Number (int): 174685336096788273385719748483101046569
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: f8:61:9f:fd:c9:8c:3a:8c:27:65:db:bd:c7:b9:27:ab:ff:e0:4f:5a
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 41:67:11:5a:6c:91:74:b8:6f:4e:81:ca:9a:9b:e8:2e:4c:8e:3d:fd
Fingerprint (sha256): 5e:7b:8a:85:32:43:73:ba:45:6d:e0:b0:f6:00:be:fa:82:9b:ed:8a:1e:8a:57:0d:b4:9d:b3:50:7e:64:fb:b5

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate gcp-prod1-front-end.proflowers.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for gcp-prod1-front-end.proflowers.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

gcp-prod1-front-end.proflowers.com
gcp-prod1-front-end.ftd.com
gcp-prod1-api-gateway.ftd.com
gcp-prod2-front-end.proflowers.com
gcp-prod2-front-end.ftd.com
gcp-prod2-api-gateway.ftd.com
gcp-prod1-api-gateway.proflowers.com
gcp-prod1-api-gateway.ftdi.com
gcp-prod2-api-gateway.proflowers.com
gcp-prod2-api-gateway.ftdi.com

Other certificates including the domain name proflowers.com

(limited to 100 certificates)
d.eml.proflowers.com
cswww.proflowers.com
cimages.proflowers.com
www.ftd.com
cimages.proflowers.com
*.proflowers.com
cimages.proflowers.com
incapsula.com
merx.prod.proflowers.com
webmail.proflowers.com
admin.proflowers.com
cimages.proflowers.com
csbackoffice.proflowers.com
www.ftd.com
gcp-wildcard-san.gcp.ftdi.com
backoffice.proflowers.com
pickagift.proflowers.com
checkout.proflowers.com
www.ftd.com
webmail.proflowers.com
e.eml.proflowers.com
gcp-wildcard-san.gcp.ftdi.com
davinci.proflowers.com
backoffice.proflowers.com
www.ftd.com
cimages.proflowers.com
accounts.proflowers.com
*.proflowers.com
cimages.proflowers.com
csorder.proflowers.com
gcp-origin.ftd.com
www.ftd.com
cimages.proflowers.com
email.proflowers.com
*.proflowers.com
accounts.proflowers.com
gcp-origin.ftd.com
www.ftd.com
san.proflowers.com
cimages.proflowers.com
gcp-origin.ftd.com
cimages.proflowers.com
csorder.proflowers.com
cimages.proflowers.com
www.ftd.com
www.ftd.com
www.ftd.com
swa.proflowers.com
swa.proflowers.com
gcp-wildcard-san.gcp.ftdi.com
gcp-nonprod1-dev1-proxy.ftdi.com
admin.proflowers.com
cimages.proflowers.com
www.ftd.com
swa.proflowers.com
besan.proflowers.com
san.proflowers.com
incapsula.com
*.proflowers.com
gcp-wildcard-san.gcp.ftdi.com
webmail.proflowers.com
cimages.proflowers.com
gcp-wildcard-san.gcp.ftdi.com
incapsula.com
san.proflowers.com
orderadmin.proflowers.com
incapsula.com
e.eml.proflowers.com
incapsula.com
qa01.ftd.com
san.proflowers.com
cimages.proflowers.com
www.providecommerce.com
www.proflowers.com
orderadmin.proflowers.com
cimages.proflowers.com
cimages.proflowers.com
cimages.proflowers.com
csorderadmin.proflowers.com
d.eml.proflowers.com
gcp-origin.ftd.com
d.eml.proflowers.com
*.proflowers.com
swa.proflowers.com
cimages.proflowers.com
*.proflowers.com
www.ftd.com
gcp-origin.ftd.com
cimages.proflowers.com
sa.proflowers.com
gcp-prod1-front-end.proflowers.com
incapsula.com
cimages.proflowers.com
devsan.proflowers.com
gcp-pf-pp-wildcard-san.gcp.ftdi.com
cssan.prvd.com
link.proflowers.com
swa.proflowers.com
gcp-wildcard-san.gcp.ftdi.com
d.eml.proflowers.com

Certificate

The complete raw certificate details for gcp-prod1-front-end.proflowers.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO8HqlWs+xi1SeQS6H+q
+NLKr9Bp1UTzPaMKuHVZAYsLOu712AxUMf66wzuCIEkWqpDAbRBYUVqxBhGkVTo5
I3RfjaP5JVtVMZD1wfiyQqdtGZg1sO8DYJzne8dQ0JOcLps1HMCzmMbXal314YJ1
Abvt54U9RKxw8oReqRinVhAGdDqvXpz9ET8hqXvQ+QBj0+e+8gY55G+E2QDlkIuj
IrvTu8LXaW35SJlV15+eYwnyL+1qY6u7cmV+lNfDIMjo2LUBLVdpSBI1/Q0s4kMc
s06uK7RpVGx/Sy56Tb/NX3lIDGkf8RKAX6LC2kdAc3fOK7K9OQt6DGHHK7DOc+Mh
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 174685336096788273385719748483101046569
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 01:20:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-23 01:50:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Illinois'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Downers Grove'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florists Transworld Delivery, Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gcp-prod1-front-end.proflowers.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22335811731923271431747003349907590024555329146094550019184487558790934358999600295304537617273417714845777771279663788448904359570013388883977083317849335517836805761962116764882936166812686022691855826788955188351537775082779864454004023027761546946533577516399852605965758615682768948323064907445362177055503968882115155595904499199431934535302088153653902371393955480010712092843038261550351699549445079377300271682837438386723379462863730373839673921775183102476419560787932354484755474177381613716176352264505704355392559508913771409075223071322815473995010622784111068233627516638366400326308363207915782480373
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod1-front-end.proflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod1-front-end.ftd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod1-api-gateway.ftd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod2-front-end.proflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod2-front-end.ftd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod2-api-gateway.ftd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod1-api-gateway.proflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod1-api-gateway.ftdi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod2-api-gateway.proflowers.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gcp-prod2-api-gateway.ftdi.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f8619ffdc98c3a8c2765dbbdc7b927abffe04f5a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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