webservices.davilex.nl
Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1
About this certificate
This digital certificate with serial number 08:ab:30:8c:d4:0d:6b:72:91:97:42:1b:eb:5a:22:3d was issued on by DigiCert, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=webservices.davilex.nl
DigiCert, Inc.
Organization:
DigiCert, Inc.
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 08:ab:30:8c:d4:0d:6b:72:91:97:42:1b:eb:5a:22:3dSerial Number (int): 11522691442319555309310346667268645437
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: 2c:07:b7:2c:a7:88:03:f4:87:d9:63:ee:83:7f:a8:dd:04:55:25:00
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23
Fingerprint (sha1): 3c:b5:00:16:d6:70:a5:a7:e2:85:4c:47:84:ef:97:a7:7d:d3:82:9b
Fingerprint (sha256): 75:ea:5b:1c:7b:dd:d5:e9:91:97:a6:ad:84:ab:7e:ff:4e:ac:b1:4e:1b:d1:50:fb:25:c3:a2:c2:e9:6f:77:76
Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt
Revocation information
OCSP Server: http://ocsp.digicert.comCRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
Check the revocation status for certificate webservices.davilex.nl
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for webservices.davilex.nl
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
webservices.davilex.nl
Other certificates including the domain name davilex.nl
(limited to 100 certificates)
www.davilex.nl
www.davilex.nl
www.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
webservices.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
remote.davilex.nl
remote.davilex.nl
leden.davilex.nl
xbrlservices.davilex.nl
remote.davilex.nl
webservices.davilex.nl
online.davilex.nl
xbrlservices.davilex.nl
online.davilex.nl
staging.leden.davilex.nl
webservices.davilex.nl
online.davilex.nl
www.davilex.nl
online.davilex.nl
test.leden.davilex.nl
online.davilex.nl
leden.davilex.nl
www.davilex.nl
remote.davilex.nl
online.davilex.nl
remote.davilex.nl
www.davilex.nl
xbrlservices.davilex.nl
webservices.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
webservices.davilex.nl
remote.davilex.nl
online.davilex.nl
www.davilex.nl
www.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
webservices.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
remote.davilex.nl
remote.davilex.nl
leden.davilex.nl
xbrlservices.davilex.nl
remote.davilex.nl
webservices.davilex.nl
online.davilex.nl
xbrlservices.davilex.nl
online.davilex.nl
staging.leden.davilex.nl
webservices.davilex.nl
online.davilex.nl
www.davilex.nl
online.davilex.nl
test.leden.davilex.nl
online.davilex.nl
leden.davilex.nl
www.davilex.nl
remote.davilex.nl
online.davilex.nl
remote.davilex.nl
www.davilex.nl
xbrlservices.davilex.nl
webservices.davilex.nl
www.davilex.nl
online.davilex.nl
online.davilex.nl
www.davilex.nl
webservices.davilex.nl
remote.davilex.nl
online.davilex.nl
Certificate
The complete raw certificate details for webservices.davilex.nl in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHmDCCBYCgAwIBAgIQCKswjNQNa3KRl0Ib61oiPTANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN MjMwNjI1MDAwMDAwWhcNMjMxMjI1MjM1OTU5WjAhMR8wHQYDVQQDExZ3ZWJzZXJ2 aWNlcy5kYXZpbGV4Lm5sMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA zfREMwDa55gq4glRpNCnZE5EIJbK8PieuySdtcflmXE+ejW4WK38N1LE0b4snQqd kvxe2j7yigMTEYoVCoQJ+fbxcVhzDiywir59/V5OBHo8UWqjdy/Zr9tzOmBhq1S0 5ZFx99Gof0WLIj5Qa6BaMscN7hVCEGkfXIXVHFmvJNJlrnPDDGXRX+b+L1MWgtHw AGe64RN83sVfgKsunhfHOZZPF/sF2iZE1zgQcF8eFnU4B10IdBGwPttKI3Xb4ni0 keniyy/kbEGiV+iHiDRwyHag8eObS7/XDPqGCP4OrOWBfgMvEwz2NVC6E587BjrO yq24j+Ugb+4Sw02ugBZriQIDAQABo4IDjzCCA4swHwYDVR0jBBgwFoAUpbTW6zbE 