b-h-m.spc.us00.int.con-veh.net

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 0b:a0:01:70:e3:66:e2:18:00:00:00:00:50:ef:d1:59 was issued on by Entrust, Inc..

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0b:a0:01:70:e3:66:e2:18:00:00:00:00:50:ef:d1:59
Serial Number (int): 15452304677340927632376000586483487065
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: bb:5e:96:59:22:a2:16:33:0d:e3:ce:9c:ac:15:e5:67:6d:b1:f9:6c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 14:5c:fc:f2:5d:ef:0d:a5:f1:74:52:a3:fa:de:24:9e:b6:2d:11:82
Fingerprint (sha256): bd:c7:d2:e0:ee:a2:a7:93:ae:08:cf:86:af:73:7c:68:aa:66:71:6f:02:bf:ae:f9:44:68:18:83:95:d5:34:9d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate b-h-m.spc.us00.int.con-veh.net

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-h-m.spc.us00.int.con-veh.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b-h-m.spc.us00.int.con-veh.net
b-h-m.spr.us00.int.con-veh.net
b-h-s.spc.us00.int.con-veh.net
b-h-s.spr.us00.int.con-veh.net
b-h-s.dp.us00.int.con-veh.net
w-h-s.spr.us00.int.con-veh.net
w-h-s.app.us00.int.con-veh.net
w-h-s.auth.us00.int.con-veh.net
w-h-s.cdn.us00.int.con-veh.net
i-h-s.dp.us00.int.con-veh.net
i-h-s.spr.us00.int.con-veh.net
i-h-s.spc.us00.int.con-veh.net
i-h-s.app.us00.int.con-veh.net
i-h-s.auth.us00.int.con-veh.net
m-h-s.mon.us00.int.con-veh.net
o-h-s.mgmt.us00.int.con-veh.net

Other certificates including the domain name con-veh.net

(limited to 100 certificates)
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-qa01.con-veh.net
carnet-CUBICclient.con-veh.net
ecert-prod01-ca.con-veh.net
carnet-verizonclient.con-veh.net
b-h-m.spc.us00.p.con-veh.net
carnet-verizonclient-qa.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-dev01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-qa01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.int.con-veh.net
carnet-boschclient.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
carnet-boschclient-qa.con-veh.net
ecert-dev01.con-veh.net
carnet-CUBICclient-qa.con-veh.net
b-h-m.spc.us00.int.con-veh.net

Certificate

The complete raw certificate details for b-h-m.spc.us00.int.con-veh.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuDE+icG5IakGmTt5eOLo
LktRFjcnoYer+cDkZeClkWfdhj2+8yZ76cVugnQ7Gokd0wvd1mqvSVFux1rnyZna
U8Vhq7Q0dWFL/7Cctpl0XmpZTJDfOPONhf0jtrriMI2OVUwLmkrQlQvh0NAgoYuu
P5Z0qMTpUgDKD5sJOdhnUssrC+zmn9CU6VFKXQEOV2iJ5rgGaEe7ynuIu9JQ9MRq
kwg4p/wnpcC7h/cxq1q9aBtyiPbHYDL9TEcuWtWBjVXPtPhcweEx7I8djc/SrE30
BGeu5qPG57mslDwOcfXiEYV2bDaQfriDaAaI1FakD8R34/1x/tHm80qKatV2ySV6
HwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 15452304677340927632376000586483487065
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-03 18:14:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-03 18:44:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-h-m.spc.us00.int.con-veh.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23252131377957332519486304154868715925590844254574544832767508399558176042846928185922347818010986075265689077234860881929857052529998168539862826118373617037985774270347650657592802251031201294133858202071894750729510212850840488930331312613812684770112126149906683936336237490167441873783504584947649467104923796411007384452719726458542091438185828982542273162337755729526593637116892446254802800073982741479974469020052420317231419294994616691930957907484318310666048402546747945153326162388506708517714223568091960976971535287520900947574033234160605649168475379887404514578801875549459659387567146188784659692063
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (517 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.cdn.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spr.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.app.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.auth.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-h-s.mgmt.us00.int.con-veh.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bb5e965922a216330de3ce9cac15e5676db1f96c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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