sapgtsprd.illumina.com

- Illumina, Inc. -

Issued by HydrantID SSL ICA G2

About this certificate

This digital certificate with serial number 10:59:de:1f:a7:48:e4:3a:28:9f:37:55:e5:31:60:27:f0:c9:91:0e was issued on by HydrantID (Avalanche Cloud Corporation).

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Illumina, Inc.

Organization: Illumina, Inc.
Organization unit: GIS
State / Province: CA
Locality: San Diego
Country: US

HydrantID (Avalanche Cloud Corporation)

Organization: HydrantID (Avalanche Cloud Corporation)
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:59:de:1f:a7:48:e4:3a:28:9f:37:55:e5:31:60:27:f0:c9:91:0e
Serial Number (int): 93347968354440432838265296526531420656472002830
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 7e:b0:ec:ce:24:d0:ee:fc:24:dc:78:1d:a6:ee:5b:fb:65:11:e0:a7
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7

Fingerprint (sha1): 2f:2b:9a:b7:af:02:c1:c0:78:12:ee:06:60:e0:4e:e3:77:ef:a0:6d
Fingerprint (sha256): 00:1d:79:dc:2a:3b:08:1f:26:98:5b:8a:76:b0:32:7f:76:3e:39:af:ba:b0:53:e0:99:5f:c6:67:e0:15:1a:d2

Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl

Check the revocation status for certificate sapgtsprd.illumina.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sapgtsprd.illumina.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sapgtsprd.illumina.com

Other certificates including the domain name illumina.com

(limited to 100 certificates)
secure07.stage.lithium.com
ussd-prd-arcp01.illumina.com
ussd-sbx-zpac06.illumina.com
sapgtsprd.illumina.com
lims-rc.illumina.com
dev.rancherpd.illumina.com
dev-prdt.illumina.com
ipp-dev.illumina.com
sgnt-dev-zpac04.illumina.com
lab.adamshealthnetwork.org
instrument-scheduler.ils.illumina.com
sapmiidev.illumina.com
tableausbx.illumina.com
adm-fab-san-prd.illumina.com
prdt.illumina.com
devchat-bluejeans-service.aws-prod.illumina.com
incapsula.com
vault.oad.illumina.com
cpc-jenkins.ep-np.illumina.com
incapsula.com
cds1.cvent.com
grr.illumina.com
ussd-prd-dswb03.illumina.com
gokpi.illumina.com
eventregistration.illumina.com
tst2.etpsolr.illumina.com
*.subscription.illumina.com
supportassets.illumina.com
ontology.testing-domain.illumina.com
*.iron-tst.illumina.com
rancher-vye.aws-dev.illumina.com
UKCH-PRD-SNMD02.illumina.com
*.cloud-test.illumina.com
sso.login.illumina.com
www.alexhang.com
cds1.cvent.com
www.illumina.com
api.sequencing-design.designstudio-staging.illumina.com
tierboard-dev.illumina.com
wgs-preprod.illumina.com
controlmdev.illumina.com
*.docker.illumina.com
cds1.cvent.com
api-tst.add.illumina.com
expwy.apac.illumina.com
components.illumina.com
use1.deso-prod.cpo.illumina.com
www.providerportal.ils.illumina.com
othrys.olympia.k8s.backend-dev-aws.illumina.com
software.radiance-design.illumina.com
finvivirstatus.mambu.com
secure07.stage.lithium.com
tls.automattic.com
*.cloud-test.illumina.com
ipp.illumina.com
softwaredownloads.illumina.com
ussd-dev-zpac04.illumina.com
ussd-ftp.illumina.com
company.ensvee.com
ussd-dev-smap01.illumina.com
ussd-tst-etpw01.illumina.com
ussd-prd-hpad03.illumina.com
vaultdev.illumina.com
ashg2020.illumina.com
*.basespace.illumina.com
*.rancher-dev.illumina.com
cds1.cvent.com
inotifications-dev.illumina.com
sapeccprd.illumina.com
finvivirstatus.mambu.com
hub-dev.illumina.com
solr-ldap-service.illumina.com
login.illumina.com
incapsula.com
usma-prd-rdgw01.illumina.com
cds1.cvent.com
blog.infra.illumina.com
rancher-thtf.aws-dev.illumina.com
*.cloud-naboo.illumina.com
myaccess-sbx.illumina.com
secure07.stage.lithium.com
ussd-prd-clms02.illumina.com
platform.illumina.com
rancher-test.aws-prod.illumina.com
ukga-prd-hpov03.illumina.com
esb13-n1.illumina.com
incapsula.com
secure07.stage.lithium.com
finvivirstatus.mambu.com
*.testing-domain.illumina.com
*.ca.basespace.illumina.com
*.oad-aws.illumina.com
ussd-prd-snmd04.illumina.com
ussd-prd-okta01.illumina.com
secure07.stage.lithium.com
delivery-api-bssh.ils.illumina.com
cds1.cvent.com
ussd-prd-sfdcspkl.illumina.com
blog.arwinstrating.com
splunkes.illumina.com

