club-moen.com

Issued by Entrust Certification Authority - L1K

About this certificate


This digital certificate with serial number 50:d5:7e:1a was issued on by Entrust, Inc. .

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. While the certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates.

Cerificate errors/warnings *beta

  • ERROR: KeyUsage extension SHOULD be marked as critical when present

Distributech Inc.

Organization: Distributech Inc.
State / Province: Ontario
Locality: Brantford
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
State / Province: Ontario
Locality: Brantford
Country: CA

Time since certificate expired

This certificate has expire since

Certificate Details

Serial Number (hex): 50:d5:7e:1a
Serial Number (int): 1356168730
Serial Number lenght: 31 bits, 4 octets

SubjectKeyId: 47:76:46:63:25:25:ef:83:58:d3:08:95:1e:47:f2:dc:67:26:75:2f
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 78:99:93:91:0b:c9:6a:cb:e5:7a:26:d5:8b:4b:2a:6e:28:2f:72:7b
Fingerprint (sha256): b8:8c:f1:e4:87:09:5c:9c:ff:64:22:ff:3e:52:98:20:bf:c9:92:00:dd:e5:02:bb:5a:66:64:d5:e5:60:35:c8

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for the current certificate on club-moen.com
4
DNS Names
0
Email Addresses
0
IP Addresses

