dc.novosst.com

Issued by RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1

About this certificate

This digital certificate with serial number 0e:df:9a:5b:a4:7a:41:b2:1c:67:e7:87:91:36:69:4d was issued on by DigiCert Inc.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=dc.novosst.com

DigiCert Inc

Organization: DigiCert Inc
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:df:9a:5b:a4:7a:41:b2:1c:67:e7:87:91:36:69:4d
Serial Number (int): 19770204892187180737197875217061800269
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 38:5d:71:ae:e1:2f:50:94:eb:2a:fb:ff:8b:d0:f1:df:10:07:1f:96
AuthorityKeyId: a4:8d:e5:be:7c:79:e4:70:23:6d:2e:29:34:ad:23:58:dc:f5:31:7f

Fingerprint (sha1): 0c:44:1d:87:ab:65:7c:89:a2:44:0c:4f:d1:b4:20:12:19:a3:82:ca
Fingerprint (sha256): 60:42:d4:70:12:8c:5d:11:df:df:41:43:a2:d9:0f:2b:84:3b:1d:88:1a:d3:ab:ca:56:e8:69:88:28:d5:b4:e2

Issuing Certificate URL: http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl
CRL Distribution Point: http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl

Check the revocation status for certificate dc.novosst.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dc.novosst.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dc.novosst.com

Other certificates including the domain name novosst.com

(limited to 100 certificates)
www.novosst.com
portail.novosst.com
desk-test.oniwa.co.jp
www.novosst.com
webservices.novosst.com
dc.novosst.com
www.novosst.com
hrs.novosst.com
portail2.novosst.com
novosst.com
hrs.novosst.com
www.novosst.com
support.filenorthcarolina.com
support.metaco.com
www.novosst.com
support.metaco.com
etrenovo.novosst.com
www.novosst.com
support.supergrp.com
servicedesk.cyberschooltech.net
apps.novosst.com
*.formation.novosst.com
desk-test.oniwa.co.jp
novosst-test.novosst.com
help.logicfusion.com
service.prodigitude.com
support.metaco.com
support.lewisit.org
www.novosst.com
*.essais.novosst.com
www.novosst.com
servicedesk.cyberschooltech.net
service.prodigitude.com
novosst.com
help.logicfusion.com
soutienit.novosst.com
portail.novosst.com
portail.novosst.com
desk-test.oniwa.co.jp
formation.novosst.com
*.essais.novosst.com
portail.novosst.com
apps.novosst.com
apps.novosst.com
service.prodigitude.com
portail.novosst.com
www.novosst.com
www.novosst.com
help.logicfusion.com
portail.novosst.com
apps.novosst.com
*.formation.novosst.com
portail2.novosst.com
portail.novosst.com
support.beepec.com
vpn.novosst.com
portail2.novosst.com
support.lewisit.org
appsinternes.novosst.com
www.novosst.com
dc.novosst.com
novosst.com
apps.novosst.com
portail.novosst.com
support.supergrp.com
novosst-test.novosst.com
support.metaco.com
support.metaco.com
soutienit.novosst.com
www.novosst.com
www.novosst.com
dc.novosst.com
appsinternes.novosst.com
novosst.com
soutienit.novosst.com
support.metaco.com
novosst.com
novosst-test.novosst.com
www.novosst.com
support.beepec.com
portail2.novosst.com
soutienit.novosst.com
apps.novosst.com
formation.novosst.com
support.metaco.com
support.metaco.com
support.supergrp.com
support.supergrp.com
help.adics.net
novosst.com
support.metaco.com
desk.elephantintheroom.website
novosst.com
*.formation.novosst.com
help.adics.net
rds.novosst.com
support.beepec.com
desk-test.oniwa.co.jp
gcnss-xwyc1-lidc01.novosst.com
novosst.com

