reflektis.com

- Reflektis -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 06:11:d5:17:80:c4:df:a2:f1:5e:53:b2:de:13:0c:36 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Reflektis

Company registration number: 02048888
Organization: Reflektis
Organization unit: Reflektis
State / Province: Groningen
Locality: Usquert
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:11:d5:17:80:c4:df:a2:f1:5e:53:b2:de:13:0c:36
Serial Number (int): 8067959036649989752255213040804498486
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 30:84:b0:e7:eb:55:77:51:de:78:d5:29:66:bb:2c:a8:e5:ee:7b:59
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): d9:5b:00:b1:27:61:50:8a:61:60:05:7e:87:cb:65:6d:87:b1:80:07
Fingerprint (sha256): 72:ec:bc:38:e9:96:d6:6b:4c:10:b0:4a:2e:97:8a:67:ef:e6:eb:4e:8f:a7:b6:9d:dc:c8:68:01:11:0f:97:12

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate reflektis.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reflektis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reflektis.com
www.reflektis.com
www.reflektis.nl
robvens.nl
www.robvens.st
robvens.com
robvens.st
www.robvens.com
www.robvens.nl
reflektis.nl

Other certificates including the domain name reflektis.com

(limited to 100 certificates)
payments.inursecoach.com
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk

Certificate

The complete raw certificate details for reflektis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8067959036649989752255213040804498486
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-01-02 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02048888'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Usquert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reflektis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 800121336147787536011807386611330621243026446286207239851937067749597325871754398839404397768449547425075172638837427057883600199553125641308605877297367453800768052120858869245589938098164839128932079300122608867780946494635359710296028065540086298804625632838848945286039090768478385729843592503863982260514847508532216947757748746568124191723875741754488951578522021300076419675428229712996547626457473386552620035193210977387261497701803361995183648941495836145768937543335458749314161832757184687108810156266847168355933591890934188575775462026263828535101021678337527266597831418582610495267567641545431037933775157821059775122296255087996572895008259787507052428658735232408004092814011041574441886169567307154054174063958389164483337989431318620273193077225328266992640188913827347716310027070202498252817695292559896335071557071202668622859203468891425961573205271937220513161589921036511901440916951439672617489618155508690155773376847708342226247555019375947815654579220384574679050536031319925257441830131203032816260971925793125514672300642886310102729768605090597750208503227443449861377172225763343870612531683459451223437499157329067084732514604697921163431558785004624330826269770705400489146802472990702739791903317
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3084b0e7eb557751de78d52966bb2ca8e5ee7b59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes)
							00ef007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001647f6e2c770000040300473045022100eb6b7deb25e07692c87c1ed39cf8e1e7b246fffba55fdd08c6476273f7f0ac4302206642502dd1ba2f74f876c2430cbf154271da85019ce9e5110110d47ebc3361400075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd000001647f6e2cd4000004030046304402204d3d74ef89f1d516599b2c187f5db147dea46c64bcee72ad3bdd4f469e5a0a34022040cece34abcff2320aebc8cd8caa37c46278f2737f96090cd00eef826a6e4170
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a72c0ad2844ecbcf4cd1f60378e8379e5b700e1f70409e43bf7cea002a22da00288e0fc671d455b5e0da13a0e44f22d3f50a603f48aea7fba905e16c4425425d456c7516f63b6e7c58efdb7197f2d3c1235c0527be97f71e790876c5634049f8771caf80a6b8317c02065378988da6ac74c75f545fdd77305a78797fb42dff3a8ce560a68b040edd37cec7c4da17b75d1084fb1827fd4874298c70153fb6faf80c0a4e57beb39cd1746abf253b57f4fbee3d83bff5a6b2f665b77dbfc7358b731a4d91feae2b70ba78482ac9a4bf1eceb25b6c856789164cdab5a78dd2e371ef976e9f4a372aa7b079c6699af6d65be219894cf9fc18641f32fc33d11ba9f62a