*.logitech.com

Issued by Amazon RSA 2048 M02

About this certificate

This digital certificate with serial number 0a:c8:d1:89:14:90:0e:57:39:41:37:06:f4:35:fc:7d was issued on by Amazon.

With 10 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.logitech.com

Amazon

Organization: Amazon
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 0a:c8:d1:89:14:90:0e:57:39:41:37:06:f4:35:fc:7d
Serial Number (int): 14334989213785405144651566959759326333
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: db:2c:38:88:49:31:ef:a8:ee:b1:80:60:86:ae:db:9d:c7:01:6e:56
AuthorityKeyId: c0:31:52:cd:5a:50:c3:82:7c:74:71:ce:cb:e9:9c:f9:7a:eb:82:e2

Fingerprint (sha1): d0:b1:1e:a5:ce:e3:dc:19:0e:35:5d:ec:20:7a:ee:cd:28:2b:5f:67
Fingerprint (sha256): f6:42:8b:c5:6a:5d:6e:9d:26:5a:e3:b0:1d:f1:a5:8a:88:9b:eb:78:1e:60:6f:3e:d2:0d:ca:92:b1:c4:c5:00

Issuing Certificate URL: http://crt.r2m02.amazontrust.com/r2m02.cer

Revocation information

OCSP Server: http://ocsp.r2m02.amazontrust.com
CRL Distribution Point: http://crl.r2m02.amazontrust.com/r2m02.crl

Check the revocation status for certificate *.logitech.com

10

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.logitech.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.logitech.com
*.logitechg.com.cn
*.logi.com
*.logicool.co.jp
*.worldsfastestgamer.net
*.logitech.fr
*.logitech.com.cn
*.logitechg.fr
*.logicoolg.com
*.logitechg.com

Other certificates including the domain name logitech.com

(limited to 100 certificates)
statuspage.io
design.logitech.com
partners.logitech.com
cart.logitech.com
*.ops.logitech.com
statuspage.io
exchange.logitech.com
brandassets.logitech.com
dc.jtech.cc
secure02.lithium.com
originaem-gaming.logitech.com
shop.logitech.com
reports.pws.logitech.com
prod.46.slot.cdn.salesforce-communities.com
*.logitech.com
dev3.vc.logitech.com
lat.logitech.com
supplier.logitech.com
logilife.logitech.com
*.it.logitech.com
buy.logitech.com
onlinestatus.bambora.com
design.logitech.com
postrack.logitech.com
brandassets.logitech.com
prod.46.slot.cdn.salesforce-communities.com
developers.logitech.com
statuspage.io
statuspage.io
statuspage.io
statuspage.io
logitech.com
statuspage.io
*.logitech.com
logiappstore.logitech.com
webapps.logitech.com
*.logitech.com
requirements.logitech.com
prod.46.slot.cdn.salesforce-communities.com
blog.logitech.com
secure02.lithium.com
*.gerrit.logitech.com
twwarranty.logitech.com
opensearch-logs.logitech.com
plantuml.devops.logitech.io
partnernews.logitech.com
testreports.vc.logitech.com
logilife.logitech.com
segtglobalsummit.logitech.com
forums.logitech.com
statuspage.io
logitech.com
cart.logitech.com
logitech.com
statuspage.io
sourcegraph.logitech.com
spaces-staging.logitech.com
statuspage.io
*.logitech.com
postrack.logitech.com
*.logitech.com
opensource.logitech.com
buy.logitech.com
creative.logitech.com
statuspage.io
help.logitech.com
dev.vc.logitech.com
originaem-gaming.logitech.com
twepp.logitech.com
ci.vctools.logitech.com
*.logitech.com
brandassets.logitech.com
secure02.lithium.com
logilife.logitech.com
vc.logitech.com
buy.logitech.com
secure04.stage.lithium.com
login.logitech.com
dc.jtech.cc
statuspage.io
viewer.logitech.com
partners.logitech.com
dev2.vc.logitech.com
buy-ue.logitech.com
secure02.lithium.com
teamcity.logitech.com
brandcenter.logitech.com
twepp.logitech.com
statuspage.io
statuspage.io
vip.logitech.com
postrack.logitech.com
statuspage.io
partners.logitech.com
iot.eu-west-3.vc.logitech.com
statuspage.io
logiappstore.logitech.com
opensource.logitech.com
dev.vc.logitech.com
logilife.logitech.com