Certificate

The complete raw certificate details for sapgtsprd.illumina.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGLTCCBBWgAwIBAgIUEFneH6dI5DoonzdV5TFgJ/DJkQ4wDQYJKoZIhvcNAQEL
BQAwXjELMAkGA1UEBhMCVVMxMDAuBgNVBAoTJ0h5ZHJhbnRJRCAoQXZhbGFuY2hl
IENsb3VkIENvcnBvcmF0aW9uKTEdMBsGA1UEAxMUSHlkcmFudElEIFNTTCBJQ0Eg
RzIwHhcNMTkwMjE1MjMxMTU3WhcNMjEwMjE1MjMyMTAwWjB2MQswCQYDVQQGEwJV
UzELMAkGA1UECAwCQ0ExEjAQBgNVBAcMCVNhbiBEaWVnbzEXMBUGA1UECgwOSWxs
dW1pbmEsIEluYy4xDDAKBgNVBAsMA0dJUzEfMB0GA1UEAwwWc2FwZ3RzcHJkLmls
bHVtaW5hLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuBragM
tMEPfekrJ93ts+mbSeIctX5hJPjG1DD4RrYS1h38S5SZ/xCApzZIioP6Xk2EWekx
KaVp0hRCJvyCjhoaYia0zbKG1AHgd6WtOOGCnPUpnzdXj4vmpytCqtddlDSFE82g
70kYySld0FBpRycc2MnTcLLOW20uF87gqZ/DulqpTOIuLsGJJlxieCVZIqFSLBam
9EDFaQwoo3fkRw2x9mLsGBHszyxIZ+UuOuyPwRuHehDfK/S4wbOIQ69XiuLkunqv
kDVabT4HEq6gwCNdCg8Us6iihaStk9I4QfdqfU4G8URph1AE+kKE4V3LOceTMK4h
dInBZ3hdwRK6Rn8CAwEAAaOCAckwggHFMAkGA1UdEwQCMAAwHwYDVR0jBBgwFoAU
mGq2LS6/p6qf9vfWCa/Vi1f5ircwdAYIKwYBBQUHAQEEaDBmMDgGCCsGAQUFBzAC
hixodHRwOi8vdHJ1c3QucXVvdmFkaXNnbG9iYWwuY29tL2h5ZHNzbGcyLmNydDAq
BggrBgEFBQcwAYYeaHR0cDovL29jc3AucXVvdmFkaXNnbG9iYWwuY29tMCEGA1Ud
EQQaMBiCFnNhcGd0c3ByZC5pbGx1bWluYS5jb20wXgYDVR0gBFcwVTAIBgZngQwB
AgIwSQYMKwYBBAG+WAADhwQAMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly93d3cuaHlk
cmFudGlkLmNvbS9zdXBwb3J0L3JlcG9zaXRvcnkwHQYDVR0lBBYwFAYIKwYBBQUH
AwIGCCsGAQUFBwMBMDsGA1UdHwQ0MDIwMKAuoCyGKmh0dHA6Ly9jcmwucXVvdmFk
aXNnbG9iYWwuY29tL2h5ZHNzbGcyLmNybDAdBgNVHQ4EFgQUfrDsziTQ7vwk3Hgd
pu5b+2UR4KcwDgYDVR0PAQH/BAQDAgWgMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4ICAQDbSGBpB5KJG7x4fgVWf9TWb67X1B1QZAwaj2nA76by
iZexudvCyj/1ScI0Qo+XopXkac6sHG6wQpiPCpqO6ly8823odTrmDDGRMV6wvKCC
v5p5jRCiIY8B5dcKHYL4dvaUNYmfBBZ8ZCSSLr2raqQjjkr32fgmsRNaQaYSScw5
+JM6pE5XZQU/44vxDXFsEz3CfgywkSbLMILm4zdrcRM1nM3njcPhWRt9mvu1fGM2
6nC/akeLDv5NbEd5eCGYQ/S6emNXh5GV6viSQkg4yq+79IroqGGqwgIlAB9H/Hrc
1O4Hr1lUUuY0wRdf+DiFo6anX/jymlEZFbCvr//pCCTJ9tLwwltlFf5K4UTlqHYw
kdA+u+FfZvsYadu55++6i7RdMfn71iPKXyfWI98F1pc5KEIQ0Q/5lkwWuTgFPHgK
