interlink.diatool.diarz.net

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0e:48:e8:72:69:c9:55:cd:23:c5:82:2e:2a:5a:48:66 was issued on by Amazon.

With 8 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=interlink.diatool.diarz.net

Amazon

Organization: Amazon
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0e:48:e8:72:69:c9:55:cd:23:c5:82:2e:2a:5a:48:66
Serial Number (int): 18987751898581228929875297212986706022
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 35:8d:8e:14:71:62:ab:aa:9e:51:84:d4:f3:6c:14:ba:ec:d1:6a:be
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): 08:03:12:70:16:43:3b:c0:f6:7f:ee:27:30:1a:66:13:b2:ab:96:b2
Fingerprint (sha256): b4:15:46:7c:01:6d:ea:14:2c:4b:37:30:80:c3:0b:da:0e:bf:9c:01:af:b1:48:a4:1f:3c:fe:6a:cb:69:f0:eb

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate interlink.diatool.diarz.net

8

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for interlink.diatool.diarz.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

interlink.diatool.diarz.net
*.interlink.systems
interlink.systems
*.diainterlink.de
*.diainterlink.systems
diainterlink.de
*.interlink.diatool.diarz.net
diainterlink.systems

Other certificates including the domain name diarz.net

(limited to 100 certificates)
kw-webshop.de
skom.rms.brand.diarz.net
fs-demo.sms.brand.diarz.net
shop.nordparts.lu
wecker.rcommerce.net
meiseleder.at
wuetschner-shop.de
industrietechnik24.rms.brand.diarz.net
unimatic.rms.brand.diarz.net
krinner.rms.brand.diarz.net
geyer.rms.brand.diarz.net
production.sandvik.sales.diarz.net
wallboard.monitoring.diatool.diarz.net
production.infraserv.sales.diarz.net
pspneumatik.rms.brand.diarz.net
production.precitool.sales.diarz.net
ackrutat.de
ps-hydraulik.diabrand.shop
riegler.shop
production.mb.sales.diarz.net
production.montalpina.sales.diarz.net
production.kfw.sales.diarz.net
mls-safety-shop.de
toologic-webshop.de
bng-schlueter.diabrand.shop
production.pchpoints.sales.diarz.net
altmann-industrietechnik.shop
kl-arbeitsschutz.de
webshop.schmitter-hydraulik.de
wecker.rms.brand.diarz.net
doeringshoff.de
muehlberger-shop.de
riegler.shop
fecht-hydraulik.diabrand.shop
tsm.rms.brand.diarz.net
approval.dia.procure.diarz.net
production.mls.sales.diarz.net
kw-webshop.de
wille.rms.brand.diarz.net
pwk-shop.de
pch-portal.com
approval.dia.sales.diarz.net
dia.alexander-buerkle.com
ksa-shop.de
muehlberger-shop.de
kfw-webshop.de
nordparts.sms.brand.diarz.net
altmann-industrietechnik.shop
fey.rms.brand.diarz.net
rolfwebershop.de
pwk-shop.de
fecht.sms.brand.diarz.net
kfw-webshop.de
interlink.diatool.diarz.net
mls-safety-shop.de
ackrutat.de
groll.rms.brand.diarz.net
production.kw.sales.diarz.net
shop.nordparts.lu
rolfwebershop.de
bosch.sms.brand.diarz.net
kl-arbeitsschutz.de
moesch.rms.brand.diarz.net
demo.rms.brand.diarz.net
bng.sms.brand.diarz.net
erp.diatool.diarz.net
production.klingseisen.sales.diarz.net
toologic-webshop.de
trg.rms.brand.diarz.net
ps-hydraulik.sms.brand.diarz.net
rittmeier.rms.brand.diarz.net
montalpina-shop.com
montalpina-shop.com
doeringshoff.de
production.schmitter.sales.diarz.net
wilde-hydraulik.sms.brand.diarz.net
neuendorf-shop.de
dzbamberg.rms.brand.diarz.net
hanselmann.rms.brand.diarz.net
wolfgang-bosch.diabrand.shop
pwk-shop.de
wilde-hydraulik.diabrand.shop
production.kl.sales.diarz.net
kl-webshop.de

