eu06scjlfeapool.scj.csfm.global

- S.C. Johnson & Son Inc. -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number ab:88:01:47:d4:ac:8b:2f:00:00:00:00:50:e6:3b:f6 was issued on by Entrust, Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

S.C. Johnson & Son Inc.

Organization: S.C. Johnson & Son Inc.
State / Province: Wisconsin
Locality: Racine
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ab:88:01:47:d4:ac:8b:2f:00:00:00:00:50:e6:3b:f6
Serial Number (int): 228004165625409907587506509031678557174
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: ce:62:66:1f:72:25:0c:5f:2e:3c:39:16:d5:d6:35:b3:06:a0:d8:01
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): b2:3b:f5:ab:b0:3f:36:5e:b8:8d:a9:e9:62:e7:1b:19:ed:c0:82:65
Fingerprint (sha256): c2:e5:8c:ce:5b:df:b8:1b:80:db:34:25:ce:05:dc:4f:20:9e:d0:2c:37:cd:c2:8a:27:e3:3c:81:94:52:95:e4

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate eu06scjlfeapool.scj.csfm.global

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eu06scjlfeapool.scj.csfm.global

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eu06scjlfeapool.scj.csfm.global
admin.scj.oncsfm.com
eu06scjlfeawebin01.scj.oncsfm.com
lyncdiscoverinternal.scj.com
join.scj.oncsfm.com
dialin.scj.oncsfm.com
lyncdiscoverinternal.scj.oncsfm.com
eu06scjlfea03.scj.csfm.global
sip.scj.com
eu06scjlfea01.scj.csfm.global
eu06scjlfea02.scj.csfm.global
sip.scj.oncsfm.com
scheduler.scj.oncsfm.com
sip.debgroup.com
sip.debmed.com
sip.debstoko.com
lyncdiscoverinternal.debgroup.com
lyncdiscoverinternal.debmed.com
lyncdiscoverinternal.debstoko.com

Other certificates including the domain name csfm.global

(limited to 100 certificates)
ap05scjlaeapool.scj.csfm.global
na09sollaeapool.sol.csfm.global
eu08scjlaeapool.scj.csfm.global
eu06scjlaeapool.scj.csfm.global
eu08scjlfeapool.scj.csfm.global
na09sollaeapool.sol.csfm.global
ap05scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global
ap03scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
na12scjlaeapool.scj.csfm.global
na12scjlfeapool.scj.csfm.global
na09scjlaeapool.scj.csfm.global
eu06scjlfeapool.scj.csfm.global
ap04scjlfeapool.scj.csfm.global
ap04scjlaeapool.scj.csfm.global
na09scjlfeapool.scj.csfm.global
na09sollfeapool.sol.csfm.global

Certificate

The complete raw certificate details for eu06scjlfeapool.scj.csfm.global in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8EHgiQzPfLBCporWJ3O
Bntha0xaZnry6A01nMua+TIh7kaJwL3qRjqYuF5Tu1AryDr2lbyyHHMjW5IM6UJx
9XZfc/I96FXRUL1Nwx56LUQHTLPfzJLqIN93DaZAkm0dG96pTpyyunZ5ium7w57u
2t2aeqzizr709JBCntqgGXXhRMsQInp8eUShqWadWn5RpJh/GxTxFiqdd82xbr2/
dor7TxqmnMsbDFUUBhzmeVW2IK1+c82TGoLxUXQWJQg9RNEQJkr0sK9JuQET6udo
SeKgTN560G/EmP1WiCxQXJdEP9WkoCpEygYNhXmkEFyNR4y0XKbx3bKU1hRifs/b
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 228004165625409907587506509031678557174
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-15 20:55:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-31 21:25:41 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Wisconsin'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Racine'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'S.C. Johnson & Son Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eu06scjlfeapool.scj.csfm.global'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21176983239375389834274790610089451220422605968270305819114564955573077320039798234354390197906087299545308026280125575497704921687149601363044576280362181728277809355993256163599628090687531285312476933445314137636809433977626571070062051343474134665711231424241937188082475006293083387852566775761147538043443230291169975327028905594328168827367619761071528213895521379923586267068441903761702980007872792718353761167593765374294690006214232578203049799716150061032295069816149064267764506272466670050178816237878402438120339407978745414249271863110012502860787928182728069922502392651124923180324157167754762247013
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (512 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu06scjlfeapool.scj.csfm.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu06scjlfeawebin01.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.scj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'join.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dialin.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu06scjlfea03.scj.csfm.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.scj.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu06scjlfea01.scj.csfm.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eu06scjlfea02.scj.csfm.global'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'scheduler.scj.oncsfm.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.debstoko.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debgroup.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debmed.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscoverinternal.debstoko.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ce62661f72250c5f2e3c3916d5d635b306a0d801
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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