*.beta.1cms.io

Issued by Amazon RSA 2048 M03

About this certificate

This digital certificate with serial number 06:d0:b3:c5:2b:97:02:21:2e:cb:ea:07:35:14:93:f6 was issued on by Amazon.

With 16 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.beta.1cms.io

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 06:d0:b3:c5:2b:97:02:21:2e:cb:ea:07:35:14:93:f6
Serial Number (int): 9059011894042221621164791279243269110
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: c3:44:06:7e:62:2e:8c:ff:45:2b:be:7c:48:17:c4:1e:af:ec:cc:50
AuthorityKeyId: 55:d9:18:5f:d2:1c:cc:01:e1:58:b4:be:ab:d9:55:42:01:d7:2e:02

Fingerprint (sha1): fa:64:6b:15:d5:44:96:28:23:27:1e:8f:91:f5:09:66:45:92:c5:7e
Fingerprint (sha256): ca:aa:db:0d:a5:82:2e:47:9c:5a:27:7c:2f:cf:23:9e:1a:3e:4c:c3:a5:b3:69:21:e3:7b:0b:31:25:0b:16:4e

Issuing Certificate URL: http://crt.r2m03.amazontrust.com/r2m03.cer

Revocation information

OCSP Server: http://ocsp.r2m03.amazontrust.com
CRL Distribution Point: http://crl.r2m03.amazontrust.com/r2m03.crl

Check the revocation status for certificate *.beta.1cms.io

16

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.beta.1cms.io

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.beta.1cms.io
*.cp.beta.1cms.io
*.docs.beta.1cms.io
alb.developer.onecms.idg.zone
*.cio.beta.1cms.io
*.tco.beta.1cms.io
*.chg.beta.1cms.io
*.spe-me.beta.1cms.io
*.hpe.beta.1cms.io
*.fuj.beta.1cms.io
*.ptc.beta.1cms.io
*.mso.beta.1cms.io
*.lgc.beta.1cms.io
*.cw.beta.1cms.io
*.fdc.beta.1cms.io
*.spe-io.beta.1cms.io

Other certificates including the domain name 1cms.io

(limited to 100 certificates)
a.1cms.io
1cms.io
*.beta.1cms.io
stage.1cms.io
*.beta.1cms.io
a.1cms.io
*.beta.1cms.io
*.beta.1cms.io
1cms.io
a.1cms.io
1cms.io
*.beta.1cms.io
*.beta.1cms.io
*.beta.1cms.io
stage.1cms.io
stage.1cms.io
1cms.io
a.1cms.io
*.beta.1cms.io
*.beta.1cms.io
a.1cms.io
1cms.io
*.beta.1cms.io
*.beta.1cms.io
a.1cms.io
stage.1cms.io
*.beta.1cms.io
stage.1cms.io
1cms.io
a.1cms.io
1cms.io
stage.1cms.io
*.beta.1cms.io
*.beta.1cms.io
*.beta.1cms.io
*.beta.1cms.io
*.beta.1cms.io
stage.1cms.io
*.beta.1cms.io
1cms.io
1cms.io
*.beta.1cms.io

