www.nextconnex.com

Issued by RapidSSL TLS RSA CA G1

About this certificate

This digital certificate with serial number 08:76:7c:4a:d2:71:92:6a:1d:36:a8:ff:b8:da:51:38 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.nextconnex.com

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 08:76:7c:4a:d2:71:92:6a:1d:36:a8:ff:b8:da:51:38
Serial Number (int): 11249035942390467609155950432975737144
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 86:5d:3e:c7:f4:b3:3f:7c:3f:f5:88:06:a8:d1:91:c7:d0:83:2c:a0
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38

Fingerprint (sha1): f0:c4:11:76:79:a0:70:a3:dc:ed:be:5e:eb:00:09:ca:72:1f:40:9c
Fingerprint (sha256): a9:f3:2e:a8:97:56:66:83:2b:1d:8a:4b:d7:85:d2:d8:11:5e:e3:af:a0:9c:30:39:a5:a3:aa:6d:5e:43:c1:17

Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt

Revocation information

OCSP Server: http://status.rapidssl.com
CRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl

Check the revocation status for certificate www.nextconnex.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.nextconnex.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.nextconnex.com
nextconnex.com

Other certificates including the domain name nextconnex.com

(limited to 100 certificates)
helpdesk.lamundial.com
help.uafrica.com
support.nextconnex.com
api.portal.nextconnex.com
portal.nextconnex.com
suporte.mindify.net
support.nextconnex.com
api.portal.nextconnex.com
support.labmoneta.com
sos.123assist.me
portal.ibizarentals.be
portal.nextconnex.com
help.bettermlo.com
suporte.mindify.net
api.portal.nextconnex.com
help.dakcs.com
api.portal.nextconnex.com
portal.nextconnex.com
api.portal.nextconnex.com
api.portal.nextconnex.com
suporte.jumba.com.br
helpdesk.abra.io
portal.nextconnex.com
support.thenextlevel.co.uk
api.portal.nextconnex.com
news.nextconnex.com
api.portal.nextconnex.com
api.portal.nextconnex.com
news.nextconnex.com
portal.nextconnex.com
suporte.mindify.net
nextconnex.com
news.nextconnex.com
suporte.tradefy.cloud
portal.nextconnex.com
destek.visiott.com
support.labmoneta.com
api.portal.nextconnex.com
destek.visiott.com
news.nextconnex.com
portal.nextconnex.com
portal.nextconnex.com
help.ultrabrasil.com
nextconnex.com
api.portal.nextconnex.com
news.nextconnex.com
nextconnex.com
nextconnex.com
api.portal.nextconnex.com
help.dakcs.com
portal.ibizarentals.be
nextconnex.com
api.portal.nextconnex.com
api.portal.nextconnex.com
suporte.jumba.com.br
api.portal.nextconnex.com
portal.nextconnex.com
portal.nextconnex.com
help.horsepowerbrands.com
helpdesk-tech.enteo.pl
support.thenextlevel.co.uk
portal.nextconnex.com
help.dakcs.com
support.labmoneta.com
portal.nextconnex.com
helpdesk.lamundial.com
news.nextconnex.com
help.dakcs.com
api.portal.nextconnex.com
news.nextconnex.com
nextconnex.com
suporte.jumba.com.br
api.portal.nextconnex.com
portal.nextconnex.com
www.nextconnex.com
help.dakcs.com
support.nextconnex.com
portal.nextconnex.com
support.bizconsolutions.co.za
portal.nextconnex.com
portal.nextconnex.com
portal.nextconnex.com
destek.visiott.com
icontrol.nextconnex.com
destek.visiott.com
help.bettermlo.com
helpdesk.abra.io
nextconnex.com
helpdesk-tech.enteo.pl
news.nextconnex.com
nextconnex.com
help.dakcs.com
suporte.tradefy.cloud
portal.ibizarentals.be
portal.nextconnex.com
suporte.tradefy.cloud
api.portal.nextconnex.com
api.portal.nextconnex.com
api.portal.nextconnex.com
api.portal.nextconnex.com