Certificate

The complete raw certificate details for dc.novosst.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgDCCBWigAwIBAgIQDt+aW6R6QbIcZ+eHkTZpTTANBgkqhkiG9w0BAQsFADBZ
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMTMwMQYDVQQDEypS
YXBpZFNTTCBUTFMgRFYgUlNBIE1peGVkIFNIQTI1NiAyMDIwIENBLTEwHhcNMjEw
NzMwMDAwMDAwWhcNMjIwODExMjM1OTU5WjAZMRcwFQYDVQQDEw5kYy5ub3Zvc3N0
LmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKeYbGTF8s+18u5L
7SnEtMHYocaUiruO7TjoyYMh1agXdXRVq53vlU9M8t1aCNIyDFdFEmPXe1nAtjk9
p7mGKazF3Q9A/9WVFyES+FWXSHkk7tzxxGp60b7oSjJiT5G/Kbz/QWqjiskzLkVA
RHitW7Wsq0weQQA3gDFu6OHjc83K9ooufvdtDEO/nLKkl76w9Y7rvhAUmjxJcpKS
nXDjdJjSsf1WTBQqIg8yL3OWLg1tziMMpytgDMa/QBSozK4k/40n+N6DRZdJlmjo
S++sY8Q6vOlKGEw/hXRCfRH1Rqx2sOzH8+03KWlPV5RtGhPdHjDalUii2iJLsXJc
DLJn8asCAwEAAaOCA4IwggN+MB8GA1UdIwQYMBaAFKSN5b58eeRwI20uKTStI1jc
9TF/MB0GA1UdDgQWBBQ4XXGu4S9QlOsq+/+L0PHfEAcfljAZBgNVHREEEjAQgg5k
Yy5ub3Zvc3N0LmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMIGbBgNVHR8EgZMwgZAwRqBEoEKGQGh0dHA6Ly9jcmwzLmRp
Z2ljZXJ0LmNvbS9SYXBpZFNTTFRMU0RWUlNBTWl4ZWRTSEEyNTYyMDIwQ0EtMS5j
cmwwRqBEoEKGQGh0dHA6Ly9jcmw0LmRpZ2ljZXJ0LmNvbS9SYXBpZFNTTFRMU0RW
UlNBTWl4ZWRTSEEyNTYyMDIwQ0EtMS5jcmwwPgYDVR0gBDcwNTAzBgZngQwBAgEw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMIGFBggr
BgEFBQcBAQR5MHcwJAYIKwYBBQUHMAGGGGh0dHA6Ly9vY3NwLmRpZ2ljZXJ0LmNv
bTBPBggrBgEFBQcwAoZDaHR0cDovL2NhY2VydHMuZGlnaWNlcnQuY29tL1JhcGlk
U1NMVExTRFZSU0FNaXhlZFNIQTI1NjIwMjBDQS0xLmNydDAJBgNVHRMEAjAAMIIB
fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdwBGpVXrdfqRIDC1oolp9PN9ESxBdL79
SbiFq/L8cP5tRwAAAXr4wwFEAAAEAwBIMEYCIQDMDErcQDq0awvVsOukxDAvDcqN
5K3VGIbGq56QwMjjmwIhAIqYZpoP6H8Kdy89VaI+aVDUkasZqU/w6krKOqJy3sMR
AHYAUaOw9f0BeZxWbbg3eI8MpHrMGyfL956IQpoN/tSLBeUAAAF6+MMBQgAABAMA
RzBFAiAxY3XqL5uQ/7pb5seJHizv5kbr70KO/5CTbnVg16IR9wIhAMCYxAGxk59C
6TU/I1PJmd5O+uCG/zWQr2eA/PQHjVptAHYAQcjKsd8iRkoQxqE6CUKHXk4xixsD
6+tLx2jwkGKWBvYAAAF6+MMBAQAABAMARzBFAiEA056EnZ1+pCRETLqWRozYt48s
z1l5H6jaQdA5l0zQoTsCIHAxVM9N14CxaVRbFtTWjExNJ49tdcthd4tdu/v2iZOt
MA0GCSqGSIb3DQEBCwUAA4IBAQDFheqWsg8HX0SiymSBZGOd2gy94F5PknPIo5JE
96vCuO1rINunwMqKCveY25sixAGPphMiMnBrhRnpXgU88q4hDS5TAPBqIhpibG+a
NZHNcvlOCSYoepwmVxTcB2QGWkMdWM+qCBb+89zN5XTSmKbNzx+OPxeJ7O6ELfp+
4bfyuJud1LE+kHs2rgiHHCjDiEoJ0rUOkt4MwwM2gTQF+u/NuVG89HoKVuEi7pCJ
mJ2LEyNrhlymRx4wNrPhXJ9Yp3OGRePWvtBnfs940FRd8PuVSjhG90XZX8XkKXSZ
VN43HstMZXvlNSChumcX3U+21k/UCTvQzcv+bT2e9uHlWHjD
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5hsZMXyz7Xy7kvtKcS0
wdihxpSKu47tOOjJgyHVqBd1dFWrne+VT0zy3VoI0jIMV0USY9d7WcC2OT2nuYYp
rMXdD0D/1ZUXIRL4VZdIeSTu3PHEanrRvuhKMmJPkb8pvP9BaqOKyTMuRUBEeK1b
tayrTB5BADeAMW7o4eNzzcr2ii5+920MQ7+csqSXvrD1juu+EBSaPElykpKdcON0
mNKx/VZMFCoiDzIvc5YuDW3OIwynK2AMxr9AFKjMriT/jSf43oNFl0mWaOhL76xj
xDq86UoYTD+FdEJ9EfVGrHaw7Mfz7TcpaU9XlG0aE90eMNqVSKLaIkuxclwMsmfx
qwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19770204892187180737197875217061800269
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS DV RSA Mixed SHA256 2020 CA-1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-30 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-08-11 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dc.novosst.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21156959715478495462405960920971086398689640223979672062608912419500803330641396368785584320332743917121052429541940598867052385634855736633354712262921294525384662279836277385766449308250930508384720935019932604124062352716193731261364516723946449916366677344404939114118232509156988987436759137538424286683242147471214396101027513677096480203206830900287719066443008204816045511841629244054698792629311461053147037554538565560846969381921475111852307877317714096660355844114852855857238265546402675158510582016558422630693624260254367171513893325194827807637689948264701592950230331822807966831077938682288079892907
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a48de5be7c79e470236d2e2934ad2358dcf5317f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							385d71aee12f5094eb2afbff8bd0f1df10071f96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dc.novosst.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (121 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/RapidSSLTLSDVRSAMixedSHA2562020CA-1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770046a555eb75fa912030b5a28969f4f37d112c4174befd49b885abf2fc70fe6d470000017af8c301440000040300483046022100cc0c4adc403ab46b0bd5b0eba4c4302f0dca8de4add51886c6ab9e90c0c8e39b0221008a98669a0fe87f0a772f3d55a23e6950d491ab19a94ff0ea4aca3aa272dec31100760051a3b0f5fd01799c566db837788f0ca47acc1b27cbf79e88429a0dfed48b05e50000017af8c3014200000403004730450220316375ea2f9b90ffba5be6c7891e2cefe646ebef428eff90936e7560d7a211f7022100c098c401b1939f42e9353f2353c999de4efae086ff3590af6780fcf4078d5a6d00760041c8cab1df22464a10c6a13a0942875e4e318b1b03ebeb4bc768f090629606f60000017af8c301010000040300473045022100d39e849d9d7ea424444cba96468cd8b78f2ccf59791fa8da41d039974cd0a13b0220703154cf4dd780b169545b16d4d68c4c4d278f6d75cb61778b5dbbfbf68993ad
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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