img.china.alibaba.com

- Alibaba (China) Technology Co., Ltd. -

Issued by GlobalSign Organization Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 74:29:06:82:a0:62:41:87:55:9e:3a:3a was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Alibaba (China) Technology Co., Ltd.

Organization: Alibaba (China) Technology Co., Ltd.
State / Province: ZheJiang
Locality: HangZhou
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 74:29:06:82:a0:62:41:87:55:9e:3a:3a
Serial Number (int): 35949857841712726211649485370
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 8b:04:9f:ec:51:b2:50:a1:ba:93:c6:d2:f1:75:15:a6:75:a3:a8:14
AuthorityKeyId: 68:86:b8:7d:7a:d9:6d:49:6b:87:2f:18:8b:15:34:6c:d7:b4:7a:0e

Fingerprint (sha1): c9:ea:22:78:06:4d:bf:20:74:a0:3b:02:4f:86:be:8d:32:5d:bd:a0
Fingerprint (sha256): 00:07:66:e5:4f:8e:0a:37:58:84:5d:05:82:06:a8:45:4d:83:cb:06:2d:f9:6e:1b:3b:46:30:fd:5d:47:24:15

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsorganizationvalsha2g3.crl

Check the revocation status for certificate img.china.alibaba.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img.china.alibaba.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img.china.alibaba.com

Other certificates including the domain name alibaba.com

(limited to 100 certificates)
img.china.alibaba.com
*.access3.alibaba.com
*.access1.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.access1.alibaba.com
*.aliexpress.com
*.access.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.access.alibaba.com
air.alibaba.com
*.access.alibaba.com
*.access3.alibaba.com
*.alibaba.com
*.access.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access3.alibaba.com
*.alibabacorp.com
*.tmall.com
*.access3.alibaba.com
ae01.alicdn.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
comment.alwx.alibaba.com
*.alibabacorp.com
*.access2.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.alibaba.com
*.alibaba.com
*.access2.alibaba.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibaba.com
*.g-aicloud.alibaba.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.access.alibaba.com
*.alibabacorp.com
mtee3-bj.alibaba.com
*.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access1.alibaba.com
*.access.alibaba.com
*.alibabacorp.com
ae01.alicdn.com
www.highq.com
*.access2.alibaba.com
*.alibabacorp.com
mail.aliyun.com
*.access.alibaba.com
*.alibabacorp.com
www.aliexpress.com
*.alibabacorp.com
*.alibabacorp.com
*.access3.alibaba.com
*.alibabacorp.com
*.aliexpress.com
*.alibabacorp.com
*.access.alibaba.com
*.access1.alibaba.com
ru.aliexpress.com
*.access3.alibaba.com
*.access2.alibaba.com
*.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.alibabacorp.com
*.access1.alibaba.com
ru.aliexpress.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibaba.com
*.access1.alibaba.com
*.alibabacorp.com
*.alibabacorp.com

