www.visitbarbados.org

- Barbados Tourism Marketing, Inc. -

Issued by DigiCert SHA2 Extended Validation Server CA

About this certificate

This digital certificate with serial number 09:e2:db:4c:7d:03:ca:69:dc:42:f8:1a:ff:8b:db:19 was issued on by DigiCert Inc.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barbados Tourism Marketing, Inc.

Company registration number: 38446
Organization: Barbados Tourism Marketing, Inc.
Locality: Bridgetown
Country: BB

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:e2:db:4c:7d:03:ca:69:dc:42:f8:1a:ff:8b:db:19
Serial Number (int): 13140958959826873576030822987903785753
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 2f:c5:e8:5d:c0:e9:c4:5c:9e:5b:e7:78:c4:e4:90:e4:73:bd:c8:5f
AuthorityKeyId: 3d:d3:50:a5:d6:a0:ad:ee:f3:4a:60:0a:65:d3:21:d4:f8:f8:d6:0f

Fingerprint (sha1): 42:44:16:b9:66:c7:48:d3:67:21:c3:86:93:05:1b:27:e1:b7:0a:cf
Fingerprint (sha256): d5:5b:3b:c8:22:39:ad:1a:b5:f1:ae:d2:b0:f5:b5:a6:20:cb:ff:80:48:29:4b:ff:bd:f1:b0:6b:d4:b7:f9:d4

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/sha2-ev-server-g2.crl
CRL Distribution Point: http://crl4.digicert.com/sha2-ev-server-g2.crl

Check the revocation status for certificate www.visitbarbados.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.visitbarbados.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.visitbarbados.org
visitbarbados.org

Other certificates including the domain name visitbarbados.org

(limited to 100 certificates)
servicedesk1.adaresec.com
tickets.ec-comptech.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
corporate.visitbarbados.org
corporate.visitbarbados.org
remotehq.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.visitbarbados.org
helpdesk.anfalservices.com.sa
mail3.visitbarbados.org
www.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.brazos.org
servicedesk.melnor.com
helpdesk.visitbarbados.org
ssl415659.cloudflaressl.com
helpdesk.porticopm.com
remotedr.visitbarbados.org
clfhelpdesk.clf.uk
ssl415658.cloudflaressl.com
ssl415657.cloudflaressl.com
servicedesk1.adaresec.com
touristortraveler.visitbarbados.org
helpdesk.porticopm.com
corporate.visitbarbados.org
helpdesk.brazos.org
corporate.visitbarbados.org
servicedesk.chiranogold.com
connect.visitbarbados.org
ssl415657.cloudflaressl.com
ssl415659.cloudflaressl.com
ssl415658.cloudflaressl.com
helpdesk.brazos.org
www.visitbarbados.org
sni.cloudflaressl.com
serviceportal.lbfoster.com
cwsupport.wefreight.com
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
mail.visitbarbados.org
helpdesk.visitbarbados.org
serviceportal.lbfoster.com
serviceportal.lbfoster.com
www.visitbarbados.org
ssl415659.cloudflaressl.com
sni.cloudflaressl.com
helpdesk.brazos.org
tickets.ec-comptech.com
ssl415658.cloudflaressl.com
visitbarbados.org
ssl415659.cloudflaressl.com
ssl415659.cloudflaressl.com
servicedesk.melnor.com
ssl415657.cloudflaressl.com
*.visitbarbados.org
cwsupport.wefreight.com
ssl415657.cloudflaressl.com
www.visitbarbados.org
helpdesk.porticopm.com
helpdesk.anfalservices.com.sa
servicedesk.melnor.com
mail2.visitbarbados.org
connect.visitbarbados.org
connect.visitbarbados.org
www.visitbarbados.org
ssl415658.cloudflaressl.com
tickets.ec-comptech.com
mail2.visitbarbados.org
www.visitbarbados.org
tickets.ec-comptech.com
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
mail.visitbarbados.org
ssl415658.cloudflaressl.com
www.visitbarbados.org
servicedesk.melnor.com
clfhelpdesk.clf.uk
mail.visitbarbados.org
clfhelpdesk.clf.uk
helpdesk.anfalservices.com.sa
connect.visitbarbados.org
helpdesk.visitbarbados.org
ssl415658.cloudflaressl.com
ssl415659.cloudflaressl.com
serviceportal.lbfoster.com
www.visitbarbados.org
ssl415657.cloudflaressl.com
cwsupport.wefreight.com
helpdesk.anfalservices.com.sa
servicedesk.chiranogold.com
serviceportal.lbfoster.com
servicedesk.chiranogold.com
corp.visitbarbados.org
www.visitbarbados.org

Certificate

The complete raw certificate details for www.visitbarbados.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsO1uIJNYhAHjs0bxKjx0
UaRh6QfUAprhodHrtQdCJzNHgVPq9tvvfhjon4vF6ziGX1LDWUIrwb6hP6f4OvPr
DuGr2GuGqHcrY0c5au8yvT+gxrym+bG8//BuWiAFFCfETxsCJ9YfoCSMxiOsRChP
XJlJ5es3KbEmLfQ6g47zmBrcswsi1OxKFKWGifYb1cqqy4F8A/DVBySMS42cSTSS
LbItK8lLN6VJtH5Tt3vblX2/brQBM2v7hFZOFnih41b+ig8G1UDbS0NdhFtyR2VZ
Q55NUrpLf1hx3GmqUrWg2K6lusBo6YUwv7p7R9xJaUpo8c7bQkuzylAvtn7BJlPN
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13140958959826873576030822987903785753
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert SHA2 Extended Validation Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-05-09 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-17 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bridgetown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '38446'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bridgetown'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barbados Tourism Marketing, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.visitbarbados.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22335022861710322359912679871567931666181983506025032790969261226826522947512013256499404463964967808999561560220497560231214187826134029067873955633498478078953443556872399833552622881481212414463455447927334288120350423008241804884365140350488695644079112514525583876939923898162591640208172088109078484000282790405173995530075945539942053539086682168421974975346743942060682961139463820165134638095182856740496883013652196414781990150828571027946618101126183109710162451415668237297893135718469909373888900013915578997216423744630768974130617023682424807572085384704943399832786826001695831081065612167952880356723
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3dd350a5d6a0adeef34a600a65d321d4f8f8d60f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2fc5e85dc0e9c45c9e5be778c4e490e473bdc85f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.visitbarbados.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'visitbarbados.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (110 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/sha2-ev-server-g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (124 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertSHA2ExtendedValidationServerCA.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (368 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (364 bytes)
							016a007600a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016344c843e30000040300473045022074e4421bcd58b8de0bc27446362f18fb9f0c2a80f53a05613673eaedf5523af2022100a1589672661394a5a4bd448ca9ebcebe9349bc1bbd83ddbe5b9f4790fb8290e80077005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016344c843e00000040300483046022100b478f54c8334019f1c2b16a909c4ecc3df0aebb90ae5cd6a439b64ed6b4ed50d022100e04123bbed37625707c466df53dcda353c1f15f077f68e39ce3cfa20c590daa2007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016344c843e10000040300483046022100e4ed6743afe212827c39019fff427ba82b46462e420bb5d3201c6e64954d666e022100ca99d50af0a410677de55f062a68810dcd6357fa4dc15731fe64ec15cb5e8bdc
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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