img1.shop.10086.cn

- China Mobile Information Technology Co.,Ltd. -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 5b:56:fa:38:2b:39:4e:b6:98:89:b5:d3:a0:9a:42:93 was issued on by UniTrust.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

China Mobile Information Technology Co.,Ltd.

Organization: China Mobile Information Technology Co.,Ltd.
State / Province: Beijing
Locality: Beijing
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 5b:56:fa:38:2b:39:4e:b6:98:89:b5:d3:a0:9a:42:93
Serial Number (int): 121411360198816489233629430572807504531
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: c0:c0:cc:a9:fb:aa:8e:58:59:9d:70:83:ab:ef:94:a6:18:4b:1f:96
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): e1:24:17:05:d0:fe:de:de:ce:01:60:2b:2e:7a:ca:bc:ca:66:c1:df
Fingerprint (sha256): 00:1f:a1:35:43:ba:be:26:94:d9:1a:62:77:01:e9:f9:e8:4a:a7:de:d8:04:0b:00:3e:ee:35:df:47:20:10:f0

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate img1.shop.10086.cn

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for img1.shop.10086.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

img1.shop.10086.cn

Other certificates including the domain name 10086.cn

(limited to 100 certificates)
img1.shop.10086.cn
www.jl.10086.cn
*.zj.10086.cn
*.ecloud.10086.cn
uc.ipower.10086.cn
open.jf.10086.cn
img02.js.10086.cn
att2.edu.hl.10086.cn
p.10086.cn
www.sx.10086.cn
mas.ecloud.10086.cn
h5.bj.10086.cn
www.cq.10086.cn
hdh.10086.cn
www.edu.hl.10086.cn
wap.sc.10086.cn
znjs.hn.10086.cn
*.mail.10086.cn
caiyun.feixin.10086.cn
www.hn.10086.cn
mas.ecloud.10086.cn
b2bjoy.10086.cn
*.open.10086.cn
*.health.10086.cn
www.ha.10086.cn
wap.gd.10086.cn
*.jf.10086.cn
wap.he.10086.cn
*.open.10086.cn
img02.js.10086.cn
img02.js.10086.cn
weixin.he.10086.cn
wap.gd.10086.cn
cmii.10086.cn
img0.shop.10086.cn
wap.xj.10086.cn
m.jf.10086.cn
service.cq.10086.cn
*.edu.10086.cn
*.ac.10086.cn
www.edu.hl.10086.cn
www.sd.10086.cn
hdh.10086.cn
*.f.10086.cn
*.pnt.10086.cn
*.ecloud.10086.cn
open.jf.10086.cn
xnq.r.10086.cn
service.hb.10086.cn
www.hb.10086.cn
p.10086.cn
www.hc.10086.cn
rd.go.10086.cn
service.cq.10086.cn
iot.10086.cn
www.ln.10086.cn
www.sd.10086.cn
wap.hi.10086.cn
r.10086.cn
open.home.10086.cn
class.edu.hl.10086.cn
openapi.gd.10086.cn
push.it.10086.cn
*.clientaccess.10086.cn
*.ac.10086.cn
dev.10086.cn
www.he.10086.cn
wapmail.10086.cn
hbq.r.10086.cn
wap.gs.10086.cn
*.open.10086.cn
www.gx.10086.cn
service.cq.10086.cn
*.ac.10086.cn
wap.sc.10086.cn
wap.js.10086.cn
service.cq.10086.cn
b2bjoy.10086.cn
zhengqi.10086.cn
www.ha.10086.cn
p.10086.cn
www.he.10086.cn
poolaos.ecloud.10086.cn
auth.weibo.10086.cn
www.gx.10086.cn
open.iot.10086.cn
wap.sc.10086.cn
wap.sx.10086.cn
service.ha.10086.cn
*.clientaccess.10086.cn
www.gz.10086.cn
b2b.10086.cn
wap.jx.10086.cn
service.cq.10086.cn
m.sd.10086.cn
www.sh.10086.cn
es.b2b.10086.cn
zhengqi.10086.cn
wap.sc.10086.cn
logdownload.cmcdn.cdn.10086.cn

