meisterprep.com
Issued by Thawte RSA CA 2018
About this certificate
This digital certificate with serial number 0d:42:a6:a0:f3:98:e0:d9:ff:c7:5b:1c:f1:69:19:83 was issued on by DigiCert Inc.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=meisterprep.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0d:42:a6:a0:f3:98:e0:d9:ff:c7:5b:1c:f1:69:19:83Serial Number (int): 17626035169757089373451597062200695171
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: cc:58:75:67:42:f3:57:79:f6:8f:aa:dd:aa:9b:7e:20:a1:54:fe:34
AuthorityKeyId: a3:c8:5e:65:54:e5:30:78:c1:05:ea:07:0a:6a:59:cc:b9:fe:de:5a
Fingerprint (sha1): 65:26:08:78:cc:8f:15:83:54:a4:9a:a9:f9:a5:c9:40:aa:1a:95:45
Fingerprint (sha256): cc:1a:20:29:4b:cb:30:67:6a:2a:71:c3:3d:6b:94:e4:09:aa:9b:69:45:f0:d2:a6:a3:f8:47:e5:b7:01:2c:65
Issuing Certificate URL: http://cacerts.thawte.com/ThawteRSACA2018.crt
Revocation information
OCSP Server: http://status.thawte.comCRL Distribution Point: http://cdp.thawte.com/ThawteRSACA2018.crl
Check the revocation status for certificate meisterprep.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for meisterprep.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
meisterprep.com
www.meisterprep.com
www.meisterprep.com
Other certificates including the domain name meisterprep.com
(limited to 100 certificates)
business.hunani.com
business.hunani.com
business.hunani.com
business.hunani.com
meisterprep.com
business.hunani.com
ptvflix.beesquared.asia
invoice.madface.net
business.hunani.com
invoice.monsiegesocial.be
facturacion.procargopty.com
forms.appltd.tech
wms.meisterprep.com
business.hunani.com
billing.genesiswebsol.com
business.hunani.com
business.hunani.com
invoice.urbanflat.com
support.currentware.com
invoice.restarthouse.com
billing.bodyshopadvisors.com
meisterprep.com
invoice.restartlife.com
business.hunani.com
billing.purplelawfirm.com
billing.resolutium.com
invoice.zyltech.com
invoice.jashanmalgroup.com
theinvoice.evesarts.com
mail.shreydesign.com
support.cryptoticr.com
business.hunani.com
invoice.restarthouse.com
business.hunani.com
business.hunani.com
meisterprep.com
billing.rdbusinesssolution.com
invoice.restarthouse.com
invoice.itgbilling.com
mail.meisterprep.com
tickets.fastmanager.com
meisterprep.com
business.hunani.com
mail.idasupport.co
business.hunani.com
business.hunani.com
invoice.isvalley.com
invoices.jasonstocktonphotography.com
invoice.maseo-ingenierie.com
billing.meisterprep.com
meisterprep.com
mail.meisterprep.com
meisterprep.com
invoice.getgoing.ca
invoice.apt2s.com
invoice.madface.net
business.hunani.com
administratie.cardan.com
business.hunani.com
invoice.threepbx.com
client.kanyondesigns.com
invoice.leisureholidays.com
business.hunani.com
invoice.hatchethardware.com
business.hunani.com
business.hunani.com
business.hunani.com
meisterprep.com
business.hunani.com
ptvflix.beesquared.asia
invoice.madface.net
business.hunani.com
invoice.monsiegesocial.be
facturacion.procargopty.com
forms.appltd.tech
wms.meisterprep.com
business.hunani.com
