access.bwoffshore.com
Issued by GeoTrust RSA CA 2018
About this certificate
This digital certificate with serial number 0b:38:48:73:92:d0:54:a4:df:42:35:67:f7:9a:a0:9b was issued on by DigiCert Inc.
With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=access.bwoffshore.com
DigiCert Inc
Organization:
DigiCert Inc
Organization unit: www.digicert.com
Organization unit: www.digicert.com
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 0b:38:48:73:92:d0:54:a4:df:42:35:67:f7:9a:a0:9bSerial Number (int): 14913746067878844734343224497461174427
Serial Number lenght: 124 bits, 16 octets
SubjectKeyId: fe:72:3b:45:eb:fe:d5:6a:cb:2c:1e:b5:9e:22:27:02:30:a1:95:ed
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5
Fingerprint (sha1): 23:52:8f:a3:5a:d8:4f:b0:36:47:04:2a:8a:23:af:22:3f:fc:af:33
Fingerprint (sha256): d4:da:dc:0f:b6:fd:80:b3:40:5b:02:9c:01:ba:76:fa:3c:0d:5b:fa:d9:ac:9f:df:0a:4e:fa:86:5d:2b:f0:03
Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt
Revocation information
OCSP Server: http://status.geotrust.comCRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl
Check the revocation status for certificate access.bwoffshore.com
4
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for access.bwoffshore.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
access.bwoffshore.com
sip.bwoffshore.com
webconf.bwoffshore.com
sipexternal.bwoffshore.com
sip.bwoffshore.com
webconf.bwoffshore.com
sipexternal.bwoffshore.com
Other certificates including the domain name bwoffshore.com
(limited to 100 certificates)
integration.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
cwa.bwoffshore.com
z27os2sut060.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
sslno.bwoffshore.com
sni.cloudflaressl.com
access.bwoffshore.com
sslsg.bwoffshore.com
sslsg.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
barossa.coconsole.bwoffshore.com
sslsg.bwoffshore.com
www.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
externalmemory.bwoffshore.com
access.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
access.bwoffshore.com
sslno.bwoffshore.com
poc.coconsole.bwoffshore.com
sslno.bwoffshore.com
access.bwoffshore.com
z27os2sut061.bwoffshore.com
z27os2sut061.bwoffshore.com
access.bwoffshore.com
*.bwoffshore.com
*.bwoffshore.com
Certificate
The complete raw certificate details for access.bwoffshore.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGejCCBWKgAwIBAgIQCzhIc5LQVKTfQjVn95qgmzANBgkqhkiG9w0BAQsFADBe MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3 d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe Fw0xOTA1MjgwMDAwMDBaFw0yMTA2MjYxMjAwMDBaMCAxHjAcBgNVBAMTFWFjY2Vz cy5id29mZnNob3JlLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB AMUWEAFzQfK/Unvjvtc+4OVCwY3T+AFELQLJzQJzS17TSfdkH9FLUGYMEl2byCVJ ANqwtb2mTB7MaRM6Y6WmrXce935lTjvSUqwcxRHAU1UH4F3V9wnOzjrwAyFihnr8 F/ugQTHCnadpx63nd2EBic1bnAbEOnE5Zk0Yv5t4+bHxDASwoe/QZa0cWsALxJhY LIiG+QUUUlK2IfQBkkC3E9vjDUn14ZJIJ872IqRWaW9xjxIvynBEl+SsmhnPRbn2 FipwZWKiIjp+TooITv4H5YagilpKJC26TsmiIZgzIPsJyyi1AlCK3nueoBL1SI0O BuB1G0pETimoYV0b38Knx0cCAwEAAaOCA3AwggNsMB8GA1UdIwQYMBaAFJBY/7Cc dahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBT+cjtF6/7VasssHrWeIicCMKGV7TBo BgNVHREEYTBfghVhY2Nlc3MuYndvZmZzaG9yZS5jb22CEnNpcC5id29mZnNob3Jl LmNvbYIWd2ViY29uZi5id29mZnNob3JlLmNvbYIac2lwZXh0ZXJuYWwuYndvZmZz