Certificate

The complete raw certificate details for img1.shop.10086.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGSjCCBTKgAwIBAgIQW1b6OCs5TraYibXToJpCkzANBgkqhkiG9w0BAQsFADBA
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxHjAcBgNVBAMMFVNIRUNB
IE9WIFNlcnZlciBDQSBHNTAeFw0yMzA0MTcwODI3MDhaFw0yNDA1MTcxNTU5NTla
MIGFMQswCQYDVQQGEwJDTjEQMA4GA1UECAwHQmVpamluZzEQMA4GA1UEBwwHQmVp
amluZzE1MDMGA1UECgwsQ2hpbmEgTW9iaWxlIEluZm9ybWF0aW9uIFRlY2hub2xv
Z3kgQ28uLEx0ZC4xGzAZBgNVBAMMEmltZzEuc2hvcC4xMDA4Ni5jbjCCASIwDQYJ
KoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhpCLVPgCPgac6uA9grvUh6tr2caqPG
qGQOJYO80eNzK2mX4JywEdfS5gWGzYYGNVCwB6cNoIa25BCtPyBMjMr7/Pi8meIf
oF1W4RdF+vNr+Ahchv/DUHasxR+7zL5JsgINmK9tkPd0FNUWTlmTkM8G8G43+VFp
WzB5rDy7DsphFZFeoSoxlopywa/NmmqyFNfTLKJ5MSIfcy5Ik6Lt0+ZZsKlMphH1
S65ugLqjYzAljEe9cbqsU4VFYYjfGtrR3LDXWn3TKuuDdaUHsGx4a7mru1tN7dKY
L42B3wxfIR74jcr2hYiZNCU0u5gzJZuthdDAAX3e5hfjCmn0DcHRYO0CAwEAAaOC
AvgwggL0MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjB3BggrBgEFBQcB
AQRrMGkwMAYIKwYBBQUHMAGGJGh0dHA6Ly9vY3NwLmdsb2JhbC5zaGVjYS5jb20v
b3ZzY2FnNTA1BggrBgEFBQcwAoYpaHR0cDovL2NlcnRzLmdsb2JhbC5zaGVjYS5j
b20vb3ZzY2FnNS5jZXIwHwYDVR0jBBgwFoAUA3mjjVJf1OmIkh9DWFQlAvSHi34w
HQYDVR0RBBYwFIISaW1nMS5zaG9wLjEwMDg2LmNuMB0GA1UdDgQWBBTAwMyp+6qO
WFmdcIOr75SmGEsfljAOBgNVHQ8BAf8EBAMCBaAwggF/BgorBgEEAdZ5AgQCBIIB
bwSCAWsBaQB3ANq2v2s/tbYin5vCu1xr6HCRcWy7UYSFNL2kPTBI1/urAAABh45T
MAMAAAQDAEgwRgIhAKKk8AcFAiecECHlL+BoRrcXyslezx7YEPiS2zbqj47NAiEA
34E2ONVfrDD3bIIs5P3rImmMoIdOD7jVBoLVISafgUEAdgDuzdBk1dsazsVct520
zROiModGfLzs3sNRSFlGcR+1mwAAAYeOUzK5AAAEAwBHMEUCIQCta4G9+3I7W6qc
KkoIZoWNFjdnGSOpxWTBXexsJ6zD3gIgOyToa/4kzkRhL4UXmG+E6zMjPv3Q15JA
w/TjO9bLtNgAdgB2/4g/Crb7lVHCYcz1h7o0tKTNuyncaEIKn+ZnTFo6dAAAAYeO
UzWgAAAEAwBHMEUCIQDEN22yIoHghP5wu8c3MNGnSwNGmvy42BWnGs1eh8iJyQIg
VBWDU7w6JHm4E8WU9L28ex1RiGzx24pZRDcpOShlBZswDAYDVR0TAQH/BAIwADAg
BgNVHSAEGTAXMAsGCSqBHIbvOgEBAjAIBgZngQwBAgIwOAYDVR0fBDEwLzAtoCug
KYYnaHR0cDovL2NybC5nbG9iYWwuc2hlY2EuY29tL292c2NhZzUuY3JsMA0GCSqG
SIb3DQEBCwUAA4IBAQA33i+Pom9dH/3KwEFx3Ju68NZjxtYHeakFkHfufe2W9yo/
TzlLJoS4IacHuJT1P4yS4/xrB6Xmdnm+dJaP7UEchwO1pjsWPNkRP9HMml+F4cRD
7zEM78uZkUvwieff+xP2JWiGsKtYnpWi8P4jwP7Vp6++bWEskGBECOqNIBT+mKb9
rUip/18fub4IVLeFVXjEJ043U1J8bFgntyi4ICXBWk0Ktgy2hcS6z1lPxKoEH2EK
7Z3M16Ua2djh3dFVOHZeoKOgmq1+DJUI5vIUqWc8iuWuvip6S3z0jemgrL1kr+n0