Certificate

The complete raw certificate details for img.china.alibaba.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFajCCBFKgAwIBAgIMdCkGgqBiQYdVnjo6MA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzMwHhcNMjMxMjAxMDU1MTEwWhcNMjUwMTAxMDU1MTA5WjCBgjELMAkGA1UEBhMC
Q04xETAPBgNVBAgTCFpoZUppYW5nMREwDwYDVQQHEwhIYW5nWmhvdTEtMCsGA1UE
ChMkQWxpYmFiYSAoQ2hpbmEpIFRlY2hub2xvZ3kgQ28uLCBMdGQuMR4wHAYDVQQD
ExVpbWcuY2hpbmEuYWxpYmFiYS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDQp34R2IAdOtIzR31sL2Ydj5wudC8oyxU3anHRYFGMFqhRfOjXAhcd
gKfF4xJLc+92cM7/Dc9d77d8h2vec2otUgSMfhGXBN6XZeXq3npJ/vZf6fWmUI2X
Jxogz8tte4L1FqexQIQtE7sGoO/53eepNy1qstXrKlWX5SJqAl2mbvPu24XkOdcY
4Vqx/3G7eeMaWg7uZd0YpMljkByIbWxhRy5oRyi+yO4BtRaHwmUPSLN04G13v3Cl
uSnd/dGwM1mdkwjALJCzZYI0AVtEuY6Qnpfeb0ML4Q/V7EsfdLHrNo4/vFSr+yd3
9TKWGrWsDdf1oHQy3Rfwl5ZRP2k7OpGPAgMBAAGjggH5MIIB9TAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADCBngYIKwYBBQUHAQEEgZEwgY4wSwYIKwYBBQUH
MAKGP2h0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5p
emF0aW9udmFsc2hhMmczLmNydDA/BggrBgEFBQcwAYYzaHR0cDovL29jc3AyLmds
b2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmczMFYGA1UdIARPME0w
QQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNp
Z24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjBGBgNVHR8EPzA9MDugOaA3hjVo
dHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcz
LmNybDAgBgNVHREEGTAXghVpbWcuY2hpbmEuYWxpYmFiYS5jb20wHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFGiGuH162W1Ja4cvGIsV
NGzXtHoOMB0GA1UdDgQWBBSLBJ/sUbJQobqTxtLxdRWmdaOoFDATBgorBgEEAdZ5
AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZ0T0BTprrG1NUGok+cmGVNs
7zdU1gixKPaN9Rd5EJBhKseKh0yNZ0Uy4C6Gibb5oSgdBaQlLBAGtsg+W2Id71En
RI2LA9twB5bS1ESVkdXka+/QiIlcP43xYVs8Tfb2YjR5tdygRPZyJLEmLjRsCXnP
BA/FFOXko65UcEh2FmK/RmHEQLbNWUnEBnO3ep3TW3toGhUWtVvWONx7Aln6AF4x
fRuAxWlI9kceDKxEbtCukJx9uuT77jF76QMbN/eAsM0L2ZYKQDMPsaN+P53diKMe
u6rTGMQ/eanvp5VEangEfdmAJZGVfXrLumkPgeYc+iZIENJagekkhY0gB527pQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Kd+EdiAHTrSM0d9bC9m
HY+cLnQvKMsVN2px0WBRjBaoUXzo1wIXHYCnxeMSS3PvdnDO/w3PXe+3fIdr3nNq
LVIEjH4RlwTel2Xl6t56Sf72X+n1plCNlycaIM/LbXuC9RansUCELRO7BqDv+d3n
qTctarLV6ypVl+UiagJdpm7z7tuF5DnXGOFasf9xu3njGloO7mXdGKTJY5AciG1s
YUcuaEcovsjuAbUWh8JlD0izdOBtd79wpbkp3f3RsDNZnZMIwCyQs2WCNAFbRLmO
kJ6X3m9DC+EP1exLH3Sx6zaOP7xUq/snd/Uylhq1rA3X9aB0Mt0X8JeWUT9pOzqR
jwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 35949857841712726211649485370
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-01 05:51:10 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-01 05:51:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ZheJiang'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HangZhou'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Alibaba (China) Technology Co., Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'img.china.alibaba.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26340161043175479592222647122722450171369287910529602774684600321692895848588767265938890831671664152854282566279558250273945173609622777212626242949392939758664620614055952697886317775887841780119479084054202564542305500913812476000467684187504249620547782086132374946759380723249129644697060251964298541748339855775177863989792588856397230881017802555038811072181569107494591849793639248724111073701782371034256072109075948571303101691931007874162874392203364526773023077908218204389556735264285359395256372553249846695189585115797428850951308712653518895541566980919605839223977747486793362315085525421585317138831
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (145 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (63 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsorganizationvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img.china.alibaba.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6886b87d7ad96d496b872f188b15346cd7b47a0e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							8b049fec51b250a1ba93c6d2f17515a675a3a814
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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