dcresearch.jpmorganfunds.com

- JPMorgan Chase and Co. -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number fa:a3:08:c8:e2:70:d5:6f:00:00:00:00:54:cf:c0:ae was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

JPMorgan Chase and Co.

Company registration number: 691011
Organization: JPMorgan Chase and Co.
State / Province: New York
Locality: New York
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:a3:08:c8:e2:70:d5:6f:00:00:00:00:54:cf:c0:ae
Serial Number (int): 333153521509159497018703413675530633390
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 43:f1:73:82:6e:94:ac:39:25:bb:76:11:af:6a:d6:f1:0f:7a:70:6b
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): cb:2e:dd:35:29:47:9c:9f:c2:52:85:65:fb:a8:ee:ce:d0:b8:29:37
Fingerprint (sha256): a1:e9:85:93:a1:12:9a:5b:8f:ff:25:84:8c:e7:f0:c1:74:fe:ec:c6:47:18:9a:ed:42:a8:9c:0d:ee:62:1a:ad

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate dcresearch.jpmorganfunds.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dcresearch.jpmorganfunds.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dcresearch.jpmorganfunds.com

Other certificates including the domain name jpmorganfunds.com

(limited to 100 certificates)
am.jpmorgan.com
specialredirect.chase.com
am.jpmorgan.com
am.jpmorgan.com
cdn-uat.jpmorganfunds.com
awmofac.jpmorgan.com
employee.jpmorganfunds.com
www.jpmorganfunds.com
metrics.jpmorganfunds.com
www.jpmorganfunds.com
specialredirect.chase.com
specialredirect.chase.com
specialredirect.chase.com
am.jpmorgan.com
specialredirect.chase.com
specialredirect.chase.com
am.jpmorgan.com
am.jpmorgan.com
metrics.jpmorganfunds.com
specialredirect.chase.com
awmofac.jpmorgan.com
awmofac.jpmorgan.com
specialredir14.jpmchase.net
specialredirect.chase.com
awmofac.jpmorgan.com
specialredir14.jpmchase.net
specialredirect.chase.com
blog.jpmorganinstitutional.com
jpmf.jpmorgan.com
am.jpmorgan.com
new.jpmorganinstitutional.com
awmofac.jpmorgan.com
specialredirect.chase.com
specialredirect.chase.com
specialredirect.chase.com
assets-uat-new.jpmprivatebank.com
specialredirect.chase.com
metrics.jpmorganfunds.com
?.jpmorganfunds.com
about.jpmorganfunds.com
www.jpmorganfunds.com
specialredirect.chase.com
specialredir14.jpmchase.net
specialredirect.chase.com
specialredirect.chase.com
specialredirect.chase.com
cdn.jpmorganfunds.com
specialredirect.chase.com
about.jpmorganfunds.com
am.jpmorgan.com
metrics.jpmorganfunds.com
am.jpmorgan.com
employee.jpmorganfunds.com
jpmf.jpmorgan.com
specialredirect.chase.com
new.jpmorganinstitutional.com
am.jpmorgan.com
am.jpmorgan.com
specialredirect.chase.com
am.jpmorgan.com
specialredirect.chase.com
jpmf.jpmorgan.com
metrics.jpmorganfunds.com
am.jpmorgan.com
jpmf.jpmorgan.com
am.jpmorgan.com
specialredirect.chase.com
specialredirect.chase.com
www.jpmorganfunds.com
www.jpmorganfunds.com
metrics.jpmorganfunds.com
am.jpmorgan.com
specialredirect.chase.com
am.jpmorgan.com
am.jpmorgan.com
www1.jpmorganfunds.com
about.jpmorganfunds.com
am.jpmorgan.com
specialredirect.chase.com
am.jpmorgan.com
blog.jpmorganinstitutional.com
am.jpmorgan.com
specialredirect.chase.com
am.jpmorgan.com
about.jpmorganfunds.com
specialredirect.chase.com
dcresearch.jpmorganfunds.com
awmofac.jpmorgan.com
jpmf.jpmorgan.com
www.jpmorganfunds.com
am.jpmorgan.com
jpmf.jpmorgan.com
new.jpmorganinstitutional.com
specialredirect.chase.com
dcresearch.jpmorganfunds.com
metrics.jpmorganfunds.com
specialredirect.chase.com
specialredirect.chase.com
specialredirect.chase.com
blog.jpmorganinstitutional.com

Certificate

The complete raw certificate details for dcresearch.jpmorganfunds.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhXEa5VUvOgpwst8zXwf
asaQ63Ba8IkGHQhWCihU3WeDNw8FnI15HTZurQugqGx6EtDRYUnsZANytB96ePsX
eYAzobw7yxJEeGr+FInOSquejJP+s98nTRC/xIp2y1SdwEdBnfWzIinrZnJKqO2X
7jJiiXNGV3BUFC/p0HivWGL8YWsX4CIW09qrUijM+bBf+XHZTLAnDlBZnDMLRArp
/bA0Endb3RRFQHI3gtNM7CpKkFHkv6HcJWtf2Ck5VVbk/Z8zD3orSZ/na9S1tDkD
is4iXHHyDK4TALKe7CB0h3K8ubWS6cl0dQzPzQo9bEm7cJaqKq3UICO6gTWIVloP
fQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333153521509159497018703413675530633390
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-07 08:24:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-07 08:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'JPMorgan Chase and Co.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '691011'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dcresearch.jpmorganfunds.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26015824662219888243312660174514693887866776997960067945008796368290759362167210863880860042556787323817960644664758771614610812584544438858616574430847358689646080850770037774736664543083581658315914598167714753863273127434029746352435074538291746486810807512491287201681373283113004261128367450647235907392896984667166238256219955862835905891304661076154188935505411103646108005307626059461825860343726807791278040347188140628386792571350142995545475279740325755693463958371317287554922858390231729058236888384625217023863998272230619664121512558902615471507385959591303984007674717419595719207507163810454935572349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dcresearch.jpmorganfunds.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							43f173826e94ac3925bb7611af6ad6f10f7a706b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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