mTKgDI6dLWJZ6n9+y/6mBIolmMzD3zuEj3o2d43G
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6GkItU+AI+Bpzq4D2Cu9
SHq2vZxqo8aoZA4lg7zR43MraZfgnLAR19LmBYbNhgY1ULAHpw2ghrbkEK0/IEyM
yvv8+LyZ4h+gXVbhF0X682v4CFyG/8NQdqzFH7vMvkmyAg2Yr22Q93QU1RZOWZOQ
zwbwbjf5UWlbMHmsPLsOymEVkV6hKjGWinLBr82aarIU19MsonkxIh9zLkiTou3T
5lmwqUymEfVLrm6AuqNjMCWMR71xuqxThUVhiN8a2tHcsNdafdMq64N1pQewbHhr
uau7W03t0pgvjYHfDF8hHviNyvaFiJk0JTS7mDMlm62F0MABfd7mF+MKafQNwdFg
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 121411360198816489233629430572807504531
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-17 08:27:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-17 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Beijing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'China Mobile Information Technology Co.,Ltd.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'img1.shop.10086.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29339080956097331449846783829932986034491958654398818227004927430842361819999434951458412420838582590234144368946668577975875065627938155104634185325995917956520117289443511300529341760019591514847853615478288389695075249672267720891714193628516944093134051270449036522720076497960306797012586768690112411619810849525804725654698296069547989684967808107432616385653221546847656583412779633786368691771362769817173884077511750992704619347996361970977834793817015654829040654769480183821298635464552803439564037998498367047339638859076940596173609026226079400073527790260267775567714521952880222509693353808852539236589
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'img1.shop.10086.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c0c0cca9fbaa8e58599d7083abef94a6184b1f96
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0037de2f8fa26f5d1ffdcac04171dc9bbaf0d663c6d60779a9059077ee7ded96f72a3f4f394b2684b821a707b894f53f8c92e3fc6b07a5e67679be74968fed411c8703b5a63b163cd9113fd1cc9a5f85e1c443ef310cefcb99914bf089e7dffb13f6256886b0ab589e95a2f0fe23c0fed5a7afbe6d612c90604408ea8d2014fe98a6fdad48a9ff5f1fb9be0854b7855578c4274e3753527c6c5827b728b82025c15a4d0ab60cb685c4bacf594fc4aa041f610aed9dccd7a51ad9d8e1ddd15538765ea0a3a09aad7e0c9508e6f214a9673c8ae5aebe2a7a4b7cf48de9a0acbd64afe9f49932a00c8e9d2d6259ea7f7ecbfea6048a2598ccc3df3b848f7a36778dc6