www.ustar.labor.mo.gov

Issued by Entrust Certification Authority - L1K

About this certificate


This digital certificate with serial number 50:d5:10:4b was issued on by Entrust, Inc. .

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

State of Missouri, Office of Administration

Organization: State of Missouri, Office of Administration
Organization unit: Office of Administration
State / Province: Missouri
Locality: Jefferson City
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
State / Province: Missouri
Locality: Jefferson City
Country: US

Time untill certificate expires

This certificate will expire on

Certificate Details

Serial Number (hex): 50:d5:10:4b
Serial Number (int): 1356140619
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 2c:10:9c:83:7a:c8:a6:53:93:3b:ac:58:f1:c4:a3:19:5a:f0:73:41
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 37:40:fb:ad:9b:ed:03:69:dc:9c:7c:d7:91:3b:71:9b:fc:cb:4a:6c
Fingerprint (sha256): 69:64:20:24:1d:1a:62:35:9b:1f:35:03:46:04:05:48:dc:90:61:12:de:fe:2b:ba:ca:0f:99:24:cf:2c:ae:a8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for the current certificate on www.ustar.labor.mo.gov
1
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any other subject alternative names besides the common name of the subject: www.ustar.labor.mo.gov

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGeTCCBWGgAwIBAgIEUNUQSzANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTA4MTgyMDA2MjVa Fw0xODA4MTkxNDE2NDNaMIGzMQswCQYDVQQGEwJVUzERMA8GA1UECBMITWlzc291 cmkxFzAVBgNVBAcTDkplZmZlcnNvbiBDaXR5MTQwMgYDVQQKEytTdGF0ZSBvZiBN aXNzb3VyaSwgT2ZmaWNlIG9mIEFkbWluaXN0cmF0aW9uMSEwHwYDVQQLExhPZmZp Y2Ugb2YgQWRtaW5pc3RyYXRpb24xHzAdBgNVBAMTFnd3dy51c3Rhci5sYWJvci5t by5nb3YwggIiMA0GCSqGSIb3DQEBAQUAA4ICDwAwggIKAoICAQDZLfsN/H+Xv+Ff /rEWhNKjK260Ble+8khQWyUIBz9NAfCnxMKkfJ+VNHvjooT5/yZ47w7QSzlM9Qww 8S9bLTbjIvunHvSWr4A2HrosNVP7/vouCB8yxH3SMNL9pjWLmXvLaCK8q2mUzrt4 XS7Eem03WuFSkRXJDIyO/7De4A4iLVH8UFtqHegDl5hNH32DH6wxTAXLkhKsFIgG IgbpznFlPCp/jHFNU5rE3k4yea8n0jA0fkl9FalxblizrNsZgmKW6CQQon/IX6Cx EylzNq+ZB3jOueIM6kvH++ecXQNR+YjfiaQhGduncZiBblB026lcewVUPVdnUx6+ jE3slZCqu7PXcFSqoFVYmGaMmZ/j1uw9oR9CXOJqA93sB8maynkzfykQtimxBrHF 9wp1OZ46ETZgtRDA1UaUf0PHB5PxxcnCuDoptWMkuBEe874vvZmg9lvtzNhfbnb0 LRmec5nu/UlOBDAmQu5jhVXRAnaqvtVazDlT5H572GBU3RWktKS4qgdK73s4s4cH wVLAFydS7GrFrS+hbaQdbJ2lYpjtDMCMVK2Xc/oKN8xQqFkunxJTZYslMgOAwAka BZnPWr/xqmS4A2vDLrXvfcyrgWIh1pFgSM7F4P1d+c39Klny6QfUm1XfHrJJIxb0 ijbt9Ov8hC2PWBChup//go+NEYHUeQIDAQABo4IBijCCAYYwCwYDVR0PBAQDAgWg MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8ELDAqMCigJqAk hiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsGA1UdIAREMEIw NgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3LmVudHJ1c3Qu bmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdo dHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5l bnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMCEGA1UdEQQaMBiCFnd3dy51c3Rh ci5sYWJvci5tby5nb3YwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8w HQYDVR0OBBYEFCwQnIN6yKZTkzusWPHEoxla8HNBMAkGA1UdEwQCMAAwDQYJKoZI hvcNAQELBQADggEBAAC7G1q6DvV1Ji4pAhBBFGb550Cy3cYQNtW+YShoD7nqZbpv XMRxW2deeDyGvABSn/KE70eCUGOG51M74KA6opZBu0MPrHEWbjtIL6RRFiFPykS5 2Dfarb8ClZkT9Rta8d5hXYdhUX4VKonAd1ICOSiOQltZhWMBtlnAQJb7PqIOguYG 6gcMAQpG/NvlBcA500BDGkn1Qv2nEs2Ebokjfz3M2R5Y0CZntGwtjNt4in+66U2M yb7fyNH7IL/NaN7LHMqvVqz+GJbDCzwOeXLNOJXnzzQtHiIApuAmcyG0oJdF5yqc