eservice.cad-schroer.com
Issued by RapidSSL RSA CA 2018
About this certificate
This digital certificate with serial number 07:8e:20:a6:ad:a3:2b:24:d7:17:72:6b:ce:a2:f4:1f was issued on by DigiCert Inc.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=eservice.cad-schroer.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 07:8e:20:a6:ad:a3:2b:24:d7:17:72:6b:ce:a2:f4:1fSerial Number (int): 10042564367126816203942000684173554719
Serial Number lenght: 123 bits, 16 octets
SubjectKeyId: cb:6e:02:53:7b:32:6f:b2:c5:49:fe:83:e1:f1:8e:2b:e0:c5:95:e1
AuthorityKeyId: 53:ca:17:59:fc:6b:c0:03:21:2f:1a:ae:e4:aa:a8:1c:82:56:da:75
Fingerprint (sha1): 56:28:8a:90:ff:45:72:4d:d9:b1:46:0a:29:52:1f:be:a7:84:bc:07
Fingerprint (sha256): 8a:f4:99:bb:c0:61:6d:34:83:fb:e5:b8:89:20:41:81:17:02:fe:55:75:f4:54:86:70:a5:87:07:62:2e:f5:ab
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLRSACA2018.crl
Check the revocation status for certificate eservice.cad-schroer.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for eservice.cad-schroer.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
eservice.cad-schroer.com
Other certificates including the domain name cad-schroer.com
(limited to 100 certificates)
cad-schroer.at
analyze.cad-schroer.com
analyze.cad-schroer.de
eservice.cad-schroer.com
cad-schroer.at
analyze.cad-schroer.de
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.com
calltracking.cad-schroer.com
configurator.cad-schroer.com
cad-schroer.com
analyze.cad-schroer.de
cad-schroer.com
cad-schroer.com
analyze.cad-schroer.de
cad-schroer.com
analyze.cad-schroer.de
csgpartner.cad-schroer.com
cad-schroer.com
cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.at
analyze.cad-schroer.de
calltracking.cad-schroer.com
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
eservice.cad-schroer.com
eservice.cad-schroer.com
calltracking.cad-schroer.com
calltracking.cad-schroer.com
analyze.cad-schroer.de
calltracking.cad-schroer.com
cad-schroer.at
cad-schroer.com
analyze.cad-schroer.de
csgpartner.cad-schroer.com
csgmail.cad-schroer.de
calltracking.cad-schroer.com
analyze.cad-schroer.de
calltracking.cad-schroer.com
cad-schroer.com
eservice.cad-schroer.com
cad-schroer.com
cad-schroer.at
eservice.cad-schroer.com
eservice.cad-schroer.com
eservice.cad-schroer.com
analyze.cad-schroer.de
eservice.cad-schroer.com
cad-schroer.fr
calltracking.cad-schroer.com
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.at
calltracking.cad-schroer.com
cad-schroer.com
cad-schroer.fr
csgpartner.cad-schroer.com
csgpartner.cad-schroer.com
eservice.cad-schroer.com
analyze.cad-schroer.de
cad-schroer.at
analyze.cad-schroer.com
analyze.cad-schroer.de
eservice.cad-schroer.com
cad-schroer.at
analyze.cad-schroer.de
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.com
calltracking.cad-schroer.com
configurator.cad-schroer.com
cad-schroer.com
analyze.cad-schroer.de
cad-schroer.com
cad-schroer.com
analyze.cad-schroer.de
cad-schroer.com
analyze.cad-schroer.de
csgpartner.cad-schroer.com
cad-schroer.com
cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.at
analyze.cad-schroer.de
calltracking.cad-schroer.com
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
eservice.cad-schroer.com
eservice.cad-schroer.com
calltracking.cad-schroer.com
calltracking.cad-schroer.com
analyze.cad-schroer.de
calltracking.cad-schroer.com
cad-schroer.at
cad-schroer.com
analyze.cad-schroer.de
csgpartner.cad-schroer.com
csgmail.cad-schroer.de
calltracking.cad-schroer.com
analyze.cad-schroer.de
calltracking.cad-schroer.com
cad-schroer.com
eservice.cad-schroer.com
cad-schroer.com
cad-schroer.at
eservice.cad-schroer.com
eservice.cad-schroer.com
eservice.cad-schroer.com
analyze.cad-schroer.de
eservice.cad-schroer.com
cad-schroer.fr
calltracking.cad-schroer.com
csgpartner.cad-schroer.com
calltracking.cad-schroer.com
cad-schroer.at
calltracking.cad-schroer.com
cad-schroer.com
cad-schroer.fr
csgpartner.cad-schroer.com
csgpartner.cad-schroer.com
eservice.cad-schroer.com
analyze.cad-schroer.de
cad-schroer.at
Certificate
