sg2.bookingmotor.com

Issued by Amazon

About this certificate

This digital certificate with serial number 04:02:64:33:50:58:d3:8b:b0:64:38:01:62:83:af:ed was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sg2.bookingmotor.com

Amazon

Organization: Amazon
Organization unit: Server CA 1B
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 04:02:64:33:50:58:d3:8b:b0:64:38:01:62:83:af:ed
Serial Number (int): 5329328883319571795365251462719582189
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 98:ac:4b:7a:70:2f:8e:02:d7:ad:0f:3a:5b:19:f7:00:62:82:35:d6
AuthorityKeyId: 59:a4:66:06:52:a0:7b:95:92:3c:a3:94:07:27:96:74:5b:f9:3d:d0

Fingerprint (sha1): 03:60:29:81:1e:c2:7e:d6:0f:c8:7d:5f:cd:0f:06:94:d2:88:c1:48
Fingerprint (sha256): c5:77:32:5e:d8:02:53:c6:08:e3:64:1e:43:9d:82:45:dc:a6:44:7c:18:7c:a7:ea:c6:4c:b2:dd:1b:7c:f6:be

Issuing Certificate URL: http://crt.sca1b.amazontrust.com/sca1b.crt

Revocation information

OCSP Server: http://ocsp.sca1b.amazontrust.com
CRL Distribution Point: http://crl.sca1b.amazontrust.com/sca1b.crl

Check the revocation status for certificate sg2.bookingmotor.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sg2.bookingmotor.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sg2.bookingmotor.com
*.travelgea.com.pe
*.imayorista.mx
*.hotelesenlinea.mx
*.lineafacil.com
*.vacancyrewards.com
*.viapuntocr.com
*.alasmundiales.com
*.turismoalvuelo.com
*.todoincluido.travel

Other certificates including the domain name bookingmotor.com

(limited to 100 certificates)
academy.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg10.bookingmotor.com
sg4.bookingmotor.com
bookingmotor.com
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
service.guardhomewarranty.com
help.controlfreq.uk
*.bookingmotor.com
sa2.bookingmotor.com
bookingmotor.com
support.pllenty.com
bookingmotor.com
support.prospectmaximizer.com
*.bookingmotor.com
bookingmotor.com
support.bookingmotor.com
sg2.bookingmotor.com
microsite.bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
service.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
help.controlfreq.uk
sg7.bookingmotor.com
hjalp.rfl.is
*.bookingmotor.com
bookingmotor.com
microsite.bookingmotor.com
help.controlfreq.uk
sa1.bookingmotor.com
sg4.bookingmotor.com
sg2.bookingmotor.com
sg10.bookingmotor.com
support.innoleadtech.com
hjalp.rfl.is
support.foysonis.com
sg6.bookingmotor.com
hjalp.rfl.is
helpdesk.orangerhythm.com
sg5.bookingmotor.com
help.controlfreq.uk
bookingmotor.com
bookingmotor.com
sg2.bookingmotor.com
academy.bookingmotor.com
microsite.bookingmotor.com
hjalp.rfl.is
sg4.bookingmotor.com
sg8.bookingmotor.com
support.bookingmotor.com
support.mjsia.com
help.controlfreq.uk
sg10.bookingmotor.com
*.bookingmotor.com
support.welldone.company
bookingmotor.com
support.amazingbusinessresults.com
help.controlfreq.uk
bookingmotor.com
hjalp.rfl.is
bookingmotor.com
sg5.bookingmotor.com
support.bookingmotor.com
*.bookingmotor.com
sg6.bookingmotor.com

