psoft-hrms-gc89upg-v854.ci.gc.ca

- Shared Services Canada -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 1e:23:71:12:3a:25:a5:0d:00:00:00:00:50:f6:fc:2c was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Shared Services Canada

Organization: Shared Services Canada
State / Province: Quebec
Locality: Gatineau
Country: CA

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 1e:23:71:12:3a:25:a5:0d:00:00:00:00:50:f6:fc:2c
Serial Number (int): 40060863619983973304869863619663690796
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 98:bf:0e:45:e5:16:f9:08:d5:11:e4:b8:48:ad:56:cc:7a:a8:7b:73
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 22:8f:5a:3c:66:48:e0:9e:fe:1d:72:40:82:06:5c:d6:7a:7e:94:67
Fingerprint (sha256): af:0c:2b:16:32:87:32:5d:82:11:3c:ca:69:16:96:00:a1:7f:7e:27:8a:91:df:6b:c7:80:38:60:2d:54:74:6e

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate psoft-hrms-gc89upg-v854.ci.gc.ca

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for psoft-hrms-gc89upg-v854.ci.gc.ca

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

psoft-hrms-gc89upg-v854.ci.gc.ca

Other certificates including the domain name ci.gc.ca

(limited to 100 certificates)
gcms-smf.apps.ci.gc.ca
cic.gc.ca
NJES1S6308.apps.ci.gc.ca
gcs-ssc-i.apps.ci.gc.ca
extern.cic.gc.ca
*.apps.ci.gc.ca
gcms-prd-a-eai.apps.ci.gc.ca
onlineservices-training.ci.gc.ca
alm-int-tfs.apps.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcdocs2.ci.gc.ca
gcms-smgc.apps.ci.gc.ca
cicoemprd.apps.ci.gc.ca
ldaps-edc.apps.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
*.ci.gc.ca
irccsbxoms1.apps.ci.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
service-stg.ci.gc.ca
ircc-oem.apps.ci.gc.ca
psoft89-gchrms.ci.gc.ca
onlineservices-development2.ci.gc.ca
ccps-stcc-trn.cic.gc.ca
gcms-smf-edc-prd.apps.ci.gc.ca
gcmsmgtaom1.apps.ci.gc.ca
ircc-cognos.ci.gc.ca
extern.cic.gc.ca
cicedw.ci.gc.ca
gcms-smf.apps.ci.gc.ca
eservices1.ci.gc.ca
extern.cic.gc.ca
NSEP1S5119.ci.gc.ca
gcdocs2-svc.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
NJES1S6309.apps.ci.gc.ca
tempo-ste.apps.ci.gc.ca
tempo-pef.cic.gc.ca
eservices1.ci.gc.ca
*.ci.gc.ca
gcms-staging.apps.ci.gc.ca
ircc-cognossnd.ci.gc.ca
ircc-cognosint.ci.gc.ca
pss-fg-dev.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
ircc-oem-npe.apps.ci.gc.ca
gcmsmgtoms1.apps.ci.gc.ca
cicedwdev.ci.gc.ca
gcmssystestmel.apps.ci.gc.ca
psoft-hrms-gc89test-v854.ci.gc.ca
extern.cic.gc.ca
eservices3.ci.gc.ca
gcmssa.apps.ci.gc.ca
extern.cic.gc.ca
gcdocsmobile.apps.ci.gc.ca
pss-ds-dev.apps.ci.gc.ca
ircc-cognostrg.ci.gc.ca
tempo-trn.cic.gc.ca
ircc-cognosdev.ci.gc.ca
ircc-oem.apps.ci.gc.ca
tempo-pte.cic.gc.ca
cicedwsnd.ci.gc.ca
eservices2.ci.gc.ca
tempo-ste.cic.gc.ca
gcs-ssc-itrn.apps.ci.gc.ca
onlineservices-development2.ci.gc.ca
adssdev1.ci.gc.ca
tempo-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
gcmstgmel.apps.ci.gc.ca
gcdocs2.ci.gc.ca
*.ci.gc.ca
ircc-oem.apps.ci.gc.ca
cicoemnpe.apps.ci.gc.ca
gcs-ssc-sys.apps.ci.gc.ca
gcms-staging.apps.ci.gc.ca
mailrelay.ci.gc.ca
gcs-ssc-dev.apps.ci.gc.ca
extern.cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
onlineservices-dev.ci.gc.ca
*.apps.ci.gc.ca
cic.gc.ca
gcmsprdmel.apps.ci.gc.ca
eservices5.ci.gc.ca
ccps-stcc-int.cic.gc.ca
extern.cic.gc.ca
iprms.ci.gc.ca
ccps-stcc.cic.gc.ca
gcms-pdf.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
NJES1S1106.CI.GC.CA
extern.cic.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
gcs-ssc-stg.apps.ci.gc.ca
psoft-hrms-gc89test.ci.gc.ca
gcs-ssc-isys.apps.ci.gc.ca
ccps-stcc-dev.cic.gc.ca
gcms-smgc.apps.ci.gc.ca
ircc-oem-sbx.apps.ci.gc.ca