Advanced Certificate Properties

Technical details about this certificate


Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA



Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions



CA Certificate

This is not a CA certificate

Subject Alternative Names

club-moen.com
www.club-moen.com
club-moen-elite.com
www.club-moen-elite.com

Certificate

The complete raw certificate details in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE----- MIIGZDCCBUygAwIBAgIEUNV+GjANBgkqhkiG9w0BAQsFADCBujELMAkGA1UEBhMC VVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsTH1NlZSB3d3cuZW50 cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAyMDEyIEVudHJ1c3Qs IEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwGA1UEAxMlRW50cnVz dCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0xNTA5MjgxNDIzNTBa Fw0xNjA0MTkxNzU1MzVaMGcxCzAJBgNVBAYTAkNBMRAwDgYDVQQIEwdPbnRhcmlv MRIwEAYDVQQHEwlCcmFudGZvcmQxGjAYBgNVBAoTEURpc3RyaWJ1dGVjaCBJbmMu MRYwFAYDVQQDEw1jbHViLW1vZW4uY29tMIICIjANBgkqhkiG9w0BAQEFAAOCAg8A MIICCgKCAgEAu5XdufBPTqrMJul4Iho8eoVFOP4LtdSwYzan54F83ywl/LtrXfBD 2l6vsx3CTCLNqQSDxZmvCOTaKq48YtkyxHV1tkIomwWxyKeTncC44bzt3xvnmuGQ twhVP8VrfvL2ug2SnD/jNsQFHvmi9xodaagJpEQmY0wiTHKkp9v1kCkv76bG71s3 Rt25+BxO5LVlK9Er8lk2i/iCefaWCrQ/TTuhp2RzJKK5ueDdtRAsAStv4iwUyEyq ngYrEFkRVHoL6effJaJ+vbywz7lmv1j3hSQGPC1vSX1R2+s1frIRvjjWH9CxRfeO BHcDB4/dHqv4uVaPQGyyJ46W1OqsTVxL6xSjaH8ui6f2mzZJEHOEMT9JAHhztlbV XTmwNUDefJPCYSMeyo+g/oKhL81KPgWQ6ULwM59lAXpiRcgrZrzrLWwdcWwc8T6e aqNweggooh8GKplR0z6R9XHyMYfblrADtxk/h0AQ0vfjh3rB3CEDlgRw3xKtYgBv +ARUsqpaLnhwtMQx1gWL25vRg8FFEm/YHyGw464KfhgX688Qmx4LStrtoCC35qBk VPlvYxgbgx1wIAZwyc8AnkFXCl9Moybnzl0UxCypAhSZ9FlAsCZrywHKtCVg00w6 TXoectbZLwUNB66TEaJYUjSzqhLZHXBlZeVAte5z6CQ70hwPVVcGlnECAwEAAaOC AcIwggG+MAsGA1UdDwQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUH AwIwMwYDVR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZl bDFrLmNybDBLBgNVHSAERDBCMDYGCmCGSAGG+mwKAQUwKDAmBggrBgEFBQcCARYa aHR0cDovL3d3dy5lbnRydXN0Lm5ldC9ycGEwCAYGZ4EMAQICMGgGCCsGAQUFBwEB BFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYB BQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjBZ BgNVHREEUjBQgg1jbHViLW1vZW4uY29tghF3d3cuY2x1Yi1tb2VuLmNvbYITY2x1 Yi1tb2VuLWVsaXRlLmNvbYIXd3d3LmNsdWItbW9lbi1lbGl0ZS5jb20wHwYDVR0j BBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYKTL8wHQYDVR0OBBYEFEd2RmMlJe+DWNMI lR5H8txnJnUvMAkGA1UdEwQCMAAwDQYJKoZIhvcNAQELBQADggEBACRiHt/GrUXX X7DfHIqfumlbhCHwUDewXu+KPWYqKf65UVJ2AcjXP4HvgpdqcJffaNGEdQ1SCr18 S2j3Hz1bqW0JrIX00MxqOb9+d49PRE2EF6TVdYOee1QNbE+xEJvjW7AzxBFliBtj PbzY0ZUsLmHQfe3wpbapKqZFJua0Vt5uDhGn8YWsHy3AvF13HRb9+eP6/BjwRUW0 lMS+JjQcG74A3rVBvR8y2AQJwT/arERAplck2v/TN3oaPWHVPCFF3k6xVlMuzwXI q8GJc6E7dxrrcmo3hNb9BXIs+eTHdUaPCAewLPJ8nlvtDYycYpWuSBQO5jSm5nMx eBEBrQUrW9M= -----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAu5XdufBPTqrMJul4Iho8 eoVFOP4LtdSwYzan54F83ywl/LtrXfBD2l6vsx3CTCLNqQSDxZmvCOTaKq48Ytky xHV1tkIomwWxyKeTncC44bzt3xvnmuGQtwhVP8VrfvL2ug2SnD/jNsQFHvmi9xod aagJpEQmY0wiTHKkp9v1kCkv76bG71s3Rt25+BxO5LVlK9Er8lk2i/iCefaWCrQ/ TTuhp2RzJKK5ueDdtRAsAStv4iwUyEyqngYrEFkRVHoL6effJaJ+vbywz7lmv1j3 hSQGPC1vSX1R2+s1frIRvjjWH9CxRfeOBHcDB4/dHqv4uVaPQGyyJ46W1OqsTVxL 6xSjaH8ui6f2mzZJEHOEMT9JAHhztlbVXTmwNUDefJPCYSMeyo+g/oKhL81KPgWQ 6ULwM59lAXpiRcgrZrzrLWwdcWwc8T6eaqNweggooh8GKplR0z6R9XHyMYfblrAD txk/h0AQ0vfjh3rB3CEDlgRw3xKtYgBv+ARUsqpaLnhwtMQx1gWL25vRg8FFEm/Y HyGw464KfhgX688Qmx4LStrtoCC35qBkVPlvYxgbgx1wIAZwyc8AnkFXCl9Moybn zl0UxCypAhSZ9FlAsCZrywHKtCVg00w6TXoectbZLwUNB66TEaJYUjSzqhLZHXBl ZeVAte5z6CQ70hwPVVcGlnECAwEAAQ== -----END PUBLIC KEY-----

ASN1 Decoded

[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1356168730 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-09-28 14:23:50 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-19 17:55:35 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ontario' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Brantford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Distributech Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'club-moen.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 765281723614802552896565777939335901481034380066959697210382377786917141864976762251971058629633864226857400411675972986011564294430677583744059849499553588762309534001537325882219845050695481388354512434186701033326713392275647613766888907703088834282384956515064542235746164547476988680399320990393892661968967179762807754173919462792984856308375583221107708688436599628796008565777989414797649404512880207153110470126675964252237552705920266333923173532142156527026557974409816543004700266036977705468106782136401928028929538899688854620280580062189368243936158039496549731238276450389517338982126428997202205569238696623542874056327279514541245823269906023855867996132940083304482619394852161942751710632513156699697563114715448153871144875324831120330907180702062492910281980939000516189797147720177364324793388062262626209055130932945120369258643910357055625529553487820906877382519673417804882636613509515359579633413551047407719523516081886069429950552670882935864471181620618973916359382480774472747287973187495959541354151297417460952163223341654793003582720524616876895890966292393463232942718548923697932742122328874697668873518255632704724085488119576638915156869372039395457284406890353915364056441826979648972807116401 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club-moen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.club-moen.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'club-moen-elite.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.club-moen-elite.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 477646632525ef8358d308951e47f2dc6726752f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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