Tni5jjZWBHfwiGyH+5OWVywokV7w7VGsdl9zbcC+m/QSImrdusPuRx5tGhKr1awR
U8RYQLHjTr3LZW3kGOxQtiwpin0t0MRNHmxOM2ZAItG5/k/yzhsRjw2kG4hBt6jF
qqJKvtyp/Z6tEYEd1g83bq2ksWqCvxx+yGOXQ9S6CQHaciutgCr5ddFzHy+mxbEo
A21GCW4Ps4BEH+MYbRGzpZ0YtcpTncReeDOT2VlbuXN4RrghHXfj/HX266KAEn4y
BA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4GtqAy0wQ996Ssn3e2z
6ZtJ4hy1fmEk+MbUMPhGthLWHfxLlJn/EICnNkiKg/peTYRZ6TEppWnSFEIm/IKO
GhpiJrTNsobUAeB3pa044YKc9SmfN1ePi+anK0Kq112UNIUTzaDvSRjJKV3QUGlH
JxzYydNwss5bbS4XzuCpn8O6WqlM4i4uwYkmXGJ4JVkioVIsFqb0QMVpDCijd+RH
DbH2YuwYEezPLEhn5S467I/BG4d6EN8r9LjBs4hDr1eK4uS6eq+QNVptPgcSrqDA
I10KDxSzqKKFpK2T0jhB92p9TgbxRGmHUAT6QoThXcs5x5MwriF0icFneF3BErpG
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 93347968354440432838265296526531420656472002830
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-15 23:11:57 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-02-15 23:21:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Diego'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Illumina, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'GIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'sapgtsprd.illumina.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23670509804140036195457113792768217015866479451853736137830338341717864254221850833474768504363287415661937434279070602036345893502898013846293346819298949355394012806440788505757636897308093356809335140113107624243056377549982525499153757178446241832185746761606945029778372656597699429808646462776523119736766731140107486086977023235835454750413049473182892680717273050095310054334572175828007177184255903142675158099018470043803808852071986966224955076193495166919270366172777363149014014828057546324185001575036967552136445013579541899962102070253234836326477222324404043275024126357020797936554760093879680779903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sapgtsprd.illumina.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							7eb0ecce24d0eefc24dc781da6ee5bfb6511e0a7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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