Certificate

The complete raw certificate details for interlink.diatool.diarz.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGfTCCBWWgAwIBAgIQDkjocmnJVc0jxYIuKlpIZjANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTIyMTAyMzAwMDAwMFoXDTIzMTEyMTIzNTk1OVowJjEk
MCIGA1UEAxMbaW50ZXJsaW5rLmRpYXRvb2wuZGlhcnoubmV0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPIYyWN0fuECBII97t2R6hmvrTbqIg1OSIc
7Uv+irCc2u/lMT1LqbQmQVR8ojBjfHjOwVHttVsjgZjCXhHuqAUooC/tBBAC3Ri1
K3MxZUwWJQqKP13huBB8WMOA+fvmVTVNMkCRG31KbbQhvJWD/ZiL0nM/L+pV2eo1
KooZQUtFB0JTVUuKBgSPtvsM5jb3BL+BWjfKYbptwrABfRHQRkJ0ya8J06PcXJsP
g1m5KdLbjwsUWw7TV9B2iZaLOiKlyh2Bc0lWJK3NwOLfFM6cIe/SbzN1z1ZVkgNt
oj9sjuOx0tEI84xudBcf1h4SR21b+Xi5/A9SRqM7ZU3phCV82QIDAQABo4IDjzCC
A4swHwYDVR0jBBgwFoAUwDFSzVpQw4J8dHHOy+mc+XrrguIwHQYDVR0OBBYEFDWN
jhRxYquqnlGE1PNsFLrs0Wq+MIHBBgNVHREEgbkwgbaCG2ludGVybGluay5kaWF0
b29sLmRpYXJ6Lm5ldIITKi5pbnRlcmxpbmsuc3lzdGVtc4IRaW50ZXJsaW5rLnN5
c3RlbXOCESouZGlhaW50ZXJsaW5rLmRlghYqLmRpYWludGVybGluay5zeXN0ZW1z
gg9kaWFpbnRlcmxpbmsuZGWCHSouaW50ZXJsaW5rLmRpYXRvb2wuZGlhcnoubmV0
ghRkaWFpbnRlcmxpbmsuc3lzdGVtczAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9j
cmwucjJtMDIuYW1hem9udHJ1c3QuY29tL3IybTAyLmNybDATBgNVHSAEDDAKMAgG
BmeBDAECATB1BggrBgEFBQcBAQRpMGcwLQYIKwYBBQUHMAGGIWh0dHA6Ly9vY3Nw
LnIybTAyLmFtYXpvbnRydXN0LmNvbTA2BggrBgEFBQcwAoYqaHR0cDovL2NydC5y
Mm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY2VyMAwGA1UdEwEB/wQCMAAwggF9
BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AK33vvp8/xDIi509nB4+GGq0Zyldz7EM
JMqFhjTr3IKKAAABhAaH0s0AAAQDAEYwRAIgULhkh8FuSHYdl47k6dLaZgNFvkLf
fEmmfxOt/8JI8z8CIEDyQ7hBkAtgJ8LwdQv3Evlcwo+YkiDnalJakDIzKXJHAHUA
s3N3B+GEUPhjhtYFqdwRCUp5LbFnDAuH3PADDnk2pZoAAAGEBofTDQAABAMARjBE
AiBsql5ooT78s0NMl94IwCC2dw7FOzzJtslWeuplYxcBKgIgDfdeNr0xHIQZ1Wig
dg9j5WrKcljci4zrEa6pF15vV+EAdwC3Pvsk35xNunXyOcW6WPRsXfxCz3qfNcSe
HQmBJe20mQAAAYQGh9K3AAAEAwBIMEYCIQCvimvQWdi4EL/KDnbT7iu5i7NqXWp9
fN16KD4gOLs8xQIhAMQUuEJUPZFghAJD4uaGVNOKSL4LPfMtGIDUUfZpT7hnMA0G
CSqGSIb3DQEBCwUAA4IBAQBEkC5Qc9zBnJtlrX09+WqR0fER3crxyH2vFylEvIGQ
hCoxT8S0QQeGS4RMwquaK8IQ/+TJT60arFgff8os2tKRmihNsq9vC3FMvh9nWuGM
7S6lYzmjTRg1DIeJYK2NC8jldgkR+EvCYwW+vdsQvjzWnPuGH+L6r+T5xW2JwLcp
//BamnHzJ3SyFY57VQgxaW13HFV2tO6fYQDDPvaJh9c/TiknQGDTW+ph/UNep1/3
0OYU0O2N+2cVEPdh3l/giosV9i6RxhhZB9ZXn9runppteK21gEY39yDHcp6K85kl
Wgf/ssvIXOt8VvKOcWiLvRW89Qtb1EJf6b7EfEUFe4Yh
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwOPIYyWN0fuECBII97t2
R6hmvrTbqIg1OSIc7Uv+irCc2u/lMT1LqbQmQVR8ojBjfHjOwVHttVsjgZjCXhHu
qAUooC/tBBAC3Ri1K3MxZUwWJQqKP13huBB8WMOA+fvmVTVNMkCRG31KbbQhvJWD
/ZiL0nM/L+pV2eo1KooZQUtFB0JTVUuKBgSPtvsM5jb3BL+BWjfKYbptwrABfRHQ
