sam.mailmanager.com

Issued by GeoTrust Global TLS RSA4096 SHA256 2022 CA1

About this certificate

This digital certificate with serial number 0d:a2:52:03:9c:eb:3d:58:4e:49:e2:51:dc:ca:4e:31 was issued on by DigiCert, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=sam.mailmanager.com

DigiCert, Inc.

Organization: DigiCert, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 0d:a2:52:03:9c:eb:3d:58:4e:49:e2:51:dc:ca:4e:31
Serial Number (int): 18122779480122584196388699605618544177
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 55:69:30:01:29:11:7c:90:ba:8e:fd:8b:4a:3b:84:9b:58:1c:04:bf
AuthorityKeyId: a5:b4:d6:eb:36:c4:e7:6b:a6:df:c4:64:0b:01:2a:20:04:b8:66:23

Fingerprint (sha1): 5b:ff:1b:b1:88:08:06:f7:ba:66:b8:af:58:1a:a9:fe:26:0b:7a:f3
Fingerprint (sha256): e4:79:ea:d6:16:20:cf:ce:d2:a5:bc:fb:de:94:d9:ce:8b:42:c2:be:7d:69:18:05:7b:36:34:22:ec:a5:6b:2e

Issuing Certificate URL: http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl
CRL Distribution Point: http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl

Check the revocation status for certificate sam.mailmanager.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sam.mailmanager.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sam.mailmanager.com

Other certificates including the domain name mailmanager.com

(limited to 100 certificates)
application.mailmanager.com
info.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
info.mailmanager.com
mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
support.feelserv.net
application.mailmanager.com
support.feelserv.net
support.feelserv.net
blog.mailmanager.com
mailmanager.com
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
content.mailmanager.com
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
support.feelserv.net
info.mailmanager.com
blog.mailmanager.com
support.feelserv.net
cfapi-p1.mailmanager.com
support.mailmanager.com
support.feelserv.net
blog.mailmanager.com
sam.mailmanager.com
support.feelserv.net
auth.mailmanager.com
support.feelserv.net
mailmanager.com
cfapi-p1.mailmanager.com
support.feelserv.net
mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
www.mailmanager.com
support.feelserv.net
auth.mailmanager.com
www.mailmanager.com
support.feelserv.net
support.feelserv.net
rcs.mailmanager.com
blog.mailmanager.com
support.feelserv.net
support.feelserv.net
mailmanager.com
mailmanager.com
sam.mailmanager.com
mailmanager.com
content.mailmanager.com
rcs.mailmanager.com
support.feelserv.net
support.feelserv.net
support.feelserv.net
support.feelserv.net

