fp-francotyp.at

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:0b:6d:b1:0e:95:37:d1:4a:05:d5:1f:c8:27:b9:14 was issued on by Amazon.

With 55 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=fp-francotyp.at

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:0b:6d:b1:0e:95:37:d1:4a:05:d5:1f:c8:27:b9:14
Serial Number (int): 13351620033837788565297253981224417556
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 82:ec:6a:ce:2c:d0:68:63:cf:0a:a6:ce:b3:78:35:ec:e8:3e:c1:32
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 7c:a8:eb:a7:ea:f8:ed:6a:03:23:79:4a:5c:c4:71:0e:7f:b2:8e:01
Fingerprint (sha256): 7a:60:d5:6e:bc:15:b9:11:1a:57:30:b8:70:ef:62:20:92:fc:6c:af:08:7b:bc:ce:0b:24:6b:42:91:04:92:86

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate fp-francotyp.at

55

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fp-francotyp.at

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fp-francotyp.at
francotyp-postalia.de
fp-d2i.com
*.inovolabs.com
*.fp-d2i.com
fp-sign.de
fp-sign.co.uk
*.fp-francotyp.at
*.fp-sign.se
freesort.de
fp-francotyp.fr
*.infopark.io
inovolabs.com
*.fp-sign.fr
internet-access.de
*.fp-sign.be
fp-secureiot.com
*.fp-compact.com
fp-sign.us
*.fp-sign.nl
*.fp-enguard.com
*.francotyp.be
fp-enguard.com
*.fp-otguard.com
*.fp-sign.co.uk
*.francotyp-postalia.de
fp-compact.com
francotyp.de
*.fp-sign.at
fp-sign.it
fp-secureconnect.com
*.fp-sign.it
fp-sign.at
mentana-claimsoft.de
*.internet-access.de
*.freesort.de
fp-sign.nl
*.fp-sign.us
fp-francotyp.com
fp-sign.be
fp-sign.fr
fp-otguard.com
fp-sign.se
*.fp-ruys.nl
*.fp-francotyp.com
*.fp-secureiot.com
*.francotyp.de
*.fp-sign.de
*.fp-secureconnect.com
*.fp-francotyp.fr
fp-dam.com
*.mentana-claimsoft.de
*.fp-dam.com
fp-ruys.nl
francotyp.be

Other certificates including the domain name fp-francotyp.at

(limited to 100 certificates)

Certificate

The complete raw certificate details for fp-francotyp.at in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7VwgdrFDtCb8XWOWGcjQ
S9k8fq8TRrx82ZNQ3yHOSueWJWTa0nNYvIT47V26FHX4uzjpPDyUVcYyeG3uEOnq
fdV0IM2asPV9HvXixQ3bR7bT/nqxLITiGkWrB2I6YR+4OJ730uL31LGPBl6cspDL
Ht/JAgkrGRrYihQkU0ovyOlio8m+XrK/ZMRtwphcgAO3wMa4ksrrd0w9sWEiAB0z
2a8glLFJghwON8wq+4FLwOfbH4iLEMHbRhmUC9RE5tiU3WnPq5FwE0mjEDb7zwbw
SPVZFqJhAeLXULrzn9Af7DNYZ/IWMg5pDjJLW6hrj2Gx7jrmjtZ5dOM0MNwTYwkE
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13351620033837788565297253981224417556
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-06 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fp-francotyp.at'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29963907700688540878452238525683662942409358249789723626798983223046950474100483343022039905353931424735564687646804359422551332627596024556085429085067758017238313143593694170573964107128014930820842286941808446026868516009094079597034568728649826018416076919262563716651731725531680226058394255816139457570753230774404479254056924629649501125435376256583554813015799801493832680059744047570200796281655771063723425284268006547802356781015638928771255335469710607309314572324814325315961358887205012002279201503130078117080383797037897038444820276949475615244886227186192727843019926279739455033531382342639552103597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							82ec6ace2cd06863cf0aa6ceb37835ece83ec132
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (889 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francotyp-postalia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-d2i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.inovolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-d2i.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'freesort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.infopark.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'inovolabs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'internet-access.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-secureiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-compact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-enguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francotyp.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-enguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-otguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francotyp-postalia.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-compact.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francotyp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-secureconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.at'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mentana-claimsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.internet-access.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.freesort.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-francotyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.be'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-otguard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-sign.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-ruys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-secureiot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.francotyp.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-sign.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-secureconnect.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-francotyp.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-dam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mentana-claimsoft.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fp-dam.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fp-ruys.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'francotyp.be'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		008b9ac1c2455466dbe08b66235dffb2ebc6661109f9bb4481eaf1a07d675df7b9df1ca6ad59f79703bc5d8896f65cf86de76477d786664b84be1f44532558c33415b0afce31f03c72d6e939ad02b5820767e971637e0faecf41dbe021bd6a4102c2449ef7acd4da4da87c6401e0ac6d68d2ccf60f0e795523e08987e63594428038a56c17fa4ca109956e2041af480ae2d24574a025a9f03b87587de13bbe72c67c76215bbcf1437070312f265b6429914c620eff710fdf84c90665a4f631b1799d10005055409c1b5061a82343f6d42b477e916fe1e65fe5aed7775d9b564f415727d7fc616b196290b40199bc296df6cbacd6f0987d7ccc336c76e45744aa2c