aG9yZS5jb20wDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr BgEFBQcDAjA+BgNVHR8ENzA1MDOgMaAvhi1odHRwOi8vY2RwLmdlb3RydXN0LmNv bS9HZW9UcnVzdFJTQUNBMjAxOC5jcmwwTAYDVR0gBEUwQzA3BglghkgBhv1sAQIw KjAoBggrBgEFBQcCARYcaHR0cHM6Ly93d3cuZGlnaWNlcnQuY29tL0NQUzAIBgZn gQwBAgEwdQYIKwYBBQUHAQEEaTBnMCYGCCsGAQUFBzABhhpodHRwOi8vc3RhdHVz Lmdlb3RydXN0LmNvbTA9BggrBgEFBQcwAoYxaHR0cDovL2NhY2VydHMuZ2VvdHJ1 c3QuY29tL0dlb1RydXN0UlNBQ0EyMDE4LmNydDAJBgNVHRMEAjAAMIIBfwYKKwYB BAHWeQIEAgSCAW8EggFrAWkAdgC72d+8H4pxtZOUI5eqkntHOFeVCqtS6BqQlmQ2 jh7RhQAAAWr81WQKAAAEAwBHMEUCIQD8iJVcb+G/o5NH8fLD8frUNtS0Tqk8i5ei RQya0zjxcgIgPf0LV/QQa8CwinvOkndIY+1tM9QHzjD0UKhH+//Xk80AdwCHdb/n WXz4jEOZX73zbv9WjUdWNv9KtWDBtOr/XqCDDwAAAWr81WT7AAAEAwBIMEYCIQC+ tONmL/RCZwyWNyZQCNt17WWszo5MLBQgK1+bLF0JowIhAJ/eijwiKC4LG2ylGNny sO/Xp9EDO+Oi6XAfUJQrezVyAHYARJRlLrDuzq/EQAfYqP4owNrmgr7YyzG1P9Mz lrW2gagAAAFq/NVjfgAABAMARzBFAiEAlsQYjqGDoLMFe9vMt3oL51Brz5XE8hKK FLYegoGf0OUCICv2M9oW8IkFmreWctjskfVhFb6bhbz5eeeP/BuCm46PMA0GCSqG SIb3DQEBCwUAA4IBAQCD3bbQTXpqtr2A2g0YBX6xHSo2P6xJLiB+k3kfIgoAERtg cJ4QfW8MPgmDmiM/fl96vvfurLxG0j8oUBPoF0WiqSzwj5eSkhTkzh0I7Ek8jwbb xRWx1T6FAIyZ+/VNRC9lzUCF0P6mh4pRGGnWiLM2kjxO/YHo5AkkbGXgLfgIbwy/ DHnh1kWZTRJw96NL+By6yRPC45URA3g2P3ohOfeRSwnJFWZGZMa4Ma22S2jIf2nL yRlj8VOek2VJ8h39J/jCzU0KMpMSZlaiYCVzSMaaOc5kgeCKdDPbSuLiDhWbbLWr awcZNs5n0CiO8oVgRJpPmptnnotKBRMts7GRQFBc -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRYQAXNB8r9Se+O+1z7g 5ULBjdP4AUQtAsnNAnNLXtNJ92Qf0UtQZgwSXZvIJUkA2rC1vaZMHsxpEzpjpaat dx73fmVOO9JSrBzFEcBTVQfgXdX3Cc7OOvADIWKGevwX+6BBMcKdp2nHred3YQGJ zVucBsQ6cTlmTRi/m3j5sfEMBLCh79BlrRxawAvEmFgsiIb5BRRSUrYh9AGSQLcT 2+MNSfXhkkgnzvYipFZpb3GPEi/KcESX5KyaGc9FufYWKnBlYqIiOn5OighO/gfl hqCKWkokLbpOyaIhmDMg+wnLKLUCUIree56gEvVIjQ4G4HUbSkROKahhXRvfwqfH RwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 14913746067878844734343224497461174427 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-05-28 00:00:00 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-26 12:00:00 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'access.bwoffshore.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24879825513457300414250070599859976212080830649681892234343833098941670897225249712091562340295024576895433528517584674941901978957374239140939216297465554997539633743934766451838311510435308661032272118425177674804796246673808523271500489576794030834323509443777879456711947657272362519343409178676619324395541016946103960495412506037205016667078577703711810526996409468825845235814445826756396224071143850244697658515796994656043868599418237384826685180408807967748905745993825898324859860681437984696809971858587563063459224837318471013136414416530029253250460135382371495559600698407107453290265342841051446495047 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) fe723b45ebfed56acb2c1eb59e22270230a195ed . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (97 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'access.bwoffshore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.bwoffshore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webconf.bwoffshore.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sipexternal.bwoffshore.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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