LrZUpsds+WnnNzQdDOvLyGHSpMTecVNyc/apo14= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA2S37Dfx/l7/hX/6xFoTS oytutAZXvvJIUFslCAc/TQHwp8TCpHyflTR746KE+f8meO8O0Es5TPUMMPEvWy02 4yL7px70lq+ANh66LDVT+/76LggfMsR90jDS/aY1i5l7y2givKtplM67eF0uxHpt N1rhUpEVyQyMjv+w3uAOIi1R/FBbah3oA5eYTR99gx+sMUwFy5ISrBSIBiIG6c5x ZTwqf4xxTVOaxN5OMnmvJ9IwNH5JfRWpcW5Ys6zbGYJilugkEKJ/yF+gsRMpczav mQd4zrniDOpLx/vnnF0DUfmI34mkIRnbp3GYgW5QdNupXHsFVD1XZ1MevoxN7JWQ qruz13BUqqBVWJhmjJmf49bsPaEfQlziagPd7AfJmsp5M38pELYpsQaxxfcKdTme OhE2YLUQwNVGlH9DxweT8cXJwrg6KbVjJLgRHvO+L72ZoPZb7czYX2529C0ZnnOZ 7v1JTgQwJkLuY4VV0QJ2qr7VWsw5U+R+e9hgVN0VpLSkuKoHSu97OLOHB8FSwBcn Uuxqxa0voW2kHWydpWKY7QzAjFStl3P6CjfMUKhZLp8SU2WLJTIDgMAJGgWZz1q/ 8apkuANrwy61733Mq4FiIdaRYEjOxeD9XfnN/SpZ8ukH1JtV3x6ySSMW9Io27fTr /IQtj1gQobqf/4KPjRGB1HkCAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1356140619 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-18 20:06:25 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-19 14:16:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Missouri' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jefferson City' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Missouri, Office of Administration' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Administration' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ustar.labor.mo.gov' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 886015515952692755329580963527609666917986682045629806186759482116596121568542496888826733993007263129231411151122989925962751047131396806232033790157785823545318604386771031408186153132367855791760324321325882097343074937112183121701577090357034974636670359231406764133812449886543727419112702097185528093871994807506250709058846650362337004005392068109521759851888273566317858856999792525249895146341747595739546077078676028506441853463931506320253713762699329659210819944214748180903243242201195127268525139983454633692225539566164619727339676619400646333117094659493614769799699070258283092120967183283295523363326625275926300457852023194186276971843830101006742129926508537692404734159444801980619634333490662524056476333851888366226371307234294586598337122143792110959903771197548192465924151893122330047822917405108731795304853310937972858170744662117456790812080292080854006572227739836125548444838052815052172547979354821244367546067115909984291297642713931499955108885941084685246786291090655287654756316000219937128131531018356612994502646800151201162266949055187138007880133273532361926230720040123027644735477997076676593230527405218679132052766240681895863991807775907364167483699499228475407358591114365429693871674489 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ustar.labor.mo.gov' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 2c109c837ac8a653933bac58f1c4a3195af07341 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 0000bb1b5aba0ef575262e290210411466f9e740b2ddc61036d5be6128680fb9ea65ba6f5cc4715b675e783c86bc00529ff284ef4782506386e7533be0a03aa29641bb430fac71166e3b482fa45116214fca44b9d837daadbf02959913f51b5af1de615d8761517e152a89c077520239288e425b59856301b659c04096fb3ea20e82e606ea070c010a46fcdbe505c039d340431a49f542fda712cd846e89237f3dccd91e58d02667b46c2d8cdb788a7fbae94d8cc9bedfc8d1fb20bfcd68decb1ccaaf56acfe1896c30b3c0e7972cd3895e7cf342d1e2200a6e0267321b4a09745e72a9c2eb654a6c76cf969e737341d0cebcbc861d2a4c4de71537273f6a9a35e