www.avantageaviva.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 05:af:d1:3e:7b:4a:8d:fd:ca:70:40:ca:bf:a9:67:94 was issued on by Amazon.

With 50 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=www.avantageaviva.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 05:af:d1:3e:7b:4a:8d:fd:ca:70:40:ca:bf:a9:67:94
Serial Number (int): 7559035903078200536983899647423113108
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 40:96:6d:85:96:10:b1:6a:70:38:66:d0:bb:0c:28:4c:e3:40:23:05
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 94:d7:74:8a:e0:d3:bd:27:15:63:c6:01:fd:30:45:51:b6:e5:cc:58
Fingerprint (sha256): b4:11:9f:e1:b9:00:e2:df:8d:54:5a:ed:47:96:8a:2a:13:7e:77:b4:89:fd:06:71:b7:38:e4:e3:c8:a1:a4:93

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate www.avantageaviva.com

50

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.avantageaviva.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.avantageaviva.com
www.avivastaffpension.co.uk
www.flasfund.co.uk
www.avivatransfer.co.uk
www.protectionetancheaviva.com
www.myavivastadium.ie
avivaprivacy.uk
www.avivawellbeingrewards.com
www.avivapartenaire.ca
vimeo-player.at.aviva.com
www.wlfund.co.uk
www.avivastaffpensions.co.uk
www.friendslife.co.uk
www.myavivaflex.co.uk
www.avantageaviva.ca
www.avivawellbeingrewards.co.uk
www.autoenrolmentplanner.co.uk
www.bcmotorcycle.uk
www.avivawaterprotection.com
www.myavivastadium.com
www.avivabrand.com
www.aviva-direct.ie
www.43.fpinternational.com
upgrademypension.aviva.co.uk
www.apprentices.aviva.co.uk
www.monaviva.avivaassurance.ca
www.avivasavesmarter.co.uk
www.advantageaviva.ca
www.bcmotorcycle.ca
www.avivahealth.ie
www.ecommunity.aviva.co.uk
www.bcmotorcycle.co.uk
www.bcmotorcycle.net
www.avivaadvantage.com
www.riskasyst.ie
broker.aviva.co.uk
www.avivawaterprotection.ca
www.flcfund.co.uk
www.olab.aviva.com
wlfund.co.uk
retirementannuity.aviva.co.uk
www.graduates.aviva.co.uk
www.avivaadvantage.ca
www.bcmotorcycle.com
www.protectionavivacontreleau.ca
www.avivadirect.ie
www.library.aviva.com
www.protectionavivacontreleau.com
www.advantageaviva.com
www.protectionetancheaviva.ca

Other certificates including the domain name avantageaviva.com

(limited to 100 certificates)

Certificate

The complete raw certificate details for www.avantageaviva.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqcCFtWSdDAPK7nETx6MK
pTgqWDsscxpobM5qvGRYIpf3BsXA+uZoFJ5cbH/K0SmVq06FB+InwLYYtqQlzLdb
JN8MHtUi0DSY4Gai7urPC24+/wUPd58jFzr0G97Hb2y4SF2s6dKld3/eZlgjSOOl
Q5BgAzRCdktr+5Af07QKUaQzEFD9jRuk77CkcYRikGFwC3JKT7iQxvCkEBSG/tEX
D+2v77DABM8UjhoyNP33lmhxW5AH3HpL4dLdq7bu1Esyy0jJAtc1VzHgm2lDrTKZ
rhTeaP1aIQ+vIL3CcgGrXSRCDx+Ge+jnL/DXun3vGWc43Nw4cs2skEgOAC6wQtsz
OQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7559035903078200536983899647423113108
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-26 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.avantageaviva.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21429209823267886750242333858267749801423411123899498061057062727869635281880161299244674116872792110535105216987678192758566090163214107169851467292933142676894000797885421709541587048556660429170796763099581506720785329612391859031972240457806916485731251665594206705780286205194604398482815957110701287697869113414385763506621989621775947433868449830872352030001251120039991811643865046514099383516389537837816946109240948272805800820335048937703668639859267955015671170129366996674949404595148360088608898929135596609056336562417343220431657517891814788676836852580150819500492819946847008045663041246333972984633
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40966d859610b16a703866d0bb0c284ce3402305
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (1251 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpension.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flasfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivatransfer.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'avivaprivacy.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivapartenaire.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vimeo-player.at.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivastaffpensions.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.friendslife.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivaflex.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawellbeingrewards.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.autoenrolmentplanner.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.myavivastadium.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivabrand.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.aviva-direct.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.43.fpinternational.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'upgrademypension.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.apprentices.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.monaviva.avivaassurance.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivasavesmarter.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivahealth.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ecommunity.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.riskasyst.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'broker.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivawaterprotection.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.flcfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.olab.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wlfund.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'retirementannuity.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.graduates.aviva.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivaadvantage.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bcmotorcycle.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.avivadirect.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.library.aviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionavivacontreleau.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.advantageaviva.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.protectionetancheaviva.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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