Certificate

The complete raw certificate details for *.logitech.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGazCCBVOgAwIBAgIQCsjRiRSQDlc5QTcG9DX8fTANBgkqhkiG9w0BAQsFADA8
MQswCQYDVQQGEwJVUzEPMA0GA1UEChMGQW1hem9uMRwwGgYDVQQDExNBbWF6b24g
UlNBIDIwNDggTTAyMB4XDTI0MDYyMTAwMDAwMFoXDTI1MDcyMDIzNTk1OVowGTEX
MBUGA1UEAwwOKi5sb2dpdGVjaC5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQCMugAq6c3Y4JF14zP2Hgbm3MAveH22/COPmURPzIjM2XmpWjMDp3Os
2OqqUu0wHvjqcw+jVvo0u39Bt6tLOfHOa91UMsjCG+DfG3p5I3YoqMzOVKUdoPIa
9+k56mdrRMhOWfYsXscTSO7bVONARabJ78tyic0yw1edIF61gENQSIdOPbOJbKZf
gvU9AasdGqRZTtFvMOBdWsP+p0g8ZR7FIVrPJ2LiIFaKewX2yMzcH6R4xedHeKLY
gyBYtNzozVfBarDatB+naNkI1tFka7lnXxGZBPcUBQ+AvUZXq1rxCIBGUvSbAKUz
AKp+OZw6tEVZlHdYTyi2ZJ0FyPIQ5OCVAgMBAAGjggOKMIIDhjAfBgNVHSMEGDAW
gBTAMVLNWlDDgnx0cc7L6Zz5euuC4jAdBgNVHQ4EFgQU2yw4iEkx76jusYBghq7b
nccBblYwgbsGA1UdEQSBszCBsIIOKi5sb2dpdGVjaC5jb22CEioubG9naXRlY2hn
LmNvbS5jboIKKi5sb2dpLmNvbYIQKi5sb2dpY29vbC5jby5qcIIYKi53b3JsZHNm
YXN0ZXN0Z2FtZXIubmV0gg0qLmxvZ2l0ZWNoLmZyghEqLmxvZ2l0ZWNoLmNvbS5j
boIOKi5sb2dpdGVjaGcuZnKCDyoubG9naWNvb2xnLmNvbYIPKi5sb2dpdGVjaGcu
Y29tMBMGA1UdIAQMMAowCAYGZ4EMAQIBMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwOwYDVR0fBDQwMjAwoC6gLIYqaHR0cDov
L2NybC5yMm0wMi5hbWF6b250cnVzdC5jb20vcjJtMDIuY3JsMHUGCCsGAQUFBwEB
BGkwZzAtBggrBgEFBQcwAYYhaHR0cDovL29jc3AucjJtMDIuYW1hem9udHJ1c3Qu
Y29tMDYGCCsGAQUFBzAChipodHRwOi8vY3J0LnIybTAyLmFtYXpvbnRydXN0LmNv
bS9yMm0wMi5jZXIwDAYDVR0TAQH/BAIwADCCAX4GCisGAQQB1nkCBAIEggFuBIIB
agFoAHYAEvFONL1TckyEBhnDjz96E/jntWKHiJxtMAWE6+WGJjoAAAGQORIPNQAA
BAMARzBFAiEA4Ve7rkQEMiykYYHqM3my6pmQX8heTD5Ct6ihCdGu77ICICV7jJKu
mFrk2wfSqykdwPnjmeB8tprVgwD27EAUbNJdAHUAfVkeEuF4KnscYWd8Xv340Idc
FKBOlZ65Ay/ZDowuebgAAAGQORIPXgAABAMARjBEAh8mgTDHC1tFXUhCG/qBubYB
4BTt0HesmMrXkqmLhGQYAiEAibuD22xLggBf4krFSprtJ2gmKWl93sO9zLTndvHw
ElYAdwDm0jFjQHeMwRBBBtdxuc7B0kD2loSG+7qHMh39HjeOUAAAAZA5Eg9vAAAE
AwBIMEYCIQDLCzFPV0MTlzKzp+krXYo2sur8PtnMXxkcTXOB/CGVsQIhAOxW0czx
r9HDXjmUPabOaZntj9U6VZLUV9Q+AkKFu0uxMA0GCSqGSIb3DQEBCwUAA4IBAQB3
eWwmfP0t07tjURJ/81kSe5fYU3/cgg9xfubLjD43p5y49di8DCrGee2//LyUaC/v
dpLWh4X205H9NNkztCHKnrqL7M0quMIhJXirGHD7ka1b7tlB6Q+ZMep5J61VzQSY
A9byj61tS3BKj2kTfUGmWzRkVpeNKFUVypMlfUa/kKyyyemea2JepAtybNL3qNea
WZVHgdS9VAC9RUYqgOrF6UdrNdRwVDutFcz2mgZNDx8DcA0jSzbnBmJ9iLymtxZ+
pA4H+78d+udgaPVxEm8/z+2CDvlZhmEo3YSzd2nE7L6La8D66iQgdXTzcKpYwZ8S
E0uEYDevD5Vd5uHZ9ETi
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLoAKunN2OCRdeMz9h4G
5tzAL3h9tvwjj5lET8yIzNl5qVozA6dzrNjqqlLtMB746nMPo1b6NLt/QberSznx
zmvdVDLIwhvg3xt6eSN2KKjMzlSlHaDyGvfpOepna0TITln2LF7HE0ju21TjQEWm