52um38RkCwEqIAS4ZiMwHQYDVR0OBBYEFCwHtyyniAP0h9lj7oN/qN0EVSUAMCEG A1UdEQQaMBiCFndlYnNlcnZpY2VzLmRhdmlsZXgubmwwDgYDVR0PAQH/BAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjCBnwYDVR0fBIGXMIGUMEig RqBEhkJodHRwOi8vY3JsMy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNS U0E0MDk2U0hBMjU2MjAyMkNBMS5jcmwwSKBGoESGQmh0dHA6Ly9jcmw0LmRpZ2lj ZXJ0LmNvbS9HZW9UcnVzdEdsb2JhbFRMU1JTQTQwOTZTSEEyNTYyMDIyQ0ExLmNy bDA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8vd3d3 LmRpZ2ljZXJ0LmNvbS9DUFMwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYY aHR0cDovL29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2Fj ZXJ0cy5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2 MjAyMkNBMS5jcnQwCQYDVR0TBAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFo AHcA6D7Q2j71BjUy51covIlryQPTy9ERa+zraeF3fW0GvW4AAAGI7/NoJAAABAMA SDBGAiEA8e6Fl7rqhzJceM0/teiR3ED9UjCLYvofmN4ZmZnt/4sCIQCHu/2Q7/za SEt9ghS55Deme7HuTPEGE8F69EXBggDPkQB1ALNzdwfhhFD4Y4bWBancEQlKeS2x ZwwLh9zwAw55NqWaAAABiO/zaEIAAAQDAEYwRAIgSF8r+d0nACes9t/MwAPcWojm +B2DGQ1c8CM35LdTmOkCIGe2lHWu04Kdz29AZQWJjFO3ooB7MchLC8Hk040+IRTg AHYAejKMVNi3LbYg6jjgUh7phBZwMhOFTTvSK8E6V6NS61IAAAGI7/Nn1QAABAMA RzBFAiEArlqfV9A7/xz9rKs7EkQc2mt80ygu7pEnGNaHsZcSXp4CIH0Oc5Wuw9t2 Xc4se44xu4bTeZlcp+LIoif4fKMYjpdIMA0GCSqGSIb3DQEBCwUAA4ICAQAhlaVa RgBRMZ1lRqsoJE+9s7z+N7g4kvHrjLLqeZt5kQiRMnAC6xghK/mdj3NmRyly1uIW 9uhtLbDToY3A/Hlvy1Jtchq61u5GD55GcPy8WNRipbz6RLt6AA9Sgx/ozzHXmNfW aOrcx7ETXtN2xHZ/PHGeJ41NhZ1TIvuL1/Y6JhO4XFB61BVfq5K6X48kcL0cLa5G cEAbZsWdrfYZn5MzKlsnCYnTyOwf8mSfUOjLeWbCd0JaTzPsiHfReTvE2PCWktxM Ih849VRZwBBJ+YZbCcPMOnsONixxU5FSDy474AnI+Z0prg20iffWlH84YAiZiAWB pFcVesMRSbDIUhsF3TopUJr8ancfn880M/XKLtJM7HszV5PEOs5fW8qNYH6ja7js 8mNpkw6lMA56f8piYMwDB6WgNcCq+ah57TRWfh7m0+gwrK81Fs/KRBfd+8umTZAS vnxNzx1lY2HAyIyeZBieMnm+TdZ5BLkdXSlC4Ky+kqEIMaNgooAmHS/Rlx59jzpD oB6FUwwNaeYkroN6Bjx4H1wqw2QOYw9pq8se5T64KiquZS/VdZ15ekfQOneA8RX/ i91NWM5xMpr7tvyoXGj2KXBLbBuFHCqFnaA5Dy8eHXYYJmhm32d5YIVicNMkIEib t0BwoKL723NzFCv8JlV2tWm+hXel4HvNCaH8jA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfREMwDa55gq4glRpNCn ZE5EIJbK8PieuySdtcflmXE+ejW4WK38N1LE0b4snQqdkvxe2j7yigMTEYoVCoQJ +fbxcVhzDiywir59/V5OBHo8UWqjdy/Zr9tzOmBhq1S05ZFx99Gof0WLIj5Qa6Ba MscN7hVCEGkfXIXVHFmvJNJlrnPDDGXRX+b+L1MWgtHwAGe64RN83sVfgKsunhfH OZZPF/sF2iZE1zgQcF8eFnU4B10IdBGwPttKI3Xb4ni0keniyy/kbEGiV+iHiDRw yHag8eObS7/XDPqGCP4OrOWBfgMvEwz2NVC6E587BjrOyq24j+Ugb+4Sw02ugBZr iQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 11522691442319555309310346667268645437 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-25 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-25 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'webservices.davilex.nl' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25999304770801142613150741295198184202894658185966174533824878228189969332467603659898581487023057223994768546351806577010335763236082391771196347447175928210485540419924051965649520817422021942714791134249816659878446489184734394474277098289527040729498827541285103574524277750693140833759101464987628728105870958077275242858343141967382019132158449579316416638786416973334226581795359865623818717690986410857265992298832424617670858791735004244651371434596892222467454183036611559966626625260328526247921246498181393222943873828924765790872756849604656414596727052688379882320068729590939641256196653811683592399753 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c07b72ca78803f487d963ee837fa8dd04552500 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webservices.davilex.nl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (4096 bits) 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