na.flpservices.com

Issued by Entrust Certification Authority - L1K

About this certificate


This digital certificate with serial number 4e:7e:0c:56:00:00:00:00:50:d5:9c:f2 was issued on by Entrust, Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Forever Living Products International, LLC

Organization: Forever Living Products International, LLC
State / Province: Arizona
Locality: Scottsdale
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
State / Province: Arizona
Locality: Scottsdale
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 4e:7e:0c:56:00:00:00:00:50:d5:9c:f2
Serial Number (int): 24292213674154143412666080498
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 40:eb:e8:01:53:49:ce:ac:8d:6a:60:41:dd:e2:d5:88:6a:96:3c:83
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f8:75:cf:64:ff:60:b3:cf:69:83:bd:be:47:98:59:ce:23:9b:4f:30
Fingerprint (sha256): 3c:2d:08:e0:dc:f0:10:41:f2:e5:12:9c:fb:0d:0b:af:a4:97:33:95:4c:0e:ea:29:a3:5c:d2:b7:53:b5:39:07

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for the current certificate on na.flpservices.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

na.flpservices.com
www.flp360cms.flpservices.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGbzCCBVegAwIBAgIMTn4MVgAAAABQ1ZzyMA0GCSqGSIb3DQEBCwUAMIG6MQsw CQYDVQQGEwJVUzEWMBQGA1UEChMNRW50cnVzdCwgSW5jLjEoMCYGA1UECxMfU2Vl IHd3dy5lbnRydXN0Lm5ldC9sZWdhbC10ZXJtczE5MDcGA1UECxMwKGMpIDIwMTIg RW50cnVzdCwgSW5jLiAtIGZvciBhdXRob3JpemVkIHVzZSBvbmx5MS4wLAYDVQQD EyVFbnRydXN0IENlcnRpZmljYXRpb24gQXV0aG9yaXR5IC0gTDFLMB4XDTE1MTAw NzE5NDI1NVoXDTE3MTAxMDIwMTI1NFowgYYxCzAJBgNVBAYTAlVTMRAwDgYDVQQI EwdBcml6b25hMRMwEQYDVQQHEwpTY290dHNkYWxlMTMwMQYDVQQKEypGb3JldmVy IExpdmluZyBQcm9kdWN0cyBJbnRlcm5hdGlvbmFsLCBMTEMxGzAZBgNVBAMTEm5h LmZscHNlcnZpY2VzLmNvbTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIB AO4Ir0803haRDj8VsgVh7isTvNMeCzn6UXy6jlkmnX2spcba+boRtZMcPd5TwrwU DKDkazrRgOM01NiDOf8/49hgcHR/cv2gVJXWGjRsUdmfXhhqei4HwHLOzHw88J95 bg3hWP8K5JJgB0QZEtSNy8d5XsS27nQKmveaq4gYNy4KOJJrjp90UhO5RLm9lWFv 8k+0OvHK6Q+nktUnKg2gEJmITHEUPm1vb4/35sYf/5LjMbynSv5P3/X1IK9hU1qq 9qjShMeWUDNv8kXo/BedlSspY8R7ZCZY2ShmaDhxPPxgGzP/IKjSFLOSYCOkExCM IFH9mlW97SuRjTPzZxrUGiv/+GsA0d3wAWvxSgawifsc7wivjJ0Wob8S2Ig6X4Jz dWDPu0IpZutPXwT3HAiG9mIZjlN3RyYq5tucT6MZL7Nwvmm3GdEM37pLs5VHETTJ psRCJpIwAMB1IiHhyo8gbxPRCjiQ9J5fGq5MpJgsBANeGM7sV/AAUUPsLNrESnuf qsdiRJUflyWqx58+cKa10WDTDxvV6ylMem6eGJiGS7VOpm4TYSQXeGK1PlXl0aKP RjLCKo+Lh9E3HsDkv4sDZ14zqKJaSCQcXmRZyPtEMJEykWkChuWm0vz8VcYPRHUJ kHl1nS9WksMHJlhVaRDdAo2JgCrCJyABwah1P20yIkiPAgMBAAGjggGlMIIBoTAL BgNVHQ8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDMGA1Ud HwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVzdC5uZXQvbGV2ZWwxay5jcmww SwYDVR0gBEQwQjA2BgpghkgBhvpsCgEFMCgwJgYIKwYBBQUHAgEWGmh0dHA6Ly93 d3cuZW50cnVzdC5uZXQvcnBhMAgGBmeBDAECAjBoBggrBgEFBQcBAQRcMFowIwYI KwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUFBzAChido dHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwPAYDVR0RBDUw M4ISbmEuZmxwc2VydmljZXMuY29tgh13d3cuZmxwMzYwY21zLmZscHNlcnZpY2Vz LmNvbTAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzAdBgNVHQ4EFgQU QOvoAVNJzqyNamBB3eLViGqWPIMwCQYDVR0TBAIwADANBgkqhkiG9w0BAQsFAAOC