Certificate

The complete raw certificate details for *.beta.1cms.io in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIQBtCzxSuXAiEuy+oHNRST9jANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAzMB4XDTIzMDgxMTAwMDAwMFoXDTI0MDkwNzIzNTk1OVowGTEX
MBUGA1UEAwwOKi5iZXRhLjFjbXMuaW8wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCsME5+qTEtKUDnyzif0t3a3zOtfe+S4wo5WRHFJ4+MLk3AVqdVqueG
pn9NSCCKS+FllfbQJuMEA7ozae6t8/nsvkdH2uTVEYXmg+cr/C+smojIb9T2YAoV
R605q4jxVP1wAEe5btxsX5yFtfqSrpFmVDNo46gyMPayv4vjW4C7iW/beGjZX8Nf
z/Wq6IbIPP0RbYp66hc478ENpHQKSxUQtDEjdP79x5ahLPrtG4YLVswpfKF/xzMT
4YGLxp4R+aAnAuoVr86lCvzgirKYF/1g7dqCCBOK94JMCNuijcR+ITKFy6Il44zF
uOFitTIZ04Jim6VkVQMjS0k7/Ew4C7AFAgMBAAGjggQpMIIEJTAfBgNVHSMEGDAW
gBRV2Rhf0hzMAeFYtL6r2VVCAdcuAjAdBgNVHQ4EFgQUw0QGfmIujP9FK758SBfE
Hq/szFAwggFZBgNVHREEggFQMIIBTIIOKi5iZXRhLjFjbXMuaW+CESouY3AuYmV0
YS4xY21zLmlvghMqLmRvY3MuYmV0YS4xY21zLmlvgh1hbGIuZGV2ZWxvcGVyLm9u
ZWNtcy5pZGcuem9uZYISKi5jaW8uYmV0YS4xY21zLmlvghIqLnRjby5iZXRhLjFj
bXMuaW+CEiouY2hnLmJldGEuMWNtcy5pb4IVKi5zcGUtbWUuYmV0YS4xY21zLmlv
ghIqLmhwZS5iZXRhLjFjbXMuaW+CEiouZnVqLmJldGEuMWNtcy5pb4ISKi5wdGMu
YmV0YS4xY21zLmlvghIqLm1zby5iZXRhLjFjbXMuaW+CEioubGdjLmJldGEuMWNt
cy5pb4IRKi5jdy5iZXRhLjFjbXMuaW+CEiouZmRjLmJldGEuMWNtcy5pb4IVKi5z
cGUtaW8uYmV0YS4xY21zLmlvMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggr
BgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDovL2NybC5y
Mm0wMy5hbWF6b250cnVzdC5jb20vcjJtMDMuY3JsMBMGA1UdIAQMMAowCAYGZ4EM
AQIBMHUGCCsGAQUFBwEBBGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJt
MDMuYW1hem9udHJ1c3QuY29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAz
LmFtYXpvbnRydXN0LmNvbS9yMm0wMy5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisG
AQQB1nkCBAIEggFuBIIBagFoAHYA7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZ
RnEftZsAAAGJ4fscLQAABAMARzBFAiB0SqaIPVX/HhrVYNxL/MKNCm2vCatOPom1
0QhqXsKXxgIhAPBbJBW/cqFGS0HtzJ1cYBsT3p+n9cuCFWtfmpR6VokcAHUASLDj
a9qmRzQP5WoC+p0w6xxSActW3SyB2bu/qznYhHMAAAGJ4fscGAAABAMARjBEAiBg
UTh2mF3XsJGEoMtIqaAiC64GpfkzNuu4qswgjFXy9wIgD6N69xG4KD67TowA+Nif
JXOWCqHtNNNskJPQuUKOzngAdwDatr9rP7W2Ip+bwrtca+hwkXFsu1GEhTS9pD0w
SNf7qwAAAYnh+xw3AAAEAwBIMEYCIQDGvZxY+KZQmwITJiRs3fkyDZ2UCMeFco8P
+jGhhXT/MgIhAJ6mb2fLq/VXWm/AoFVJHzA75BEChsMVbJp+Cd6MCUpAMA0GCSqG
SIb3DQEBCwUAA4IBAQCHmGBTfQNa5V7IN535J1QD+Ds0tvSPJn4tMtDLT5zqp3CV
jHqqgsyyEs75jDzTOX56Qkgl2LbB+C65wtgfjonwTEbCunhle6g31LIEhBj1Ayse
gfCGP4XzhMlPtBsld+Woys4Uf5m1ZOVFn7HZfWwmgYDXaLIfeiXUYpBkRd+zSLa9
dZs/05fwfpaenrvZRHwdJqK0eKSOF26ib2Q21Qr5egX+Leom8mgpoz4r73uu9tVQ
emO5gJaeaxZjfHyso3XivqPbyIVHfpzcpFF2vZu2eqC6KxgBjyE7t8HdGWbf5VDa
P52SX3TGCq+CwSyHb+39HyDu+VUaph5uMHnysVgq
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDBOfqkxLSlA58s4n9Ld
2t8zrX3vkuMKOVkRxSePjC5NwFanVarnhqZ/TUggikvhZZX20CbjBAO6M2nurfP5
7L5HR9rk1RGF5oPnK/wvrJqIyG/U9mAKFUetOauI8VT9cABHuW7cbF+chbX6kq6R
ZlQzaOOoMjD2sr+L41uAu4lv23ho2V/DX8/1quiGyDz9EW2KeuoXOO/BDaR0CksV
ELQxI3T+/ceWoSz67RuGC1bMKXyhf8czE+GBi8aeEfmgJwLqFa/OpQr84IqymBf9
YO3agggTiveCTAjboo3EfiEyhcuiJeOMxbjhYrUyGdOCYpulZFUDI0tJO/xMOAuw
BQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 9059011894042221621164791279243269110
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M03'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-11 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-09-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.beta.1cms.io'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21736809336395225251270129296006694179638206797293673942508953192494097327276359911042244164250499742016702244282560620245590243389957551471711593067678559762611841643309595166169118316728179011956796721832817106387202265545132663867884527317368190409695448629593003714071828261472216785051209241381049541917113263343375291069537448550363321279486169712474570431407149897676576894451925746078331985527456027752240429125336360004946064154309681145826521697441808485570526576995277171140456447301580051699758381684594152629411186196532161632220161067714399782129549716912758646922124947917468534230344849149815331467269
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 55d9185fd21ccc01e158b4beabd9554201d72e02
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c344067e622e8cff452bbe7c4817c41eafeccc50
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (336 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cp.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.docs.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'alb.developer.onecms.idg.zone'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cio.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tco.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.chg.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spe-me.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hpe.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fuj.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.ptc.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mso.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lgc.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cw.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.fdc.beta.1cms.io'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.spe-io.beta.1cms.io'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m03.amazontrust.com/r2m03.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m03.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m03.amazontrust.com/r2m03.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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