RkJ0ya8J06PcXJsPg1m5KdLbjwsUWw7TV9B2iZaLOiKlyh2Bc0lWJK3NwOLfFM6c
Ie/SbzN1z1ZVkgNtoj9sjuOx0tEI84xudBcf1h4SR21b+Xi5/A9SRqM7ZU3phCV8
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18987751898581228929875297212986706022
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-10-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'interlink.diatool.diarz.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24350078420216630038941901071443552199947110011435644323427744461638353111382718601536673871322787589903410257882478627569045115286848803632043500508309417226097345587145056256158444000021903782602909116217632171970625329708098107307698283094692124718726175599024321979539881247688703096141287587080090630632309310507036591463457901943715585508471124514086542877865214067655324246514933527848504068517209060491926282079803824309342107596398805100497551204635007476276153688716681338731013087196546051767683519004964564292586046195657701541826018125478409153220589243259657510378942267914539637303901146207826280283353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							358d8e147162abaa9e5184d4f36c14baecd16abe
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (185 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interlink.diatool.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interlink.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'interlink.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diainterlink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.diainterlink.systems'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diainterlink.de'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.interlink.diatool.diarz.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'diainterlink.systems'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							0167007500adf7befa7cff10c88b9d3d9c1e3e186ab467295dcfb10c24ca858634ebdc828a000001840687d2cd0000040300463044022050b86487c16e48761d978ee4e9d2da660345be42df7c49a67f13adffc248f33f022040f243b841900b6027c2f0750bf712f95cc28f989220e76a525a903233297247007500b3737707e18450f86386d605a9dc11094a792db1670c0b87dcf0030e7936a59a000001840687d30d000004030046304402206caa5e68a13efcb3434c97de08c020b6770ec53b3cc9b6c9567aea656317012a02200df75e36bd311c8419d568a0760f63e56aca7258dc8b8ceb11aea9175e6f57e1007700b73efb24df9c4dba75f239c5ba58f46c5dfc42cf7a9f35c49e1d098125edb499000001840687d2b70000040300483046022100af8a6bd059d8b810bfca0e76d3ee2bb98bb36a5d6a7d7cdd7a283e2038bb3cc5022100c414b842543d9160840243e2e68654d38a48be0b3df32d1880d451f6694fb867
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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