partners.dcollege.net

Issued by Amazon

About this certificate

This digital certificate with serial number 03:03:3a:b6:d0:86:1d:9d:ff:6a:08:17:33:fb:2c:cd was issued on by Amazon.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=partners.dcollege.net

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 03:03:3a:b6:d0:86:1d:9d:ff:6a:08:17:33:fb:2c:cd
Serial Number (int): 4004451741747959460430532754630454477
Serial Number lenght: 122 bits, 16 octets

SubjectKeyId: 51:ca:c9:8e:c3:f2:fd:5f:56:41:13:50:ed:c2:20:c6:17:d3:83:9f
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 86:6e:05:cf:2a:38:1d:b2:84:b4:81:4c:57:a4:80:72:83:93:1d:d1
Fingerprint (sha256): b6:24:98:ef:04:76:59:7d:0d:07:16:dc:ac:a5:af:5a:45:3e:93:25:02:fb:f6:13:cc:2b:6a:da:e1:20:e4:0d

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate partners.dcollege.net

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for partners.dcollege.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

partners.dcollege.net
*.blackboard.com
learn9-stage.irttest.drexel.edu
partners-learn.irttest.drexel.edu

Other certificates including the domain name dcollege.net

(limited to 100 certificates)
rmcplogin.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
partners.dcollege.net
vle.dcollege.net
neumann.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
rmcp.dcollege.net
vpn.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
learn.dcollege.net
us-east-1-san4.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
rmcpapi.dcollege.net
pmt.dcollege.net
partners.dcollege.net
rmcpapp.irttest.dcollege.net
us-east-1-san4.blackboard.com
cabrini.dcollege.net
rmcp.irttest.dcollege.net
mkt.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
medaille.dcollege.net
reports.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san4.blackboard.com
learn.dcollege.net
learn.dcollege.net
us-east-1-san3.blackboard.com
learning.dcollege.net
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
reporting.dcollege.net
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
rmcp.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
vpn.dcollege.net
broadcast.dcollege.net
us-east-1-san4.blackboard.com
reports-dev.irttest.dcollege.net
partners.dcollege.net
neumann.dcollege.net
mkt-dev.irttest.dcollege.net
tpgadmin.dcollege.net
us-east-1-san4.blackboard.com
neumann.dcollege.net
us-east-1-san4.blackboard.com
rmcpapi.irttest.dcollege.net
mkt.dcollege.net
pmt.irttest.dcollege.net
its.learning.dcollege.net
learn.dcollege.net
reports.irttest.dcollege.net
mkt.irttest.dcollege.net
partners.dcollege.net
us-east-1-san4.blackboard.com
learn-1513041-1.dcollege.net
us-east-1-san3.blackboard.com
rmcpadmin.dcollege.net
cabrini.dcollege.net
us-east-1-san4.blackboard.com
medaille.dcollege.net
cabrini.dcollege.net
pmt.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
pmt-dev.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san4.blackboard.com
pmt.dcollege.net
pmt.irttest.dcollege.net
tpgadmin.irttest.dcollege.net
us-east-1-san3.blackboard.com
rmcplogin.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san3.blackboard.com
rmcpapi.irttest.dcollege.net
pmt.irttest.dcollege.net
mkt.irttest.dcollege.net
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
pmt.irttest.dcollege.net
us-east-1-san3.blackboard.com
us-east-1-san4.blackboard.com
us-east-1-san3.blackboard.com
partners.dcollege.net
rmcpapp.dcollege.net
us-east-1-san3.blackboard.com
reporting.dcollege.net