Certificate

The complete raw certificate details for sg2.bookingmotor.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGKzCCBROgAwIBAgIQBAJkM1BY04uwZDgBYoOv7TANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRUwEwYDVQQLEwxTZXJ2ZXIg
Q0EgMUIxDzANBgNVBAMTBkFtYXpvbjAeFw0yMDA0MDgwMDAwMDBaFw0yMTA1MDgx
MjAwMDBaMB8xHTAbBgNVBAMTFHNnMi5ib29raW5nbW90b3IuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PKJi4iWfF3CckYkQpE1Ypi96a4RtHoh
X+UNuYxFzaykBoca0yQVOLu1gtAsTOO6bX8EzzsKypH9iLD7dMsJNPE/E4jgaY3h
cE9TIRwd9FaLbvV/JOP4Pt2PWqP+shP20SSgJ7WAn0y1oSmK8pJurUbdQZ6iFl2s
ThdCeE3jaBnqF0suXcifwmYx8NzmpfFBB3AKgNFXoU7eSAwEaKbVTBBHA3iUdUPL
Pvqw6eJ3O8VTOjH3MdqYkGvJMA6UHv8t9nXTNjmCV/yBYIF7gLjyKuovDnTdjTg4
IWqi9VqnTBSOyt69rBzBIvuU3Kxrhf9xhl5+KkkUhIErn3ziH1ua8wIDAQABo4ID
OjCCAzYwHwYDVR0jBBgwFoAUWaRmBlKge5WSPKOUByeWdFv5PdAwHQYDVR0OBBYE
FJisS3pwL44C160POlsZ9wBigjXWMIHXBgNVHREEgc8wgcyCFHNnMi5ib29raW5n
bW90b3IuY29tghIqLnRyYXZlbGdlYS5jb20ucGWCDyouaW1heW9yaXN0YS5teIIT
Ki5ob3RlbGVzZW5saW5lYS5teIIQKi5saW5lYWZhY2lsLmNvbYIUKi52YWNhbmN5
cmV3YXJkcy5jb22CECoudmlhcHVudG9jci5jb22CEyouYWxhc211bmRpYWxlcy5j
b22CFCoudHVyaXNtb2FsdnVlbG8uY29tghUqLnRvZG9pbmNsdWlkby50cmF2ZWww
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjA7
BgNVHR8ENDAyMDCgLqAshipodHRwOi8vY3JsLnNjYTFiLmFtYXpvbnRydXN0LmNv
bS9zY2ExYi5jcmwwIAYDVR0gBBkwFzALBglghkgBhv1sAQIwCAYGZ4EMAQIBMHUG
CCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3Auc2NhMWIuYW1h
em9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnNjYTFiLmFtYXpv
bnRydXN0LmNvbS9zY2ExYi5jcnQwDAYDVR0TAQH/BAIwADCCAQUGCisGAQQB1nkC
BAIEgfYEgfMA8QB3AKS5CZC0GFgUh7sTosxncAo8NZgE+RvfuON3zQ7IDdwQAAAB
cVrao6QAAAQDAEgwRgIhANgTT1hfLBJH38kaTv10YOR1UhvzrkiWmD4+/SY6aEXL
AiEA1I6FJO9hh20oJ/dLySCtnPgJwaOsKO6MC1KGe0TfuZ4AdgBc3EOS/uarRUSx
XprUVuYQN/vV+kfcoXOUsl7m9scOygAAAXFa2qPKAAAEAwBHMEUCIQC39pH20lat
QROPvPwG03s8aNOlPo9fK7mzn2jlj9RY6gIgHhhbaoMtdVl7KTLGytFNn8aOpZ3k
2FoI69V0sBmbnDcwDQYJKoZIhvcNAQELBQADggEBAA0U9ZhnT7sVlhQLfjl04iSC
O2pDsYnTAnVUasozibdYZT3TbuHXRCw8ECJUm4gXZbGADb/KbGUM8REEQ7/nFW/C
hKzW1LDO+76JyTpFcFourNapOrtv4CN8Bz8+kEJcFnOhYK/Ivr+o7HbifhypYIms
t8zOCu40iDvZFmeKI6/rEpQR07tC4IesKMVysgReqRD0SzYhakgm3FyLrltyWJMg
xPYHxKmxx7C4iBpnam66ao9C6RyKI8K26OhwQh26iFlU20JyiuSZGXjvoqoMEdh6
CTY1dq0nLtbd2uSlTk+rd5bxQ3vv8CUhtcf6vELxOtwqW7h+uAu8DD6Yx4SBIAc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PKJi4iWfF3CckYkQpE1
Ypi96a4RtHohX+UNuYxFzaykBoca0yQVOLu1gtAsTOO6bX8EzzsKypH9iLD7dMsJ
NPE/E4jgaY3hcE9TIRwd9FaLbvV/JOP4Pt2PWqP+shP20SSgJ7WAn0y1oSmK8pJu
rUbdQZ6iFl2sThdCeE3jaBnqF0suXcifwmYx8NzmpfFBB3AKgNFXoU7eSAwEaKbV
TBBHA3iUdUPLPvqw6eJ3O8VTOjH3MdqYkGvJMA6UHv8t9nXTNjmCV/yBYIF7gLjy
KuovDnTdjTg4IWqi9VqnTBSOyt69rBzBIvuU3Kxrhf9xhl5+KkkUhIErn3ziH1ua
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5329328883319571795365251462719582189
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Server CA 1B'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-08 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-05-08 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sg2.bookingmotor.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27892026685483240463669165610123322698860909675297745109107108052013671317300543943468598702751476045395835339738825897921411595654484384565664031119551876128071770776113910450535864698580801680062805906279609336821749048497657755533500547034648599920014180039328248346219309574361485609092795696116239890964423612542951643977809536342307670490934243483430644020324561973824141410801701051754201840765900994620657345632510179954352531113949681559637322800036429385510735083531977894643369150179392538285033081372114250810962483789185269358709393007826868220047977172795277681467823017203145540635594002847867160206067
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 59a4660652a07b95923ca394072796745bf93dd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							98ac4b7a702f8e02d7ad0f3a5b19f700628235d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (207 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sg2.bookingmotor.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.travelgea.com.pe'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.imayorista.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hotelesenlinea.mx'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lineafacil.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vacancyrewards.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.viapuntocr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.alasmundiales.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.turismoalvuelo.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.todoincluido.travel'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.sca1b.amazontrust.com/sca1b.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.sca1b.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.sca1b.amazontrust.com/sca1b.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001715adaa3a40000040300483046022100d8134f585f2c1247dfc91a4efd7460e475521bf3ae4896983e3efd263a6845cb022100d48e8524ef61876d2827f74bc920ad9cf809c1a3ac28ee8c0b52867b44dfb99e0076005cdc4392fee6ab4544b15e9ad456e61037fbd5fa47dca17394b25ee6f6c70eca000001715adaa3ca0000040300473045022100b7f691f6d256ad41138fbcfc06d37b3c68d3a53e8f5f2bb9b39f68e58fd458ea02201e185b6a832d75597b2932c6cad14d9fc68ea59de4d85a08ebd574b0199b9c37
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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