Certificate

The complete raw certificate details for www.nextconnex.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGMTCCBRmgAwIBAgIQCHZ8StJxkmodNqj/uNpRODANBgkqhkiG9w0BAQsFADBg
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx
MB4XDTIzMDcyNjAwMDAwMFoXDTI0MDcyNTIzNTk1OVowHTEbMBkGA1UEAxMSd3d3
Lm5leHRjb25uZXguY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA
wOJTrsL1EaH70wFXwoboG56aESlqPv3fDN4Y8RMaCpRl+zmCH42+zsO5JZ3ci63s
NsWgaLSHbFcMy4rxplRoSdy+3eTExkUJxNZ45NwSbUZLAQxRW5TfQmffwcdxQ8nH
JDCzCo0wS87MeUEOXH/GjWo0nmjMT01Dabj0HTHeEddle6LaNEHiZaXeW1rRUdVZ
2XwIwC0wFwihqJJyfP1ttW6M9neu+7WIExxmPB8KI1gQs8BTcqMrSyR0oE2fh+Bs
tXLI3vultOCUOE74uD3il4Vbcrk9HFYO41T34TzMdrgicIBhoo82c/o4JVYmCJMU
WEiSw11p9/74jV4L/U6SnwIDAQABo4IDKDCCAyQwHwYDVR0jBBgwFoAUDNtsgkkP
SmcKuBTuesRIUojrVjgwHQYDVR0OBBYEFIZdPsf0sz98P/WIBqjRkcfQgyygMC0G
A1UdEQQmMCSCEnd3dy5uZXh0Y29ubmV4LmNvbYIObmV4dGNvbm5leC5jb20wDgYD
VR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA/BgNV
HR8EODA2MDSgMqAwhi5odHRwOi8vY2RwLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRM
U1JTQUNBRzEuY3JsMD4GA1UdIAQ3MDUwMwYGZ4EMAQIBMCkwJwYIKwYBBQUHAgEW
G2h0dHA6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzB2BggrBgEFBQcBAQRqMGgwJgYI
KwYBBQUHMAGGGmh0dHA6Ly9zdGF0dXMucmFwaWRzc2wuY29tMD4GCCsGAQUFBzAC
hjJodHRwOi8vY2FjZXJ0cy5yYXBpZHNzbC5jb20vUmFwaWRTU0xUTFNSU0FDQUcx
LmNydDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgDuzdBk
1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYmTbEKfAAAEAwBHMEUCIHpP
0IAqgjvEe1S5Rht4rspHp4Oi+7cNi8DILySCBI5wAiEA1IMQtlRV9DLUvMPFaJvK
uiZ2Vy5vO0vLBEL1xe2pe4IAdgBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZu7+r
OdiEcwAAAYmTbEKYAAAEAwBHMEUCIEtBnP7fKSti9SCsK1qJxqNZw9Z0SCTGHco1
9ip0yYxnAiEAnMBZr1fPMs8XhQIfFyrC5I0MoJPYM6VpKxqUlTu7Ey8AdgDatr9r
P7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0wSNf7qwAAAYmTbEJ7AAAEAwBHMEUCIQC4
HfiGYhPnV6ifKMVSePAp/tQNGVaWjdFek6BfpnL4tAIgYAR80yC9c2d93MMz2aUs
+FP5aKPUprryZfdoPwS+qdIwDQYJKoZIhvcNAQELBQADggEBAC3AhbTc4B6sTgDX
6q60jwdKimTfU5I6EPm6K6wcYkPOesJpdbAnf23PGuVuwQRFImaO1/ibG79shA3Q
qr6LnokGKxUuZKVsc0C4bnuwX8T0xnqIAyu41gj9z3Xxgn/L6tD4AUxkqcKI33+Y
Jp8t5M5oi87bylepGGlVd2bjmd+RD5sBiHm5r3LM2RFlZy3yLtxpJ4GjMGHndj07
CjEkFaOqaJ84uwi6iXSkojjThOlBXBzb4VvwH+FxT09ocoLVmRLjf9EG0LeiNFtk
tpoDWv63woQKwZJsHqzTecPCFtvrBaMa/45YXXx+Bzony96jj0GTaD10qR7ANPhW
WHAUe7E=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOJTrsL1EaH70wFXwobo
G56aESlqPv3fDN4Y8RMaCpRl+zmCH42+zsO5JZ3ci63sNsWgaLSHbFcMy4rxplRo
Sdy+3eTExkUJxNZ45NwSbUZLAQxRW5TfQmffwcdxQ8nHJDCzCo0wS87MeUEOXH/G
jWo0nmjMT01Dabj0HTHeEddle6LaNEHiZaXeW1rRUdVZ2XwIwC0wFwihqJJyfP1t
tW6M9neu+7WIExxmPB8KI1gQs8BTcqMrSyR0oE2fh+BstXLI3vultOCUOE74uD3i
l4Vbcrk9HFYO41T34TzMdrgicIBhoo82c/o4JVYmCJMUWEiSw11p9/74jV4L/U6S
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 11249035942390467609155950432975737144
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-25 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.nextconnex.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24349360500284427994408784179585753104200094775442635996799684908630352432374408161035928062419449464830866789815064736777978470373838791388320386344713481502875801064263185060977127663661198990606092902036623382350617331321840589067266488473845824946732600626129749313836518219569494758825973228709235584423701812449101932070088773554527196604056760073431609803836625239925464272273056564373055576817682902334542428113622848637940768010755903163804004911359208795876148691040436693747694466767662825464322307503136626099520636176894045536678090506313011838344688395167444421666057393674989017309039125736977062597279
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							865d3ec7f4b33f7c3ff58806a8d191c7d0832ca0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (38 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.nextconnex.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nextconnex.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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