careum-weiterbildung.ch

Issued by GeoTrust RSA CA 2018

About this certificate

This digital certificate with serial number 08:32:48:59:b8:3e:7e:12:96:32:a6:0c:80:6c:7c:c3 was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=careum-weiterbildung.ch

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:32:48:59:b8:3e:7e:12:96:32:a6:0c:80:6c:7c:c3
Serial Number (int): 10894906251024785623438281309617421507
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 41:a8:e7:8e:3b:dd:3c:58:05:33:5d:34:53:bf:12:11:2c:a7:ba:b0
AuthorityKeyId: 90:58:ff:b0:9c:75:a8:51:54:77:b1:ed:f2:a3:43:16:38:9e:6c:c5

Fingerprint (sha1): ec:66:4a:7a:e3:d2:62:8d:f0:5d:f6:2c:5e:2e:1f:7b:c3:24:0a:04
Fingerprint (sha256): db:c2:f6:d1:a3:35:9c:e6:aa:05:e1:8c:44:15:88:cd:37:78:14:ea:9f:bd:fe:c8:49:ab:01:94:9a:c3:0e:78

Issuing Certificate URL: http://cacerts.geotrust.com/GeoTrustRSACA2018.crt

Revocation information

OCSP Server: http://status.geotrust.com
CRL Distribution Point: http://cdp.geotrust.com/GeoTrustRSACA2018.crl

Check the revocation status for certificate careum-weiterbildung.ch

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for careum-weiterbildung.ch

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

careum-weiterbildung.ch
www.careum-weiterbildung.ch
newsletter.careum-weiterbildung.ch
dokumente.careum-weiterbildung.ch

Other certificates including the domain name careum-weiterbildung.ch

(limited to 100 certificates)
moodle.careum-weiterbildung.ch
careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
careum-weiterbildung.ch
im.careum-weiterbildung.ch
im.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
test.careum-weiterbildung.ch
careum-weiterbildung.ch
*.careum-weiterbildung.ch
careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
dokumente.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
dokumente.careum-weiterbildung.ch
careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
moodle.careum-weiterbildung.ch
careum-weiterbildung.ch
careum-weiterbildung.ch
dokumente.careum-weiterbildung.ch
careum-weiterbildung.ch
careum-weiterbildung.ch
careum-weiterbildung.ch
moodle.careum-weiterbildung.ch

