*.cjgconsultores.com
Issued by RapidSSL TLS RSA CA G1
About this certificate
This digital certificate with serial number 03:10:fc:f4:80:eb:07:01:5e:f3:c4:d5:5d:f2:70:62 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.cjgconsultores.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): 03:10:fc:f4:80:eb:07:01:5e:f3:c4:d5:5d:f2:70:62Serial Number (int): 4075891275881290468808876147799650402
Serial Number lenght: 122 bits, 16 octets
SubjectKeyId: 99:f6:82:fb:52:f9:8a:7f:bb:b0:df:bd:e0:b0:e9:cf:b7:52:a0:11
AuthorityKeyId: 0c:db:6c:82:49:0f:4a:67:0a:b8:14:ee:7a:c4:48:52:88:eb:56:38
Fingerprint (sha1): f5:b4:da:20:8f:0c:8d:19:9b:1f:00:05:91:f8:ae:84:3c:a5:96:cd
Fingerprint (sha256): b2:ae:17:bc:e7:d2:43:7e:23:53:f3:16:02:b9:4c:dc:71:d2:8b:08:6a:c5:3a:e1:53:c3:78:3a:c4:df:59:ee
Issuing Certificate URL: http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt
Revocation information
OCSP Server: http://status.rapidssl.comCRL Distribution Point: http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl
Check the revocation status for certificate *.cjgconsultores.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.cjgconsultores.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.cjgconsultores.com
cjgconsultores.com
cjgconsultores.com
Other certificates including the domain name cjgconsultores.com
(limited to 100 certificates)
it.oodc.com.ph
soporte.cjgconsultores.com
support.akylade.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
soporte.cjgconsultores.com
it.oodc.com.ph
soporte.cjgconsultores.com
asistencia.soporteparati.com
passo-a-passo-adcom.luckinfo.com.br
support.klutch.software
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
support.getcc.us
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
asistencia.soporteparati.com
it.oodc.com.ph
it.oodc.com.ph
asistencia.soporteparati.com
*.cjgconsultores.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
soporte.cjgconsultores.com
it.oodc.com.ph
it.oodc.com.ph
help.johnheathtravel.com
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
helpdesk.moreyspiers.com
asistencia.soporteparati.com
helpdesk.ie-launch.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
soporte.cjgconsultores.com
support.akylade.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
soporte.cjgconsultores.com
it.oodc.com.ph
soporte.cjgconsultores.com
asistencia.soporteparati.com
passo-a-passo-adcom.luckinfo.com.br
support.klutch.software
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
support.getcc.us
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
asistencia.soporteparati.com
it.oodc.com.ph
it.oodc.com.ph
asistencia.soporteparati.com
*.cjgconsultores.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
soporte.cjgconsultores.com
it.oodc.com.ph
it.oodc.com.ph
help.johnheathtravel.com
it.oodc.com.ph
helpdesk.ie-launch.com
it.oodc.com.ph
helpdesk.moreyspiers.com
asistencia.soporteparati.com
helpdesk.ie-launch.com
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
it.oodc.com.ph
Certificate
The complete raw certificate details for *.cjgconsultores.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGOTCCBSGgAwIBAgIQAxD89IDrBwFe88TVXfJwYjANBgkqhkiG9w0BAQsFADBg MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR8wHQYDVQQDExZSYXBpZFNTTCBUTFMgUlNBIENBIEcx MB4XDTIzMTEwMzAwMDAwMFoXDTI0MTIwMzIzNTk1OVowHzEdMBsGA1UEAwwUKi5j amdjb25zdWx0b3Jlcy5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB AQCgGCyWpClcRa921MLsbYzYmHdMtiSvaRiONJKYvvjTV0WGFhdVlXahOHTPzLeN FhGAKQnLgJFVC8PGiaNAQ9lHECTkvh2515HkGDGZH9x/4MYncirXpPYu97/EU4m7 bUqhN/43huHrOsH5vy4ZWg0pNcDmZKnzdQ++eJC8x1HG4VogRO5jB9vlBEVdlIyh ySt/weP1HbsFZZqRCC/hK2k8X3umwV6i1ERfefUWcnTP/sr/RqOBSEn7klI7ZX5p GiQEc74qtaIwjkJCI3sH5lAXzto8vQnG93breoMw/wGRHrtN0I2MZOnoEW4Vq5w9 