Certificate

The complete raw certificate details for psoft-hrms-gc89upg-v854.ci.gc.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAkKbr5l2eOO842zl0MHz/
uQ46Zo4zSbfgx1gyLBIFyD/U/6yE1E80y7Ciu3SNyl1kTdmNfwFaGy+IWiNc8yFy
yz6yFJOqm9h929GSeJUpZbSLLe+DScccifwUagblKxHF28rm5fJ2RhpZsFudsXIZ
Z084HJGiDBnyXr7PHncVb4CQbcDUvTjDEPdlJ3iPICWsKje2wBq+FvQmn80jE1l5
YD0GScgT7pGrpu4nf8Dk6k2gzE3gzwWbN+c6jEQtxv++KH4WGiEA7tVXljS5T8zO
Vox1BgN6PnCxhXF59dYaPVi3r+1Vz2gKTezVRGop/GYT8tIlmpU0mFKelF5ZCBCN
gT3lSOpjaamQyBskQSYCjgS7wJ00FC+HxgtdB6p7VMSBIEN4dJ3j+v7AyrQjbHh8
gVSeW/e0M3cJLIqrmwVTWoA7iws5MNY+u16BNsE7tBJ79FGaXo2DE2hMjQwfZawP
se1Ei5fDT3xMmsEhzDMLcDdRzU296l3zd8VRoMivraKcuWYNEZwMYw/h7sztLrhY
n3UKHSZWbqxl+D4QW/QsoEhlCt3Tpn85org9+nNjU7Vj3jE+pMo6xHPk/tA6ky7E
9xc398auDLpNhLgiuuKOUCdROXsi1YHaaxCg45Mvo+wZf4joQhKs8MmMQvuBrdrM
Vcu6G8nB5sVsb2vLcq2oVz8CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 40060863619983973304869863619663690796
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-09-09 16:16:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-12-08 16:45:58 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Quebec'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Gatineau'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Shared Services Canada'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'psoft-hrms-gc89upg-v854.ci.gc.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 590128824862945610217357829491409871454527684419742083423193066710847351235990244640860105387769799418659373590450314722850532603141127103605494119721665184298007795197885885180871171880555430677485628583478777209092661640163746028347409741957130290694621975274133915132144484946683199908159376144818561766327687169248073946261639176552187702594103918506306717912291554021887795433881812962131973529032914280264411906152653930020271148197318352688060827822574338074909307838534066991379517163517843893896804391994629681634490485031887848277706847228793246208064897323675441954525522191272864893854918542388054377346715370990133533662736117209823654032534471951372854729955695605075195098041231112687362471799428098169245413158358848748936447402341537607089649665046046592481259382968802799354359115066124040485818157596229161559882463619953342750291885299408008465013848675068524841320094242837306753721125463389006277438731862390720807168316349416128813642588089659966967865501809402880589459658061041692443255226595635095871889308893862671070944708747951072867476511770692414939453231988138882191897031180099220705813602538798382504904830341136548325686841135830914970707952248842382729207027107380374947573205988037760752456062783
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'psoft-hrms-gc89upg-v854.ci.gc.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98bf0e45e516f908d511e4b848ad56cc7aa87b73
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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