nbcsportsgrouphuddle.com

Issued by Entrust Certification Authority - L1K

About this certificate


This digital certificate with serial number 50:d3:9a:42 was issued on by Entrust, Inc. .

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

NBCUniversal, LLC

Organization: NBCUniversal, LLC
State / Province: New York
Locality: New York
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
State / Province: New York
Locality: New York
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 50:d3:9a:42
Serial Number (int): 1356044866
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 6e:09:6e:a8:5e:b7:f8:5e:d0:b8:03:d0:8b:5d:19:1c:d6:14:5b:04
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 3d:ec:ec:bc:75:c6:16:37:99:f6:19:b8:2e:cd:d7:65:fa:1a:9a:3a
Fingerprint (sha256): 47:b5:53:dd:34:6b:1c:3b:d4:30:fd:87:ff:67:86:1c:e8:cf:15:25:d7:2c:1d:1c:f3:e3:67:d6:33:fd:9e:a4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for the current certificate on nbcsportsgrouphuddle.com
2
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

nbcsportsgrouphuddle.com
www.nbcsportsgrouphuddle.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGVzCCBT+gAwIBAgIEUNOaQjANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTAzMTkxMjA2NDVa Fw0xNzAzMjAwMjAxMTNaMHIxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhOZXcgWW9y azERMA8GA1UEBxMITmV3IFlvcmsxGjAYBgNVBAoTEU5CQ1VuaXZlcnNhbCwgTExD MSEwHwYDVQQDExhuYmNzcG9ydHNncm91cGh1ZGRsZS5jb20wggIiMA0GCSqGSIb3 DQEBAQUAA4ICDwAwggIKAoICAQDJulZzKhxDxROhq7w+Vw8s9rK0oXC6/Bc0X/Tm 7onasioHHQylRYVd/VLnRFXY6RWYuqhUcRg4pnw8TTB4VFOlrxOhW9fajGt83l9z i2T6HdHT36KuR801zBVzEoCAnBmmILOTPsf/NY18C1NZxCJSg4di/I43TNWmmYnM J+PfScAC+kf1TySuBmNbGimhL5b0OsCLQCAjJX709sZYRziOWg33vAXwwruNGn9+ o12hG8dXqwYjnOHkIIfS/WogoRBlVmvPuvApG7tF/6HlgWY9MzaM8tNkfIZAplm0 QlKHjndBG8qoVQ+1AbNsgM/zHDi6KMikxxGO/eWQBlkl8D8lPAE50R3zJ9a5qv7C hr3WGD3MIrUPfllTEZ5+p0haXHeTJt5BENsvIUjAYTFv0FHtVgWHlCGybdUMKLnk 3c9aMr6n56zrd4l/DqUiyBkStNrkawgxVKJ4fWxqBMIyKDLCuJCnZ1rqOJs10D7G zK2/Xp+QgsYfySGe3NJ7cxWl4qgY3f9AChR+CaIxyUUOYfae1a8Gpru790fTPc1A dxXQXOH1Xvv2mNTTdMExFzbTZZEf9uDS/ui13gf+LBYsWRaH4A4/aGoD84WJk0/Z kZfxpZbfEwkC3GDt6pTtgi3vs9ZKoPm568oinqllgwoqcYxYStTSlz7D3RCUGT5i 5SIPpwIDAQABo4IBqjCCAaYwCwYDVR0PBAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1 c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYG CCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIw aAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0 Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hh aW4yNTYuY2VyMEEGA1UdEQQ6MDiCGG5iY3Nwb3J0c2dyb3VwaHVkZGxlLmNvbYIc d3d3Lm5iY3Nwb3J0c2dyb3VwaHVkZGxlLmNvbTAfBgNVHSMEGDAWgBSConB03bxT P8971PfNf6dgxgpMvzAdBgNVHQ4EFgQUbgluqF63+F7QuAPQi10ZHNYUWwQwCQYD VR0TBAIwADANBgkqhkiG9w0BAQsFAAOCAQEAJziV8zue32GgEMs8k59q7VSahfS2 FrBtjoUFHMTDTTbghu45to6rCB2mzq35QXWuF0HFD9EDuOjvFtbDTiQaqndATAQ+ GoLOd4LQ1ECP0xQ0E7FYRcIEW2IlwiUlYCpKFFEH60rtNeo7o4gILAvWAFpR8tDz JcndA2xiFKPmhR++9e89ulw/VNi6LbuGEs4l9A3NJLLbsaU48aEzcQl68ZHcracs nGcrqKMoVBNDpbeA/n6MofurmJtYgaj9UwaB2tfK0W1JRQVqN1ChI7Uw29tINYHd mGD8jLyelkZyPHHeQhA6EoqJnmEHx7zJA0Act7HZbomQyZ6zMw7JqbzJWg== -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAybpWcyocQ8UToau8PlcP