AQEAqCzzI5sOjTFwe8QJtL1Pob+D4dZIUGigREqTJHAqPb3WOo74boxlUbef8CfZ vECCT0RzsDP4oGUlv3RqNbjD2BJ4W6cyBZDxeMgz+wzUm1ifQ+fJco5d5ewwemM1 OUtWZyc9P7gtI69Z++xPEthE1dqQ7AJ/94NKUEyxFj9Zneacc8GyBEge3/sSAwrR edFUuCCAWLmTuNChf8qODId+WioweXZedmF6c7YmUYHIj9r+fnQArOJIa01UbN9Z Sa6fxBi9TRnJPnekVSHluebxSNymo12EIDw7J3JelW7F6a4JHZjIJyBy8wQWYs84 G8CTglt8CsSqbNcNOZd9Vf22sA== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA7givTzTeFpEOPxWyBWHu KxO80x4LOfpRfLqOWSadfaylxtr5uhG1kxw93lPCvBQMoORrOtGA4zTU2IM5/z/j 2GBwdH9y/aBUldYaNGxR2Z9eGGp6LgfAcs7MfDzwn3luDeFY/wrkkmAHRBkS1I3L x3lexLbudAqa95qriBg3Lgo4kmuOn3RSE7lEub2VYW/yT7Q68crpD6eS1ScqDaAQ mYhMcRQ+bW9vj/fmxh//kuMxvKdK/k/f9fUgr2FTWqr2qNKEx5ZQM2/yRej8F52V KyljxHtkJljZKGZoOHE8/GAbM/8gqNIUs5JgI6QTEIwgUf2aVb3tK5GNM/NnGtQa K//4awDR3fABa/FKBrCJ+xzvCK+MnRahvxLYiDpfgnN1YM+7Qilm609fBPccCIb2 YhmOU3dHJirm25xPoxkvs3C+abcZ0QzfukuzlUcRNMmmxEImkjAAwHUiIeHKjyBv E9EKOJD0nl8arkykmCwEA14YzuxX8ABRQ+ws2sRKe5+qx2JElR+XJarHnz5wprXR YNMPG9XrKUx6bp4YmIZLtU6mbhNhJBd4YrU+VeXRoo9GMsIqj4uH0TcewOS/iwNn XjOoolpIJBxeZFnI+0QwkTKRaQKG5abS/PxVxg9EdQmQeXWdL1aSwwcmWFVpEN0C jYmAKsInIAHBqHU/bTIiSI8CAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 24292213674154143412666080498 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-07 19:42:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 20:12:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Scottsdale' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Forever Living Products International, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'na.flpservices.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 971093690151175732191368591820114728302376911741065118689114172285992532612368989435640167721489556969247057186015942761536610410101776491223359723575210408569778509397787795958927224231600763919862703764617027194456890295865422886905412319586381355945226214571297098372972790103464681366800234653601730136933816346329806732660721043524576798236713242457030475263811482564961840973697327461340685358950371279216317310762173154279213992377338805529238120330500449443728555858881191483726050636431273964747981201961814734984573737501672096826033646166749475582519239965172521039036141230264602068363593785006180333017172028788522890964513094953696825636735176539645330367824279659950785934748821128139546277757119874340789631489962426029976639089694465539678126882646305880298558262752009769199154003426953264720733513819413231620350300299228272988400644237268404349187864173580168790604202083157410218408206386256182411265285366728776318506225400968175899932292593150143821197004039770468961841128059946925637858390170379961173413173572766593078152096740649427751283866284995541000307608465489723790045725894087575422994596441271561460275035304782202332039519736550684035096209961401431569782020141915683244777425624521461209522915471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'na.flpservices.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flp360cms.flpservices.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 40ebe8015349ceac8d6a6041dde2d5886a963c83 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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