Certificate

The complete raw certificate details for careum-weiterbildung.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHmTCCBoGgAwIBAgIQCDJIWbg+fhKWMqYMgGx8wzANBgkqhkiG9w0BAQsFADBe
MQswCQYDVQQGEwJVUzEVMBMGA1UEChMMRGlnaUNlcnQgSW5jMRkwFwYDVQQLExB3
d3cuZGlnaWNlcnQuY29tMR0wGwYDVQQDExRHZW9UcnVzdCBSU0EgQ0EgMjAxODAe
Fw0xODEyMTIwMDAwMDBaFw0yMDAzMTYxMjAwMDBaMCIxIDAeBgNVBAMTF2NhcmV1
bS13ZWl0ZXJiaWxkdW5nLmNoMIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKC
AgEApS5yW4mFFtAABNRE/i8XFDWUkC3wKwZfMG2gr/DdZ3uIS8c9EGVl1aN9wBjx
Hvkpq34y86SCCWm7heswvK/b9jUrYirXLbUSQZm8TPj2CdfepjLsyJLx1qKpS9XZ
cSLAgUWfCkix9WCb26gYHZwtfxR/F0Wzv+Dde0z0d1nhcK9i3is31/rGkjWXuUoK
bylWrehSfGsOd8+g0SMlpcs70zctGSP9FmgUF3aytAPzPFcXarxDU7A7Gbx5taHD
VEk8i38IxGHgvRWSTDhz3bdaoXoA+JqIcTCgR+3dea7jmTdu6txMQTNRiNq7YA5W
gcSRt9J7Y9XBlhZlVD9sgobek6MWzqGYAWwCBy08ScfsFUFEc7Hh2m8OecKjtTLu
6JRrIemR7hclWMdeMQuoZSjQ/o62A7azz8ofGu64TNnbnbFM2x3O1wOP0ts3jImE
3VeiDO1XEblelxfFQ+LVC7wRcqfDijQesg1rTmTb0D6UhdqWxOnUOisUx7xeqI6L
6ptlgxNsj+RoLVvzltXN36yWYPHWvXC6l6LjHAOD+tN/DTEbMqHHWYbBXjkvmm8l
W8dvDb9P1ovlfvpIOnm9nwFuZdgr6TkeahKgnoyle3cnxuT6qUSPFrouPZZI+oTB
4KDVw60c06QwDhrgz1zsuG+AhJLJTYYayLHlvkzRODolt40CAwEAAaOCA40wggOJ
MB8GA1UdIwQYMBaAFJBY/7CcdahRVHex7fKjQxY4nmzFMB0GA1UdDgQWBBRBqOeO
O908WAUzXTRTvxIRLKe6sDCBhgYDVR0RBH8wfYIXY2FyZXVtLXdlaXRlcmJpbGR1
bmcuY2iCG3d3dy5jYXJldW0td2VpdGVyYmlsZHVuZy5jaIIibmV3c2xldHRlci5j
YXJldW0td2VpdGVyYmlsZHVuZy5jaIIhZG9rdW1lbnRlLmNhcmV1bS13ZWl0ZXJi
aWxkdW5nLmNoMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NkcC5nZW90cnVzdC5j
b20vR2VvVHJ1c3RSU0FDQTIwMTguY3JsMEwGA1UdIARFMEMwNwYJYIZIAYb9bAEC
MCowKAYIKwYBBQUHAgEWHGh0dHBzOi8vd3d3LmRpZ2ljZXJ0LmNvbS9DUFMwCAYG
Z4EMAQIBMHUGCCsGAQUFBwEBBGkwZzAmBggrBgEFBQcwAYYaaHR0cDovL3N0YXR1
cy5nZW90cnVzdC5jb20wPQYIKwYBBQUHMAKGMWh0dHA6Ly9jYWNlcnRzLmdlb3Ry
dXN0LmNvbS9HZW9UcnVzdFJTQUNBMjAxOC5jcnQwCQYDVR0TBAIwADCCAX0GCisG
AQQB1nkCBAIEggFtBIIBaQFnAHYA7ku9t3XOYLrhQmkfq+GeZqMPfl+wctiDAMR7
iXqo/csAAAFnobBydwAABAMARzBFAiBsF2si5b3nsf65FA0WCJxSSvzxDHlHeDls
dp8LciPhqgIhAK2CCl7+J7JWWVl19gX4O3Ill4Zj0cgO3nuY1ywwUZqzAHUAh3W/
51l8+IxDmV+9827/Vo1HVjb/SrVgwbTq/16ggw8AAAFnobBzOQAABAMARjBEAiBQ
bcnfWZm+o6UC6O5PCzilzQCqlzuh1iff7qDvwTvBNQIgWBs0v/aJa+dcm9Q78/03
VONZC4wtARR4V4rRsZG1DvMAdgBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbII
mjfZEwAAAWehsHO+AAAEAwBHMEUCIAMKlCoWosJYEeQyUZFX0Tnbn4qWhet0dxVu
DEn88E2EAiEA0ROFsCDkSfAL6/hrNSFBJAdrL/o+CHItnd8JipKAUxowDQYJKoZI
hvcNAQELBQADggEBAKbVjml19cGLvM1PjCyBxx846AsnuWXiHzHx9LmqZ2RVc0oe
eAZlCZhSbcUbgCF97nclqzH7UQ97d6eHQ9l5/95l0nZqDtx0Nubw0jx19fjoq5E5
44hCJsrTbs5WTBPRrtVT+sAkc7ibYRh2Adv5E5lZI811eMObmdkeuvlXVuj/c7hU
1ox+2wt6cOHZvQfILjz85fDE+n8sbm8em/13mJQmJtVIt2633veKad7kniq7o6y6
TpCMtAizLUD8tPqx7UXXW2Rnhh4C4UZKegGhYWjpX99kMORlTRPl3cbMRFb5ATTF
NErQ5kU1bioEoxaWsCXvnQNKix6AMwVG7h81WFU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10894906251024785623438281309617421507
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-12 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-16 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'careum-weiterbildung.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 673881451074325101974819010328158401166339352291710485998626823972252845669899250411194805538166608896874932548205997702251626449134873527575488214830928598714636873324283590209716872435777637734286376647088399312996577844023940476730836568424205872753247364429012250451220396879307370436090490492789586752642178838752657467768653318135518422693280278156517150198672917701627183747597493539771978496294912806971304844372697504461157415622159003936717230252566912389429770265951521345689235731782080745497221470948965995068159295630744475574358772693549591172993884100533585353723946451073661807422651214842864542753411247647165362299502727986416328484652057918050594121071599892324307787984169790748653993686423174452004548142481226244288051309351801915926525391560956327325178699062764938180554405474898471755849812388351227034990003229240086288253676126686907565955415010494680455515971313299652925338196293709018529025447329058207944872181715843529074668196878030621700387823470546882536269510829760442315754511182219928192387399910310928586622172937296380690585209692224659351841799830453779762671310883012344662769630912744183231838050554183340805068705632644159430227709281937708729411318791404194812995056682183031089822807949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 9058ffb09c75a8515477b1edf2a34316389e6cc5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							41a8e78e3bdd3c5805335d3453bf12112ca7bab0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (127 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'careum-weiterbildung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.careum-weiterbildung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'newsletter.careum-weiterbildung.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dokumente.careum-weiterbildung.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.geotrust.com/GeoTrustRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.2 (digiCertDVCert)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.geotrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.geotrust.com/GeoTrustRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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