LPaytKFwuvwXNF/05u6J2rIqBx0MpUWFXf1S50RV2OkVmLqoVHEYOKZ8PE0weFRT pa8ToVvX2oxrfN5fc4tk+h3R09+irkfNNcwVcxKAgJwZpiCzkz7H/zWNfAtTWcQi UoOHYvyON0zVppmJzCfj30nAAvpH9U8krgZjWxopoS+W9DrAi0AgIyV+9PbGWEc4 jloN97wF8MK7jRp/fqNdoRvHV6sGI5zh5CCH0v1qIKEQZVZrz7rwKRu7Rf+h5YFm PTM2jPLTZHyGQKZZtEJSh453QRvKqFUPtQGzbIDP8xw4uijIpMcRjv3lkAZZJfA/ JTwBOdEd8yfWuar+woa91hg9zCK1D35ZUxGefqdIWlx3kybeQRDbLyFIwGExb9BR 7VYFh5Qhsm3VDCi55N3PWjK+p+es63eJfw6lIsgZErTa5GsIMVSieH1sagTCMigy wriQp2da6jibNdA+xsytv16fkILGH8khntzSe3MVpeKoGN3/QAoUfgmiMclFDmH2 ntWvBqa7u/dH0z3NQHcV0Fzh9V779pjU03TBMRc202WRH/bg0v7otd4H/iwWLFkW h+AOP2hqA/OFiZNP2ZGX8aWW3xMJAtxg7eqU7YIt77PWSqD5uevKIp6pZYMKKnGM WErU0pc+w90QlBk+YuUiD6cCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1356044866 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-03-19 12:06:45 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-20 02:01:13 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBCUniversal, LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nbcsportsgrouphuddle.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 822977955606107653247103656633123994484046503242913191701017221388177208378516475893263029016163163876321159162306833190961291300956653616411791786218653674256187163455889086131339620700849026484551226071344155912352000766289184961065162189019594330781083722206549997855534131538290698548900396024552778403847536574986416334013557008014362256595199611344241073353774755905856523797711796204553368184755956370338631254727554835307555839919559417881114261628377681513637140771741693156204156889701693234773158069049690594917559343508260725158261194307921228761075217206974913442849374316394496540424818808163516894790960969425355237208924403506121506771778001191406431570539223118164942295420258115508104332188513176787366307568887501054791537650395752234297308420804827473675631069225854569590970115249320067869822721614419859073727755019362921005310793741572432939128144187189979172052606993183146506362589161839642091332937522831019145414867119097650178407915422680403325015664226048715610913381088505400860815341160989445083207006468538983434958589997366099776948418465164227428562255499485660379008962409945075987053452025891752410396528310590597209880509804309492209640601379843923677370071822042402370204806074158962690209484711 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nbcsportsgrouphuddle.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nbcsportsgrouphuddle.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 6e096ea85eb7f85ed0b803d08b5d191cd6145b04 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00273895f33b9edf61a010cb3c939f6aed549a85f4b616b06d8e85051cc4c34d36e086ee39b68eab081da6ceadf94175ae1741c50fd103b8e8ef16d6c34e241aaa77404c043e1a82ce7782d0d4408fd3143413b15845c2045b6225c22525602a4a145107eb4aed35ea3ba388082c0bd6005a51f2d0f325c9dd036c6214a3e6851fbef5ef3dba5c3f54d8ba2dbb8612ce25f40dcd24b2dbb1a538f1a13371097af191dcada72c9c672ba8a328541343a5b780fe7e8ca1fbab989b5881a8fd530681dad7cad16d4945056a3750a123b530dbdb483581dd9860fc8cbc9e9646723c71de42103a128a899e6107c7bcc903401cb7b1d96e8990c99eb3330ec9a9bcc95a