billing.genesiswebsol.com
business.hunani.com
business.hunani.com
invoice.urbanflat.com
support.currentware.com
invoice.restarthouse.com
billing.bodyshopadvisors.com
meisterprep.com
invoice.restartlife.com
business.hunani.com
billing.purplelawfirm.com
billing.resolutium.com
invoice.zyltech.com
invoice.jashanmalgroup.com
theinvoice.evesarts.com
mail.shreydesign.com
support.cryptoticr.com
business.hunani.com
invoice.restarthouse.com
business.hunani.com
business.hunani.com
meisterprep.com
billing.rdbusinesssolution.com
invoice.restarthouse.com
invoice.itgbilling.com
mail.meisterprep.com
tickets.fastmanager.com
meisterprep.com
business.hunani.com
mail.idasupport.co
business.hunani.com
business.hunani.com
invoice.isvalley.com
invoices.jasonstocktonphotography.com
invoice.maseo-ingenierie.com
billing.meisterprep.com
meisterprep.com
mail.meisterprep.com
meisterprep.com
invoice.getgoing.ca
invoice.apt2s.com
invoice.madface.net
business.hunani.com
administratie.cardan.com
business.hunani.com
invoice.threepbx.com
client.kanyondesigns.com
invoice.leisureholidays.com
business.hunani.com
invoice.hatchethardware.com
Certificate
The complete raw certificate details for meisterprep.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGLjCCBRagAwIBAgIQDUKmoPOY4Nn/x1sc8WkZgzANBgkqhkiG9w0BAQsFADBc MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMRswGQYDVQQDExJUaGF3dGUgUlNBIENBIDIwMTgwHhcN MTgxMTI2MDAwMDAwWhcNMjEwMjI0MTIwMDAwWjAaMRgwFgYDVQQDEw9tZWlzdGVy cHJlcC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtTcVD2g0K btSAYxQgSN1tFvG3Oi+XrfLTMPe/zwqnbkzV61KR8VT52FAt5pOVCxgNQGyth5EH O9KEpQloLEcroWe2SygF2+agJP57FW1rBTy6lQ0vHYHF2cIgVFMumhvc52Xsm9XV DBunngRSU2FVWRHM2IaC/wmNMj2NAd14KZCbJYgd/EXbE/jfxfb4VAxpSdRoeYe2 dFIe2AKQWRy9j7ktIOWVcNElIqeijRUBxzmzv+x73Jueh6iAq4zgR4LZjiY2oigJ 5VzcEy5LOqS50BrE3w51nmzNUneIpJYuVrCZnw9m8QW9lDHb0zl+3qWxJdtktYfB VmlvzH9hYdnZAgMBAAGjggMsMIIDKDAfBgNVHSMEGDAWgBSjyF5lVOUweMEF6gcK alnMuf7eWjAdBgNVHQ4EFgQUzFh1Z0LzV3n2j6rdqpt+IKFU/jQwLwYDVR0RBCgw JoIPbWVpc3RlcnByZXAuY29tghN3d3cubWVpc3RlcnByZXAuY29tMA4GA1UdDwEB /wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOgYDVR0fBDMw MTAvoC2gK4YpaHR0cDovL2NkcC50aGF3dGUuY29tL1RoYXd0ZVJTQUNBMjAxOC5j cmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIwKjAoBggrBgEFBQcCARYcaHR0cHM6 Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZngQwBAgEwbwYIKwYBBQUHAQEEYzBh MCQGCCsGAQUFBzABhhhodHRwOi8vc3RhdHVzLnRoYXd0ZS5jb20wOQYIKwYBBQUH MAKGLWh0dHA6Ly9jYWNlcnRzLnRoYXd0ZS5jb20vVGhhd3RlUlNBQ0EyMDE4LmNy dDAJBgNVHRMEAjAAMIIBfgYKKwYBBAHWeQIEAgSCAW4EggFqAWgAdgC72d+8H4px tZOUI5eqkntHOFeVCqtS6BqQlmQ2jh7RhQAAAWdQ6vt5AAAEAwBHMEUCIQDNvQj0 MxH2StYyEnHBHZjEQk8LQ7vfzv6l0PqpEsJZBAIgZdhZ3Jk34hb0zlyDqR+WLFw+ tlL26CPgNmrBvj6EJ1cAdwCHdb/nWXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCD DwAAAWdQ6vy5AAAEAwBIMEYCIQDypFuTrYPDSycUPjq16AF8dA9qPoNp1ta9Qrlc CvjPGgIhAKdtAxGRCJ5ebJGS1l353Qw/i97rMvETDqDghpbAxhKXAHUAb1N2rDHw MRnYmQCkURX/dxUcEdkCwQApBo2yCJo32RMAAAFnUOr86QAABAMARjBEAiByjQwN dNeETLZx47Eq/tnuhi24PEAUfUVEKsp7Owr6bgIgHkSrm4Gt6niRQ9xH9jhXgmuO