FYrG+tCHo4Wskjz+1fqgz7vvAgMBAAGjggMuMIIDKjAfBgNVHSMEGDAWgBQM22yC SQ9KZwq4FO56xEhSiOtWODAdBgNVHQ4EFgQUmfaC+1L5in+7sN+94LDpz7dSoBEw MwYDVR0RBCwwKoIUKi5jamdjb25zdWx0b3Jlcy5jb22CEmNqZ2NvbnN1bHRvcmVz LmNvbTA+BgNVHSAENzA1MDMGBmeBDAECATApMCcGCCsGAQUFBwIBFhtodHRwOi8v d3d3LmRpZ2ljZXJ0LmNvbS9DUFMwDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY2Rw LnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRMU1JTQUNBRzEuY3JsMHYGCCsGAQUFBwEB BGowaDAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1cy5yYXBpZHNzbC5jb20wPgYI KwYBBQUHMAKGMmh0dHA6Ly9jYWNlcnRzLnJhcGlkc3NsLmNvbS9SYXBpZFNTTFRM U1JTQUNBRzEuY3J0MAwGA1UdEwEB/wQCMAAwggF7BgorBgEEAdZ5AgQCBIIBawSC AWcBZQB1AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABi5KB9tcA AAQDAEYwRAIgJ5sxOUXjhBBltwjty1YjFvuRg5lAerwIgq5voXr+KGoCIAiJr05T 0cplWfWt/zZQb9MAKCnKvcu95bPEA5ciklLWAHUASLDja9qmRzQP5WoC+p0w6xxS ActW3SyB2bu/qznYhHMAAAGLkoH2dgAABAMARjBEAiAGbgCKvhZldoAgPqkWK8v5 jmvVocVaq0Gf7N2LnhtkygIgdWLAhZNR8+wA5rx266l4wgwXOIm2nqSh4O32K0oI XlsAdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAAAYuSgfaoAAAE AwBGMEQCIC6BsOObs093H50Z1mjX29/KD5D9gu+xyu+um+/jC6jLAiA55BUQWAm8 f+wS1qgnkXGn+6UmRE0/WweKT18MCUG+FjANBgkqhkiG9w0BAQsFAAOCAQEADg6D yc3oMw+3quIK85Q9LyJiTi4omx/5QFqzdwc2V0+k16nu9lwD/bvBWMhFw0EVTdqc Rtie1k2g6aJD1bwhOOIGel4D/S6YU3+gQwzG8ge3VfMOnJhc7T0Ts8+YFd4Wwq+2 VPUuKE0fCdgxT1HpOB12XSayh4lfPA0Cnw4RJLv1UnizpK2wgSJ+zhOMfk6lX4Wl 54F3IVXsfJLngkXXfxS/si1jnZ3M8dvYmSgM665OorI6TSsxoekgzbNq0cNitlbU ab52TgwiG34W29RUEuho6nqKbbE8P7Co4dSbGP1WzAyin8XR7WM8roepeukC8Iez mESoeprnAn9UQj8kGQ== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBgslqQpXEWvdtTC7G2M 2Jh3TLYkr2kYjjSSmL7401dFhhYXVZV2oTh0z8y3jRYRgCkJy4CRVQvDxomjQEPZ RxAk5L4dudeR5BgxmR/cf+DGJ3Iq16T2Lve/xFOJu21KoTf+N4bh6zrB+b8uGVoN KTXA5mSp83UPvniQvMdRxuFaIETuYwfb5QRFXZSMockrf8Hj9R27BWWakQgv4Stp PF97psFeotREX3n1FnJ0z/7K/0ajgUhJ+5JSO2V+aRokBHO+KrWiMI5CQiN7B+ZQ F87aPL0Jxvd263qDMP8BkR67TdCNjGTp6BFuFaucPRWKxvrQh6OFrJI8/tX6oM+7 7wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 4075891275881290468808876147799650402 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RapidSSL TLS RSA CA G1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-03 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-03 23:59:59 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cjgconsultores.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20210049523864758595035521057229108590011934123233534355405483931540736923487282944707793009646164918436077234517332461378171606733566034473523700811699900347541640340763883944570830805171663256287734198961065818946950362921678022285107809387447186103628656675711105637639033337280383180370601799777593856499550253359219843384408846458147761205326517173934408322946441679770845155280146258684276102235950366842331876349470216612490997532575304853443574629228548217143849383462437325431996780457945704436435388532801898906721398244017524296910817169110902105234085257748254952066044885568256568881843642155721892543471 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0cdb6c82490f4a670ab814ee7ac4485288eb5638 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 99f682fb52f98a7fbbb0dfbde0b0e9cfb752a011 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cjgconsultores.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cjgconsultores.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.rapidssl.com/RapidSSLTLSRSACAG1.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (106 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.rapidssl.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.rapidssl.com/RapidSSLTLSRSACAG1.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (359 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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