b-h-m.spc.us00.p.con-veh.net

- Volkswagen Group of America -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 97:19:95:cb:de:67:81:3e:00:00:00:00:50:f0:0c:90 was issued on by Entrust, Inc..

With 17 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Volkswagen Group of America

Organization: Volkswagen Group of America
State / Province: Michigan
Locality: Auburn Hills
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 97:19:95:cb:de:67:81:3e:00:00:00:00:50:f0:0c:90
Serial Number (int): 200846273016164403862475162957904874640
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 09:a6:40:52:55:32:dc:e7:0b:5f:95:a3:e8:41:78:bc:09:01:75:1b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): f2:0e:85:d4:09:60:6a:64:ac:0d:84:25:69:78:f9:64:e4:72:de:92
Fingerprint (sha256): e0:fb:10:f3:05:83:d2:55:28:42:88:2d:63:4e:a7:d8:ca:3c:16:76:06:50:f9:49:f5:4f:8d:ec:85:ed:a3:08

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate b-h-m.spc.us00.p.con-veh.net

17

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for b-h-m.spc.us00.p.con-veh.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

b-h-m.spc.us00.p.con-veh.net
www.b-h-m.spc.us00.p.con-veh.net
b-h-m.spr.us00.p.con-veh.net
b-h-s.spc.us00.p.con-veh.net
b-h-s.spr.us00.p.con-veh.net
b-h-s.dp.us00.p.con-veh.net
w-h-s.spr.us00.p.con-veh.net
w-h-s.app.us00.p.con-veh.net
w-h-s.auth.us00.p.con-veh.net
w-h-s.cdn.us00.p.con-veh.net
i-h-s.dp.us00.p.con-veh.net
i-h-s.spr.us00.p.con-veh.net
i-h-s.spc.us00.p.con-veh.net
i-h-s.app.us00.p.con-veh.net
i-h-s.auth.us00.p.con-veh.net
m-h-s.mon.us00.p.con-veh.net
o-h-s.mgmt.us00.p.con-veh.net

Other certificates including the domain name con-veh.net

(limited to 100 certificates)
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-qa01.con-veh.net
carnet-CUBICclient.con-veh.net
ecert-prod01-ca.con-veh.net
carnet-verizonclient.con-veh.net
b-h-m.spc.us00.p.con-veh.net
carnet-verizonclient-qa.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-dev01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
ecert-prod01-ca.con-veh.net
ecert-qa01.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.uat.con-veh.net
b-h-m.spc.us00.int.con-veh.net
carnet-boschclient.con-veh.net
ecert-prod01.con-veh.net
b-h-m.spc.us00.int.con-veh.net
b-h-m.spc.us00.p.con-veh.net
ecert-prod01.con-veh.net
carnet-boschclient-qa.con-veh.net
ecert-dev01.con-veh.net
carnet-CUBICclient-qa.con-veh.net
b-h-m.spc.us00.int.con-veh.net

Certificate

The complete raw certificate details for b-h-m.spc.us00.p.con-veh.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFDrDjm3FKo+ZjxrDaRj
Hj1P9J+2jrHq1pEkIbq2VUcIWSo/Oh+F5LYhDtwW7q6ykwqs9dX8lgHMDrrGQV4o
B9qDwmMZ/nxCzxqw5DXHQq2uUuniZAHM0UHewB4otmeGj61/juvPec+TXwC0xsWc
1rM1HVQLGSLqSyPVwhHWaC57gUO+UVlm8jksXA+QocLm+WJm1pHq1PWK86okIS1y
PcalXpm8y+6nrsHXHVHz71CkQS4Ah/Bs8CarUBusuIFVFPCQGtkpj0mrRLwDn1Av
GCWNfxRwTHmlvkmNa+G3JPtOOMEetDoHf3q/6ju8kMnYKfjUxKv3d8R+6gyuDOoH
9wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 200846273016164403862475162957904874640
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-09 15:46:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 16:16:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Auburn Hills'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Volkswagen Group of America'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22762797138492033130918923978292081489736899848036551881432929104696818980099804388643537297801241587971996003253695584554034017873045862925922324452610514242258916701305554394431567833976094579511779975169188203598103965395976306842952030253741740062640104755666169602052639851669733979229626742325953402629739900634798729962381981308912764107750577608688504389708231712278394142936227414024373137015886536613971100973953258822926017779169445873464468212669748402541583764383404295052820837390719807741523840510707086879880905220225247182200790262243141467065950925502048989510661683269383022662765272892699899987959
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (519 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.b-h-m.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-m.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'b-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.app.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.auth.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'w-h-s.cdn.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.dp.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spr.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.spc.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.app.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'i-h-s.auth.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'm-h-s.mon.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'o-h-s.mgmt.us00.p.con-veh.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							09a640525532dce70b5f95a3e84178bc0901751b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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