Certificate

The complete raw certificate details for partners.dcollege.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFyTCCBLGgAwIBAgIQAwM6ttCGHZ3/aggXM/sszTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDEwMTUwMDAwMDBaFw0yMTExMTQy
MzU5NTlaMCAxHjAcBgNVBAMTFXBhcnRuZXJzLmRjb2xsZWdlLm5ldDCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBALXAFrq0z07rVrIzt+FbAZAgWZcT11u9
rImW/NCkHUqUBdCNB+n/nQRr1GXuUYNJRpXNh3dCCyvqUmxJyMshdk+0QrJPCPWO
envId5EFWIGBAWIMEdj2X9ns7pXDDAoB0lKhQtuW65HIa0CwMp+ClpdSQF/uZc3F
x8zMPj2n0J5/jO8ixp+TSkKBRUBsVHDTTPK504YayHW76+11jEZKfVgA/AqtauWd
0x2EMZ7g04blel/ctPeKxWoslDcPk9D0rNzwQRgQIsLpJ7Z8ST9UKtOODuJ+N33z
hY5ort/d17KRWiYC6cyGER4HDpIiIGo1PkadaF3je+Q/yBcAPe4owz0CAwEAAaOC
AtcwggLTMB8GA1UdIwQYMBaAFFmkZgZSoHuVkjyjlAcnlnRb+T3QMB0GA1UdDgQW
BBRRysmOw/L9X1ZBE1DtwiDGF9ODnzB2BgNVHREEbzBtghVwYXJ0bmVycy5kY29s
bGVnZS5uZXSCECouYmxhY2tib2FyZC5jb22CH2xlYXJuOS1zdGFnZS5pcnR0ZXN0
LmRyZXhlbC5lZHWCIXBhcnRuZXJzLWxlYXJuLmlydHRlc3QuZHJleGVsLmVkdTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMDsG
A1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwuc2NhMWIuYW1hem9udHJ1c3QuY29t
L3NjYTFiLmNybDAgBgNVHSAEGTAXMAsGCWCGSAGG/WwBAjAIBgZngQwBAgEwdQYI
KwYBBQUHAQEEaTBnMC0GCCsGAQUFBzABhiFodHRwOi8vb2NzcC5zY2ExYi5hbWF6
b250cnVzdC5jb20wNgYIKwYBBQUHMAKGKmh0dHA6Ly9jcnQuc2NhMWIuYW1hem9u
dHJ1c3QuY29tL3NjYTFiLmNydDAMBgNVHRMBAf8EAjAAMIIBBAYKKwYBBAHWeQIE
AgSB9QSB8gDwAHUA9lyUL9F3MCIUVBgIMJRWjuNNExkzv98MLyALzE7xZOMAAAF1
Kf7LEgAABAMARjBEAiBHRIlNpmldAiGvHH3DtH5JTg8u5fHpizsphfBTdVOa9QIg
JxpYxLmGtme4vLPL+2k2Kzpvle1VS6FHnz2Vvd5VVt4AdwBc3EOS/uarRUSxXprU
VuYQN/vV+kfcoXOUsl7m9scOygAAAXUp/stgAAAEAwBIMEYCIQCuR5uK6e3a79c4
K6GVAoyDVLD+zMif164BgxsAvOinmQIhAKLxYVVjcEqTHZ7tXu61XyvAZYEllcde
elbd8ppv31P/MA0GCSqGSIb3DQEBCwUAA4IBAQAJ3U7pU8RBuWa91KDB8DaqrRBt
M8YAIEe//UqJX3bkWwWvuIYA4E3SnsAjUxjqHpH1Mj2vNvw9fRtYDHzxmckUu8Bv
b9iUUxNmiL8Ymqbe0qZ8P2i9WwKv9bdiHodRmHNJxrNYVuDC4hU8dUXUozw51V8e
owWdOhNuuhEkxlmtmAKW6A3sxnJgahudLuBvu4D39io6lOAAAafbIf6yAhPwFC1Q
vQy/egZEJCh7gAkujzDITg0gO2NQVwI4VbRDLZ3T9lCWJf3lKPMITLbwBppL2i/p
eeb3jfTQRKH+kV+45IIZ7kVmCTMVrWJ+D2v7wpwZFZYY/xsWvfZGbt9qh0/C
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcAWurTPTutWsjO34VsB
kCBZlxPXW72siZb80KQdSpQF0I0H6f+dBGvUZe5Rg0lGlc2Hd0ILK+pSbEnIyyF2
T7RCsk8I9Y56e8h3kQVYgYEBYgwR2PZf2ezulcMMCgHSUqFC25brkchrQLAyn4KW
l1JAX+5lzcXHzMw+PafQnn+M7yLGn5NKQoFFQGxUcNNM8rnThhrIdbvr7XWMRkp9
WAD8Cq1q5Z3THYQxnuDThuV6X9y094rFaiyUNw+T0PSs3PBBGBAiwukntnxJP1Qq
044O4n43ffOFjmiu393XspFaJgLpzIYRHgcOkiIgajU+Rp1oXeN75D/IFwA97ijD
PQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 4004451741747959460430532754630454477
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-15 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-14 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'partners.dcollege.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22943855709792632769043903668611520456075917254576296441092098646558387995630836322365773168514560286757550023488421184114049733523000277964736136774043173284148904112786310429248316971865712071563419782629697079785541428357121208576718999385527525302840696617114406638931096803861533370358016270755746821378368386338705218642885648282000766945259308925285138638056164180629638764083438778809121796991469775155469653999401759240439817267764503366003606707996293973421538342979051857150251779929180442674803682951700566043351589314939799204852839668972293258117327240493652605370491572342892275949341662819659117282109
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51cac98ec3f2fd5f56411350edc220c617d3839f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners.dcollege.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.blackboard.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'learn9-stage.irttest.drexel.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'partners-learn.irttest.drexel.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f0007500f65c942fd1773022145418083094568ee34d131933bfdf0c2f200bcc4ef164e30000017529fecb12000004030046304402204744894da6695d0221af1c7dc3b47e494e0f2ee5f1e98b3b2985f05375539af50220271a58c4b986b667b8bcb3cbfb69362b3a6f95ed554ba1479f3d95bdde5556de0077005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca0000017529fecb600000040300483046022100ae479b8ae9eddaefd7382ba195028c8354b0feccc89fd7ae01831b00bce8a799022100a2f1615563704a931d9eed5eeeb55f2bc065812595c75e7a56ddf29a6fdf53ff
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0009dd4ee953c441b966bdd4a0c1f036aaad106d33c6002047bffd4a895f76e45b05afb88600e04dd29ec0235318ea1e91f5323daf36fc3d7d1b580c7cf199c914bbc06f6fd89453136688bf189aa6ded2a67c3f68bd5b02aff5b7621e8751987349c6b35856e0c2e2153c7545d4a33c39d55f1ea3059d3a136eba1124c659ad980296e80decc672606a1b9d2ee06fbb80f7f62a3a94e00001a7db21feb20213f0142d50bd0cbf7a064424287b80092e8f30c84e0d203b635057023855b4432d9dd3f6509625fde528f3084cb6f0069a4bda2fe979e6f78df4d044a1fe915fb8e48219ee4566093315ad627e0f6bfbc29c19159618ff1b16bdf6466edf6a874fc2