reflektis.com

- Reflektis -

Issued by Thawte EV RSA CA 2018

About this certificate

This digital certificate with serial number 0a:91:8b:e2:a3:19:6d:4c:65:9f:b2:4f:67:9b:f8:42 was issued on by DigiCert Inc.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Reflektis

Company registration number: 02048888
Organization: Reflektis
Organization unit: Reflektis
State / Province: Groningen
Locality: Usquert
Country: NL

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:91:8b:e2:a3:19:6d:4c:65:9f:b2:4f:67:9b:f8:42
Serial Number (int): 14048000213313140434695779277401225282
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 11:f7:b5:d1:49:a1:fd:e2:04:67:a1:cf:34:8c:30:b6:11:a0:c6:36
AuthorityKeyId: e7:01:fc:0c:16:18:ca:7d:b2:8c:ec:87:27:a3:6f:61:81:3b:84:39

Fingerprint (sha1): 12:0a:dc:ec:06:a3:f0:54:c6:67:c6:5e:5b:96:2b:10:80:f8:20:77
Fingerprint (sha256): e2:29:d3:3b:17:ed:69:82:8a:e8:ad:84:1b:90:03:e5:e8:64:e5:39:dd:d2:fb:8c:51:00:9b:24:3f:20:b5:0f

Issuing Certificate URL: http://cacerts.thawte.com/ThawteEVRSACA2018.crt

Revocation information

OCSP Server: http://status.thawte.com
CRL Distribution Point: http://cdp.thawte.com/ThawteEVRSACA2018.crl

Check the revocation status for certificate reflektis.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for reflektis.com

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

reflektis.com
www.reflektis.com
robvens.st
www.robvens.nl
robvens.com
robvens.nl
reflektis.nl
www.robvens.st
www.robvens.com
www.reflektis.nl

Other certificates including the domain name reflektis.com

(limited to 100 certificates)
payments.inursecoach.com
invoice.redsixdigital.com
app.pawsworldwide.org
ssl255761.cloudflaressl.com
support.plcorp.com
indiahr.lennoxintl.com
payments.inursecoach.com
support.digitalxraid.com
ssl84384.cloudflare.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
portail-client1.dawisey.com
ssl255761.cloudflaressl.com
reflektis.com
www.reflektis.com
books.anyflux.com
payments.inursecoach.com
app.pawsworldwide.org
support.reflektis.com
books.anyflux.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
reflektis.com
payments.inursecoach.com
payments.inursecoach.com
app.pawsworldwide.org
reflektis.com
reflektis.com
reflektis.com
payments.inursecoach.com
app.pawsworldwide.org
www.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
books.anyflux.com
app.pawsworldwide.org
payments.inursecoach.com
reflektis.com
support.reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
kundencenter.rudolph-itnetworks.de
csmeta.emtholding.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
ssl255761.cloudflaressl.com
support.fastview360.co.uk
app.pawsworldwide.org
support.qubelotto.co.uk
indiahr.lennoxintl.com
support.plcorp.com
indiahr.lennoxintl.com
books.begeleidwonennederland.nl
administratie.stickybandits.nl
payments.inursecoach.com
clients.axeltra.com
customer-creator.zoho.com
payments.inursecoach.com
mon-compte.prezens.fr
payments.inursecoach.com
client.semago.eu
books.anyflux.com
ssl255761.cloudflaressl.com
indiahr.lennoxintl.com
app.pawsworldwide.org
reflektis.com
my.42nerds.com
payments.inursecoach.com
customer-creator.zoho.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
ssl255761.cloudflaressl.com
payments.inursecoach.com
www.reflektis.com
www.reflektis.com
www.reflektis.com
app.pawsworldwide.org
books.parteam.fr
clientaccess.tristella.co.za
invoice.redsixdigital.com
indiahr.lennoxintl.com
indiahr.lennoxintl.com
files.drockmeeschter.lu
client.hardingsurveyors.co.uk
indiahr.lennoxintl.com
indiahr.lennoxintl.com
my.exposure-systems.com
ssl255761.cloudflaressl.com
accounts.baglietto.co.uk
indiahr.lennoxintl.com
facture.evocion.fr
reflektis.com
reflektis.com
ssl255761.cloudflaressl.com
app.pawsworldwide.org
app.pawsworldwide.org
customer-creator.zoho.com
reflektis.com
accounts.3bz.co.uk

Certificate

The complete raw certificate details for reflektis.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14048000213313140434695779277401225282
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Thawte EV RSA CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-12-22 12:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '02048888'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Groningen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Usquert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Reflektis'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'reflektis.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 820292989335755997861216078962100810194028929683559420797305164307091348041824178059988728714015898974152477508330678399760824465803046906641200049109472545837824605539731093142599042569215624203416117034159426361182008995035825668351814600543816741001885281676662581993349900370218196019744443975731891457537532935972714902923104666026910431180175298551189203018040667433745005341150950860826913844265643659005625265927317018802613936510942676090370868369541191437549419113704053592098199773796122501709257435612742355066637429438644252352020140602547575446961539480965550041863304748916994339745574282455558729509121038611534036785044161364301497318433348343440789759335288000415732973940120339546368721057411866855178941833822213853872850090466715442127672452009267429188684620286466850083986331323298086291299909914585170620280241532786039927671234424360904326802376807651479850128681267730928533235301372212206911469453166266428216944166966738629379140196645632404084565240827612227979970300527129355915947796846981877367543267980637732068968719868852721651028435180250748453743143864404656665076464799833433528139069125624879136831212213109398379212962989379495171304969083272679286235901005758731327217092494289726178749624047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e701fc0c1618ca7db28cec8727a36f61813b8439
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							11f7b5d149a1fde20467a1cf348c30b611a0c636
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (155 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'robvens.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'reflektis.nl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.st'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.robvens.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.reflektis.nl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp.thawte.com/ThawteEVRSACA2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.2.1 (DigiCert EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (101 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://status.thawte.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.thawte.com/ThawteEVRSACA2018.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f1007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000016f326d1e0300000403004830460221008e32b993e22d8c2cc8834c798a658674fb4e5a2eb7897dfeeeb476bc2b1ed4da022100f333d793ecb26491e0ca8f47b4903a4e4d3325d2dc8dc55f566be110605b72710076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000016f326d1e7c0000040300473045022100cf41efbc86d1b02148ad748d33f748665c2ae9fd0774a4ba5104b06a0bf64f830220235ecb9c07d2702d3e8623fc2cd4365b47fe3fa671b797b27a95a838a72e143a
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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