*.mensajerosurbanos.com

Issued by Amazon

About this certificate

This digital certificate with serial number 06:c2:65:1b:ea:ef:fc:12:99:22:fe:31:6d:5d:bb:21 was issued on by Amazon.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.mensajerosurbanos.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 06:c2:65:1b:ea:ef:fc:12:99:22:fe:31:6d:5d:bb:21
Serial Number (int): 8984724300505224449720072804589484833
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: be:64:cf:32:a9:05:8e:a1:dd:65:b5:e2:ba:a8:08:21:45:9d:0f:59
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): c0:b9:c5:86:0d:ad:66:d6:9f:4c:47:4f:8c:82:46:36:51:71:c0:bc
Fingerprint (sha256): 82:af:72:e7:38:a3:21:70:3c:15:60:f7:24:c7:c0:2e:47:b5:35:f1:c3:0b:a3:3e:e6:64:1b:c1:d7:e6:4d:23

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate *.mensajerosurbanos.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.mensajerosurbanos.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.mensajerosurbanos.com
mensajerosurbanos.com

Other certificates including the domain name mensajerosurbanos.com

(limited to 100 certificates)
*.mensajerosurbanos.com
support.supermpower.com
le-11749495.prod.mensajerosurbanos.com
img.email.mensajerosurbanos.com
img.email.mensajerosurbanos.com
sst-support.transact.com
dev.admin.mensajerosurbanos.com
support.wide.com.sa
le-11749495.prod.mensajerosurbanos.com
dev.admin.mensajerosurbanos.com
support.supermpower.com
ayudamu.mensajerosurbanos.com
promo.mensajerosurbanos.com
capacitaciones.mensajerosurbanos.com
le-11749495.prod.mensajerosurbanos.com
dev.front.mensajerosurbanos.com
servicedesk.aegis.law
dev.api.mensajerosurbanos.com
*.mensajerosurbanos.com
dev.api.mensajerosurbanos.com
support.supermpower.com
dev.admin.mensajerosurbanos.com
admin.mensajerosurbanos.com
r.email.mensajerosurbanos.com
dev.front.mensajerosurbanos.com
whatsapp.mensajerosurbanos.com
img.email.mensajerosurbanos.com
ayuda.mensajerosurbanos.com
support.supermpower.com
beta.api.mensajerosurbanos.com
dev.admin.mensajerosurbanos.com
sst-support.transact.com
dev.front.mensajerosurbanos.com
support.supermpower.com
cerberus.mensajerosurbanos.com
capacitaciones.mensajerosurbanos.com
servicedesk.aegis.law
domi.mensajerosurbanos.com
*.mensajerosurbanos.com
support.pixlsolutions.com
ayuda.mensajerosurbanos.com
support.supermpower.com
support.supermpower.com
mensajerosurbanos.com
servicedesk.aegis.law
*.antiguo.mensajerosurbanos.com
dev.front.mensajerosurbanos.com
support.supermpower.com
support.wide.com.sa
*.mensajerosurbanos.com
knowledgebase.relevate.com.au
support.supermpower.com
ayudamu.mensajerosurbanos.com
r.email.mensajerosurbanos.com
ayudamu.mensajerosurbanos.com
support.supermpower.com
dev.admin.mensajerosurbanos.com
knowledgebase.relevate.com.au
dev.admin.mensajerosurbanos.com
dev.admin.mensajerosurbanos.com
img.email.mensajerosurbanos.com
servicedesk.aegis.law
api.mensajerosurbanos.com
ayudamu.mensajerosurbanos.com
dev.admin.mensajerosurbanos.com
sst-support.transact.com
capacitaciones.mensajerosurbanos.com
mensajerosurbanos.com
mua.mensajerosurbanos.com
support.supermpower.com
dev.api.mensajerosurbanos.com
support.supermpower.com
mensajerosurbanos.com
r.email.mensajerosurbanos.com
r.email.mensajerosurbanos.com
domi.mensajerosurbanos.com
support.supermpower.com
dev.realtime.mensajerosurbanos.com
knowledgebase.relevate.com.au
webpad.mensajerosurbanos.com
beta.api.mensajerosurbanos.com
img.email.mensajerosurbanos.com
dev.admin.mensajerosurbanos.com
mensajerosurbanos.com
support.supermpower.com
sst-support.transact.com
dev.admin.mensajerosurbanos.com
dev.admin.mensajerosurbanos.co
dev.front.mensajerosurbanos.com
r.email.mensajerosurbanos.com
knowledgebase.relevate.com.au
dev.front.mensajerosurbanos.com
support.supermpower.com
dev.front.mensajerosurbanos.com
mensajerosurbanos.com
r.email.mensajerosurbanos.com
ayuda.mensajerosurbanos.com
support.wide.com.sa
api.mensajerosurbanos.com
dev.api.mensajerosurbanos.com

