access-latam-01.lmguc.com

- Liberty Mutual Group -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 2b:3a:c1:23:b9:68:04:bf:00:00:00:00:50:f8:46:7b was issued on by Entrust, Inc..

With 15 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Liberty Mutual Group

Organization: Liberty Mutual Group
Organization unit: Hosting
State / Province: New Hampshire
Locality: Portsmouth
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:3a:c1:23:b9:68:04:bf:00:00:00:00:50:f8:46:7b
Serial Number (int): 57461874371966072823944918679403644539
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: cd:17:53:8b:7e:ae:2c:7f:8e:f3:95:e9:49:5f:a0:df:e9:af:7a:2c
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 1d:f8:25:fb:6a:f5:71:5a:a4:2f:2f:de:dc:7a:2f:38:59:02:0e:42
Fingerprint (sha256): c4:51:ae:7d:7b:af:c2:10:ef:99:49:94:62:7c:c7:c4:e2:e7:5b:06:eb:d7:cc:41:71:71:fc:b4:a5:76:d9:68

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate access-latam-01.lmguc.com

15

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for access-latam-01.lmguc.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

access-latam-01.lmguc.com
sip.lmguc.com
sip.libertydirect.pl
sip.libertyinsurance.ie
sip.lu.pl
sip.liberty-insurance.co.uk
sip.liberty.cl
sip.liberty.ec
access-latam-01.libertydirect.pl
access-latam-01.libertyinsurance.ie
access-latam-01.lu.pl
access-latam-01.liberty-insurance.co.uk
access-latam-01.liberty.cl
access-latam-01.liberty.ec
webcon-latam-01.lmguc.com

Other certificates including the domain name lmguc.com

(limited to 100 certificates)
pwwipgf-gflnc01.gfab.lmig.com
access-emea-01.lmguc.com
vwkipgf-lywac01.gfab.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
pwwipgf-gflnc01.gfab.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
vwsipgf-lywac01.gfab.lmig.com
pwwipgf-gflnc02.gfab.lmig.com
pwkipgf-gflnc02.gfab.lmig.com
vwsipgf-lywac01.gfab.lmig.com
latam-webext-pool.lmguc.com
pwkipgf-gflnc01.gfab.lmig.com
latam-wacweb.lmguc.com
access-latam-01.lmguc.com
pwkipgf-gflnc01.gfab.lmig.com
pwkipgf-gflnc01.gfab.lmig.com
vwkipgf-lywac01.gfab.lmig.com
latam-webext-pool.lmguc.com
latam-wacweb.lmguc.com
pwwipgf-gflnc02.gfab.lmig.com
pwwipgf-gflnc02.gfab.lmig.com
latam-webext-pool.lmguc.com
access-latam-01.lmguc.com
PWSIPGF-GFLNC01.gfab.lmig.com
access-latam-01.lmguc.com
access-emea-01.lmguc.com
latam-webext-pool.lmguc.com
PWSIPGF-GFLNC01.gfab.lmig.com
access-latam-01.lmguc.com
access-emea-01.lmguc.com
PWSIPGF-GFLNC01.gfab.lmig.com
access-emea-01.lmguc.com
pwkipgf-gflnc02.gfab.lmig.com
latam-webext-pool.lmguc.com
access-apac-01.lmguc.com
vwkipgf-lywac01.gfab.lmig.com
pwkipgf-gflnc01.gfab.lmig.com
access-emea-01.lmguc.com
latam-wacweb.lmguc.com
latam-webext-pool.lmguc.com
PWSIPGF-GFLNC02.gfab.lmig.com

Certificate

The complete raw certificate details for access-latam-01.lmguc.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Gekn9XkG5uC8utwVsyy
hbdfEDNTtiAuP2qrKQZ/vuBxR1uLiAm131+zp0cmYrnLS8+rEwogGo1d1KjKjzlC
YrbhAIx89899SStL6azMzXVpQ7niVrfDidgzk8PRT6oVpGJNxc2/HN01xcAnk11+
KzMp6bNN2v6aXty9GRUQKM1POGYw5VqjgrsEGk+14WKzfM4SeVVo0hWbaUI/AuUO
1oUEnDjQKYmdUGu9YONWs15OhQH5lXyQ/gxuqlFC+bTOLT6uIIIvYutPv8Kr8rhF
usMo0dJNoRcvFAhXHmYWPT+J87kTWUomiEvt9BDbbpocZHKvM873QdbLWAo/+Sf/
GQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 57461874371966072823944918679403644539
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-07 19:50:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-07 20:20:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New Hampshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portsmouth'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Liberty Mutual Group'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Hosting'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access-latam-01.lmguc.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27318582172308371358902645662745649837962874712063772587858805014462491370823643436205829946657673068342043375588518064328345307259186239851192168643164217313452749848757085948411185270962449322627401608375092247023932568627556436756720198126855499947983514137331300439010298151644635093561222785108970757902113220564061409762666596730715251129626760118291970811044965531619867596635595092637360210811558791183273752598836406186993427766489537188751925275259419782250582309149667068400503850258834386305932536220727921087711120134212851465592201559768463090750591956586008873067343147110244958716316441524766524309273
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (383 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.lmguc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lmguc.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertydirect.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.lu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty-insurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.libertydirect.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.libertyinsurance.ie'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.lu.pl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.liberty-insurance.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.liberty.cl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access-latam-01.liberty.ec'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webcon-latam-01.lmguc.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (360 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cd17538b7eae2c7f8ef395e9495fa0dfe9af7a2c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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