digital.wings.barclays

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 4e:ed:f1:b2:11:7a:c2:e1:00:00:00:00:54:d0:e9:70 was issued on by Entrust, Inc..

With 14 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: Digital Banking
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 4e:ed:f1:b2:11:7a:c2:e1:00:00:00:00:54:d0:e9:70
Serial Number (int): 104915260195433254232653885495154108784
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 5b:8b:10:2c:f4:3e:ed:4a:75:2b:f0:a6:e7:70:d1:9b:35:35:1d:f6
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 37:d6:52:bc:cf:1c:a3:fb:74:80:3e:f3:f1:bc:30:38:29:53:10:df
Fingerprint (sha256): 77:71:70:53:ce:95:50:35:ad:1e:ef:7c:16:e9:4c:a1:34:71:80:ef:18:64:b4:1c:19:7a:94:54:b5:ca:94:d3

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate digital.wings.barclays

14

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for digital.wings.barclays

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

digital.wings.barclays
digital.wings.uk.barclays
assets.digital.wings.uk.barclays
admin.digital.wings.uk.barclays
mi.digital.wings.uk.barclays
cms.digital.wings.uk.barclays
maintenance.digital.wings.uk.barclays
digitaldrivinglicence.barclays.co.uk
assets.digitaldrivinglicence.barclays.co.uk
admin.digitaldrivinglicence.barclays.co.uk
mi.digitaldrivinglicence.barclays.co.uk
www.digitaldrivinglicence.barclays.com
www.digitaldrivinglicence.com
www.digitaldrivinglicence.barclays.co.uk

Other certificates including the domain name wings.barclays

(limited to 100 certificates)
financial.wings.barclays
digital.wings.barclays
digital.wings.barclays
community.wings.barclays
community.wings.barclays
financial.wings.barclays
community.wings.barclays
community.wings.barclays
financial.wings.barclays
digital.wings.barclays
digital.wings.barclays
digital.wings.barclays
financial.wings.barclays
digital.wings.barclays
community.wings.barclays
digital.wings.barclays
community.wings.barclays
financial.wings.barclays

Certificate

The complete raw certificate details for digital.wings.barclays in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneXoPl2KDWSf4AlsZ2F/
HidwfJVam8urdXGCDnLdBTB9l+xmlhWQdmBiFx8h9nywuj0MOo7PTCzFHnpmEco1
iH6++hC9z2b4wJChcAm/ZI7RRdSBqNt1SJA/BP3gWSAy3iBWJatloJJvIE9z1io1
y0v41Tb1Q2ssZsO5/IlOJRPu7OruIKU955HkP7WbinekSXLYI7b011DbX5qXDhva
nmeZck1UGyE6XGpBeEmVa4ohxP6d+sUkPuCUPhemj/zw5jtsJQZVpWooMLkyLc7S
Nk7Fsp+RGLnA1KaFhcKTsZO0AdEwq3/YCjK7njuGLhTY7D7xsMLckwI5e2g2ZkGe
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 104915260195433254232653885495154108784
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-13 15:53:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-13 16:23:30 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Banking'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'digital.wings.barclays'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 19932785346202594849951907923438259617162091976853125972489745443781502901090535173430036370161659644407457615076546188307046240901900017150388107121127118132996523580661855445708769509719334037551429639053639308237728745296105746793519531064660417373951145150138241047648838747706074873451046570923399362047434051303505028562725069609370212795166903789541343361993001062375801898284338673630760407068150087169576200046336022803069363270472973511418144737092765749366755072360938971939977688533178007660712453621402666041550659753506711203128567524528286384508232425768642311582850166358527621543362865422809830628949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (503 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.wings.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'maintenance.digital.wings.uk.barclays'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'digitaldrivinglicence.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'assets.digitaldrivinglicence.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.digitaldrivinglicence.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mi.digitaldrivinglicence.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldrivinglicence.barclays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldrivinglicence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.digitaldrivinglicence.barclays.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (489 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b8b102cf43eed4a752bf0a6e770d19b35351df6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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