ye/LconNMsNXnSBetYBDUEiHTj2ziWymX4L1PQGrHRqkWU7RbzDgXVrD/qdIPGUe
xSFazydi4iBWinsF9sjM3B+keMXnR3ii2IMgWLTc6M1XwWqw2rQfp2jZCNbRZGu5
Z18RmQT3FAUPgL1GV6ta8QiARlL0mwClMwCqfjmcOrRFWZR3WE8otmSdBcjyEOTg
lQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 14334989213785405144651566959759326333
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amazon RSA 2048 M02'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-07-20 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.logitech.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17765083036596464633768568517165731740089602318459578465277166764043581623624868900141436267323128600835382069575790066381872970318734117992772506392837653730296242781775042220206930553607428482753007859677646281272216570957616292979430962207086497119093448391418606356876562613023014735311522744204947012481702024821077570433644194795185554052384505287417279436203945285748145656512525261366525401748767152952995495866254134811393659106775897589064978715648398344936748769432026173420572700402158421559472479357707281902947664639430539578085225448982807832670245732380300009942188882852005193260603130282957143859349
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c03152cd5a50c3827c7471cecbe99cf97aeb82e2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							db2c38884931efa8eeb1806086aedb9dc7016e56
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (179 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logi.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicool.co.jp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.worldsfastestgamer.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitech.com.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logicoolg.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.logitechg.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.r2m02.amazontrust.com/r2m02.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.r2m02.amazontrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crt.r2m02.amazontrust.com/r2m02.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0077796c267cfd2dd3bb6351127ff359127b97d8537fdc820f717ee6cb8c3e37a79cb8f5d8bc0c2ac679edbffcbc94682fef7692d68785f6d391fd34d933b421ca9eba8beccd2ab8c2212578ab1870fb91ad5beed941e90f9931ea7927ad55cd049803d6f28fad6d4b704a8f69137d41a65b346456978d285515ca93257d46bf90acb2c9e99e6b625ea40b726cd2f7a8d79a59954781d4bd5400bd45462a80eac5e9476b35d470543bad15ccf69a064d0f1f03700d234b36e706627d88bca6b7167ea40e07fbbf1dfae76068f571126f3fcfed820ef959866128dd84b37769c4ecbe8b6bc0faea24207574f370aa58c19f12134b846037af0f955de6e1d9f444e2