The complete raw certificate details for eservice.cad-schroer.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFvDCCBKSgAwIBAgIQB44gpq2jKyTXF3JrzqL0HzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRSYXBpZFNTTCBSU0EgQ0EgMjAxODAe Fw0xODA3MjYwMDAwMDBaFw0xOTA3MjYxMjAwMDBaMCMxITAfBgNVBAMTGGVzZXJ2 aWNlLmNhZC1zY2hyb2VyLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBALGIVAnPNwtfpKcCd6pJYVaUz7gjqxY27dM1BxZGOBJox8xIWwY0r1ROvPWA dJlaA/67le2464Q90N6bkbZtW4xOkw/9K5m6XJMQ5yr1mCPzE6r+GLA3cTAo6ClN 7OBW0c9HknP+kro5oeEtQBpRNSAK/mBNJdw2LyC+/fCx6B3sJ+5eSHaDPOqxG89V /eamz1lo1MEIsBJGU1Cn9EuRcpNKGrZX56ezFtFH/CFjz/qQeAOg6CnT9l04UFVb z6hfL0Jw16KwJfI/iVliZvxUi/lJ5P5edAgb5l2bnzfeT7IQrydbb++wMiXERzJk HmTe+wEKSxZD78l+6KnXBjeceCMCAwEAAaOCAq8wggKrMB8GA1UdIwQYMBaAFFPK F1n8a8ADIS8aruSqqByCVtp1MB0GA1UdDgQWBBTLbgJTezJvssVJ/oPh8Y4r4MWV 4TAjBgNVHREEHDAaghhlc2VydmljZS5jYWQtc2Nocm9lci5jb20wDgYDVR0PAQH/ BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA+BgNVHR8ENzA1 MDOgMaAvhi1odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFJTQUNBMjAx OC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0 cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwdQYIKwYBBQUHAQEE aTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVzLnJhcGlkc3NsLmNvbTA9Bggr BgEFBQcwAoYxaHR0cDovL2NhY2VydHMucmFwaWRzc2wuY29tL1JhcGlkU1NMUlNB Q0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBAwYKKwYBBAHWeQIEAgSB9ASB8QDvAHUA pLkJkLQYWBSHuxOizGdwCjw1mAT5G9+443fNDsgN3BAAAAFk1uVJwwAABAMARjBE AiA2ncAt6M8L8ZWJeNOT+b3iwdXchUNSjYi7Y+u0fMNbSgIgF8f7Quaqc2mI+mfd 3YXQ62DqvHXreIr+l46aOhfVKA4AdgCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDB tOr/XqCDDwAAAWTW5Up4AAAEAwBHMEUCIQD8XgS64FvVBPqc67PYNztgUKFmhjyQ D9iWYGxRJXe5AgIgfCWJvgnKi4jrAMofeXWPngIGgJBUEouMrs2xGy/W6+swDQYJ KoZIhvcNAQELBQADggEBAMdNCQJZucMUNEvwtbkM6f+988pXbCOQ7BW3aWwV7FfQ 7K3fBwjv1bVgUipWjU2pmIiY53lJrcxldsEofoMBUeYMh1UE2GCfV2fv5G/gPcOf eD8WImEMyQI3ILl0d/+3qxDqVKr0PXshPz21M0pK+X1jLvA/tHtvHt1EsrKEAsMG AYxUb/0DmHPxwlb2oqaMH9g31gtUHn3BCZ554vPGdh+ODf45PMuh6aMhWLURlgkL i1uZk8hoyAbN+sX1W0yFAZ57siBYq0R5ZSqML2ue903S6Lfxu/XYWhiOcZcg3ILd XOxpxPavkLEDLat0Ubdoj6hjwbpd/J2j64NL4hjieH4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYhUCc83C1+kpwJ3qklh VpTPuCOrFjbt0zUHFkY4EmjHzEhbBjSvVE689YB0mVoD/ruV7bjrhD3Q3puRtm1b jE6TD/0rmbpckxDnKvWYI/MTqv4YsDdxMCjoKU3s4FbRz0eSc/6Sujmh4S1AGlE1 IAr+YE0l3DYvIL798LHoHewn7l5IdoM86rEbz1X95qbPWWjUwQiwEkZTUKf0S5Fy k0oatlfnp7MW0Uf8IWPP+pB4A6DoKdP2XThQVVvPqF8vQnDXorAl8j+JWWJm/FSL +Unk/l50CBvmXZufN95PshCvJ1tv77AyJcRHMmQeZN77AQpLFkPvyX7oqdcGN5x4 IwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 10042564367126816203942000684173554719 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-07-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eservice.cad-schroer.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22411405956783627815005774078994839706194395542947043612874419275578162609250373733873604013567879269604506080934241700534585433531482295105632552843816789208576651347153674163840826600934803302504795108122081421501358179646980496863486815273983115823812919405057265037093757885005108775843652313519249214111096531294084330077778152130414210495666062830062366576597984084820511532586983398101406719848251769742874824493923263118535852010720007670993684574447938288493854515691961806839808834647812882235863528948160130801566028810894979880656051319183416803961512096734748891381686678099012474682521627262560656717859 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 53ca1759fc6bc003212f1aaee4aaa81c8256da75 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cb6e02537b326fb2c549fe83e1f18e2be0c595e1 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eservice.cad-schroer.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (241 bytes) 00ef007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000164d6e549c300000403004630440220369dc02de8cf0bf1958978d393f9bde2c1d5dc8543528d88bb63ebb47cc35b4a022017c7fb42e6aa736988fa67dddd85d0eb60eabc75eb788afe978e9a3a17d5280e0076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f00000164d6e54a780000040300473045022100fc5e04bae05bd504fa9cebb3d8373b6050a166863c900fd896606c512577b90202207c2589be09ca8b88eb00ca1f79758f9e0206809054128b8caecdb11b2fd6ebeb . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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