Certificate

The complete raw certificate details for *.mensajerosurbanos.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFjjCCBHagAwIBAgIQBsJlG+rv/BKZIv4xbV27ITANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0xODA5MjYwMDAwMDBaFw0xOTEwMjYx
MjAwMDBaMCIxIDAeBgNVBAMMFyoubWVuc2FqZXJvc3VyYmFub3MuY29tMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPDDX+usVFDOAVtG/j5hyxMjaGT
Tqz6pQ04P1SgN3Wl4dvat4h6fEI7VFyJRLPwgc31WSaZAsxv4jt/a8OFuACrNpVd
CUNxhtjtM6GJQOvHVlrk0SdWMvs5DPNaf9RooEyd/BiFqsa3txHRlXA7lak9qW5n
jl1JwxknmfLG6pt8MRz1jbuq1TjP/NmS1pZT058tzYcs9yDAkQy6SK3UIOCrnWzG
NddM9cHoxZvWfjm2e5X0zq8K+SLXfzIsDgqsJh9sBiTAHMOo3GqSWvGcnvo2Pcty
JjodKQKV5KDbOC3/RTA2uOi1IZLbzXm8I4ujy6tqdv569H7IUnm855uJAwIDAQAB
o4ICmjCCApYwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0O
BBYEFL5kzzKpBY6h3WW14rqoCCFFnQ9ZMDkGA1UdEQQyMDCCFyoubWVuc2FqZXJv
c3VyYmFub3MuY29tghVtZW5zYWplcm9zdXJiYW5vcy5jb20wDgYDVR0PAQH/BAQD
AgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNvbS9zY2ExYi5jcmww
IAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUGCCsGAQUFBwEBBGkw
ZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1hem9udHJ1c3QuY29t
MDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpvbnRydXN0LmNvbS9z
Y2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB3
AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAABZhhCPFAAAAQDAEgw
RgIhAPp2jqmq6uJr0G6QOV+bgbNUBZpkuUz3UrTUoA5WCy/eAiEA9m0ABob6qg3/
Wfs4Ir71XprPsLFrjyNVoUNzaNe6+mgAdQCHdb/nWXz4jEOZX73zbv9WjUdWNv9K
tWDBtOr/XqCDDwAAAWYYQj0yAAAEAwBGMEQCIAp2VChJy8g0VnQy7YZQQ4YjD74/
iEQXFr2iJdHLD37ZAiAVOFX77gl6Epl0K6lAgNgBrlwKLfNhhXRAxJ8n9HXbqzAN
BgkqhkiG9w0BAQsFAAOCAQEAVGPUg0BjvzLZM9m3IGgnNc7bNGb9e2Fv8pXdBny/
sUQVPVHxouSNQs+J4lcze8q8b/S4av3NUb6yxq1Hx5lHcZWWtvyrrYaV8VGTY04c
zfU8dmbU+EO3msLvWGuftdH4TNQ/daviEc1/QqMmoQgsjdr4PQD8uI+onPu0+xL/
oZfWlTdn/MnT48gj13QWnNeScP9AfoINfl2ksqDefVT9b3nr5nTV3crWAUJGIgpF
SzuSlys5iT5k/NXgRP3rbFH2unfZOiItTW/VUCMl8tqgPjqpeH8CXDgKkSm36SZL
2IUnLdFtWC85bGi4hV+91VilBLD+cH6yIqnNHodtWo4FOA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaPDDX+usVFDOAVtG/j5
hyxMjaGTTqz6pQ04P1SgN3Wl4dvat4h6fEI7VFyJRLPwgc31WSaZAsxv4jt/a8OF
uACrNpVdCUNxhtjtM6GJQOvHVlrk0SdWMvs5DPNaf9RooEyd/BiFqsa3txHRlXA7
lak9qW5njl1JwxknmfLG6pt8MRz1jbuq1TjP/NmS1pZT058tzYcs9yDAkQy6SK3U
IOCrnWzGNddM9cHoxZvWfjm2e5X0zq8K+SLXfzIsDgqsJh9sBiTAHMOo3GqSWvGc
nvo2PctyJjodKQKV5KDbOC3/RTA2uOi1IZLbzXm8I4ujy6tqdv569H7IUnm855uJ
AwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8984724300505224449720072804589484833
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-26 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.mensajerosurbanos.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22424933993817486018234983915969362647700321364959204220525747259930559852561034263521999764872595041396200395447389997550232605262336627242589596148860050764985536707718470818757726209741465363114593179972584855079836239183183438015201037066244699944504020816867755574383687129550575438317329071666330830795156191428782709241364833483931151694019201752673954050568832606652089696515830450481829397936032960641293287210042539382255317682813408332021542204194327703813244501319198056362861136296072209745603056873240388803322295135384569474998824314347387226406001601244007172378411001131406189210646047136558830291203
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							be64cf32a9058ea1dd65b5e2baa80821459d0f59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mensajerosurbanos.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mensajerosurbanos.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016618423c500000040300483046022100fa768ea9aaeae26bd06e90395f9b81b354059a64b94cf752b4d4a00e560b2fde022100f66d000686faaa0dff59fb3822bef55e9acfb0b16b8f2355a1437368d7bafa680075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016618423d32000004030046304402200a76542849cbc834567432ed86504386230fbe3f88441716bda225d1cb0f7ed90220153855fbee097a1299742ba94080d801ae5c0a2df361857440c49f27f475dbab
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		005463d4834063bf32d933d9b720682735cedb3466fd7b616ff295dd067cbfb144153d51f1a2e48d42cf89e257337bcabc6ff4b86afdcd51beb2c6ad47c79947719596b6fcabad8695f15193634e1ccdf53c7666d4f843b79ac2ef586b9fb5d1f84cd43f75abe211cd7f42a326a1082c8ddaf83d00fcb88fa89cfbb4fb12ffa197d6953767fcc9d3e3c823d774169cd79270ff407e820d7e5da4b2a0de7d54fd6f79ebe674d5ddcad6014246220a454b3b92972b39893e64fcd5e044fdeb6c51f6ba77d93a222d4d6fd5502325f2daa03e3aa9787f025c380a9129b7e9264bd885272dd16d582f396c68b8855fbdd558a504b0fe707eb222a9cd1e876d5a8e0538