Certificate

The complete raw certificate details for sam.mailmanager.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHlTCCBX2gAwIBAgIQDaJSA5zrPVhOSeJR3MpOMTANBgkqhkiG9w0BAQsFADBc
MQswCQYDVQQGEwJVUzEXMBUGA1UEChMORGlnaUNlcnQsIEluYy4xNDAyBgNVBAMT
K0dlb1RydXN0IEdsb2JhbCBUTFMgUlNBNDA5NiBTSEEyNTYgMjAyMiBDQTEwHhcN
MjMwOTA3MDAwMDAwWhcNMjQwMzA3MjM1OTU5WjAeMRwwGgYDVQQDExNzYW0ubWFp
bG1hbmFnZXIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1le
UgpkODpXUzhPla9RnaHPwB+W0y9CHJuKl5TsJA0FOw7Msv7gHutITl/VyY+DnAZi
8bYZqUQizmQXHNZwncsuK3eF2o1qRZbzJZD9XVemE3PpnbJHSxDo3K/ZOd/4ZsLY
//P04zwy66WSvE4IKHZEILaxH6meueH2KryE/XqPCNVljd+KcjRMz5mdvnQ21CFM
yaGYKdY9urup2XiLt+A8wYhFoe0tQ7GKxzken/35kDGiQRQGLCkHRIox1BN5HdH6
h0knZNvmx/vQp7O2/HkslxJIb4XNZbyZ6chxHHhEvDO4Qwd0LieRAaqtM0YJt6aW
IH6kVlI6siy/aZ371QIDAQABo4IDjzCCA4swHwYDVR0jBBgwFoAUpbTW6zbE52um
38RkCwEqIAS4ZiMwHQYDVR0OBBYEFFVpMAEpEXyQuo79i0o7hJtYHAS/MB4GA1Ud
EQQXMBWCE3NhbS5tYWlsbWFuYWdlci5jb20wPgYDVR0gBDcwNTAzBgZngQwBAgEw
KTAnBggrBgEFBQcCARYbaHR0cDovL3d3dy5kaWdpY2VydC5jb20vQ1BTMA4GA1Ud
DwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAgYIKwYBBQUHAwEwgZ8GA1Ud
HwSBlzCBlDBIoEagRIZCaHR0cDovL2NybDMuZGlnaWNlcnQuY29tL0dlb1RydXN0
R2xvYmFsVExTUlNBNDA5NlNIQTI1NjIwMjJDQTEuY3JsMEigRqBEhkJodHRwOi8v
Y3JsNC5kaWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2
MjAyMkNBMS5jcmwwgYcGCCsGAQUFBwEBBHsweTAkBggrBgEFBQcwAYYYaHR0cDov
L29jc3AuZGlnaWNlcnQuY29tMFEGCCsGAQUFBzAChkVodHRwOi8vY2FjZXJ0cy5k
aWdpY2VydC5jb20vR2VvVHJ1c3RHbG9iYWxUTFNSU0E0MDk2U0hBMjU2MjAyMkNB
MS5jcnQwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUA
7s3QZNXbGs7FXLedtM0TojKHRny87N7DUUhZRnEftZsAAAGKb3QCrwAABAMARjBE
AiAqguOheVaibUg4s0y2oZOzOtowXMLHSNumnNC97Jx65QIgDlS2zd3aYsywwALu
Dx+5zRRXT0s9su9Mdy9nAXRzLGsAdwBIsONr2qZHNA/lagL6nTDrHFIBy1bdLIHZ
u7+rOdiEcwAAAYpvdALtAAAEAwBIMEYCIQDUHXxHrW8Cqf7m0G8qkLwlP2t48xdM
ugn0bhcllYOPUAIhAOtzGV31lrY/Wle2dOgPhSaoZoD5cX6egm963IiGXLzkAHYA
2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sAAAGKb3QClwAABAMARzBF
AiEArA/n+thvKttYZPzZD/fwh5J99cycNrJbelwzD1Ty6VgCIB7TibmgeVHtNQst
n7Bur1PdSBU3SaNf3r6Xlv5ypozFMA0GCSqGSIb3DQEBCwUAA4ICAQAghmUezqh1
BtbGomMGqd49OGrjEBxak1pA1a5th1Zca34zwBoyyuAQsP1Ep8/JNaxFB1rA8cLj
jnrSC1HBGliX51GiQC7EbIQdkOCpKyneo7abEvGhBmuqPfK7D245ftLHXw5QGdw7
+8guqLXarXxTREu9RaUmTthmTY/WbECIqarRtJUXn5pyZjJD0JnkFNxNWXbBi48d
+NaBDRjqRZj/UmSDNIT3kodHMHBb9lOWll5u9x3FYxYg+gBmGF37fiHzzJoy8RP0
I8l9925fUCq4ljq+xFtB3BVHxCBSxlPt+XoNMe7TiAILvMpgDj3cRKvH59tO+6lV
uhJFAopUdSBAqnJ1fhxR32nO0tK6KZu94VvxQRBMPPNaKHTMzyofSNAnr7GUrKP7
8ry4QCcoJ4Y9EdJWnrmnRo8ETiQzf+ND+KOe/3ZnBJITClCtZPsh/pXjLEyYl7ux
uLVYJ2kqVegvsMeOUI+UyenHvsS5kUH8qlVv9P58zNNy0WEdg3mrz8L+M0u+tMaz
SxV8tWE2l2mQ1HjAnh528Xxn0uetNM7gNlfi89bohkewXSFZqMFMJPv4TbUnOws+
rFxmuUJb2biHD7kx2F5qedKzLPx1iR/N9G4od01EDyxStJ2TeBPkZ16oCBaNZsVv
ruuSQt82Pm9/49Xsowdy34EBNfTSR9T6LA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1leUgpkODpXUzhPla9R
naHPwB+W0y9CHJuKl5TsJA0FOw7Msv7gHutITl/VyY+DnAZi8bYZqUQizmQXHNZw
ncsuK3eF2o1qRZbzJZD9XVemE3PpnbJHSxDo3K/ZOd/4ZsLY//P04zwy66WSvE4I
KHZEILaxH6meueH2KryE/XqPCNVljd+KcjRMz5mdvnQ21CFMyaGYKdY9urup2XiL
t+A8wYhFoe0tQ7GKxzken/35kDGiQRQGLCkHRIox1BN5HdH6h0knZNvmx/vQp7O2
/HkslxJIb4XNZbyZ6chxHHhEvDO4Qwd0LieRAaqtM0YJt6aWIH6kVlI6siy/aZ37
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18122779480122584196388699605618544177
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Global TLS RSA4096 SHA256 2022 CA1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-07 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-07 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sam.mailmanager.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25670445128030815189609502728728830355148243456979335077171534666010932969900573969374222562050050207334602884193563204692206378935982030450691817321160287328331886868205144467750808044631102919106282491595847992855226465469855051479319036958396246037213501518159984850267680699038692215885624121262960341504840817390866338167178362207310876177497654923996735601477147838906978112019552801018749446824755359806036264499678536319119922425718409735385681062267266345170427795236920724006083923251626515583462349697089898670418833702989916847257556186523098631237641889180119946643807028783292730748195946711573226978261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName a5b4d6eb36c4e76ba6dfc4640b012a2004b86623
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5569300129117c90ba8efd8b4a3b849b581c04bf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sam.mailmanager.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/CPS'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (151 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (123 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/GeoTrustGlobalTLSRSA4096SHA2562022CA1.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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