HTCFEbC49+by84ZfjxowDQYJKoZIhvcNAQELBQADggEBAIM3RBYro8FytrZF8bl5 ivUQeL+mK6n4WpoG+RA5L1Z9D4UqX8JMn48KQ9alO2EmhBEXABFMQl5xj3MLpsGC Mj0kMZQlbbVjAbYSHz5b/zgiB+YY88uMVrp0bBbetcwkViaAc1JY85VojKiGnLxg AiAUutjtIbi1MM8LMeFU4WeBw0K4EvBTGN3bMtjggObVzKSER/4V/3lvRVx/U0ii 2V2PeUo9Qb4WzYmTj0U+H/O8jVQu9yWzAFp9ovuoIwR697ixg43FGR2H3S3VIJdo G3cvO2pn9BArsdsBzZlVtGs7g7r/s9GyBfOJckl2ABN6QqnKiQJjKsu7rcTOzYKx VGc= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7U3FQ9oNCm7UgGMUIEjd bRbxtzovl63y0zD3v88Kp25M1etSkfFU+dhQLeaTlQsYDUBsrYeRBzvShKUJaCxH K6FntksoBdvmoCT+exVtawU8upUNLx2BxdnCIFRTLpob3Odl7JvV1Qwbp54EUlNh VVkRzNiGgv8JjTI9jQHdeCmQmyWIHfxF2xP438X2+FQMaUnUaHmHtnRSHtgCkFkc vY+5LSDllXDRJSKnoo0VAcc5s7/se9ybnoeogKuM4EeC2Y4mNqIoCeVc3BMuSzqk udAaxN8OdZ5szVJ3iKSWLlawmZ8PZvEFvZQx29M5ft6lsSXbZLWHwVZpb8x/YWHZ 2QIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 17626035169757089373451597062200695171 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-26 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-24 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'meisterprep.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29956828372666951248584588890229914925673699558260234527158378963702616765099519936158412996919563894797554113352553389919028761028919171253820374838369938826882025181319434305580248349688921962097302803988125104731303409667247242204706611717205600015866964241516866955535266534821550185012636777030020990586732635511773945116681435194200678731495246507541643871612771688461154179904826538290151522014783740821570675339177802509791517881278975215156490784112089515741984099900237277312653198481440880875508673874228597199628217251358987618192812975098217842250618730989995052011315904048696515730537861146692892613081 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a3c85e6554e53078c105ea070a6a59ccb9fede5a . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) cc58756742f35779f68faaddaa9b7e20a154fe34 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'meisterprep.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.meisterprep.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (99 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes) 0168007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016750eafb790000040300473045022100cdbd08f43311f64ad6321271c11d98c4424f0b43bbdfcefea5d0faa912c25904022065d859dc9937e216f4ce5c83a91f962c5c3eb652f6e823e0366ac1be3e8427570077008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016750eafcb90000040300483046022100f2a45b93ad83c34b27143e3ab5e8017c740f6a3e8369d6d6bd42b95c0af8cf1a022100a76d031191089e5e6c9192d65df9dd0c3f8bdeeb32f1130ea0e08696c0c612970075006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d9130000016750eafce900000403004630440220728d0c0d74d7844cb671e3b12afed9ee862db83c40147d45442aca7b3b0afa6e02201e44ab9b81adea789143dc47f63857826b8e1d308511b0b8f7e6f2f3865f8f1a . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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