cpsdefense.telefonica.com

- Telefonica S.A. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 48:11:2a:ec:e9:31:e1:40:13:83:1e:d9 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telefonica S.A.

Organization: Telefonica S.A.
State / Province: Madrid
Locality: Madrid
Country: ES

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 48:11:2a:ec:e9:31:e1:40:13:83:1e:d9
Serial Number (int): 22303675155697634914724945625
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 45:68:af:62:03:cc:bb:e9:07:94:b5:22:41:1e:3e:51:d0:96:90:eb
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 4a:2e:8b:e0:f5:98:6b:38:e2:85:9b:25:b1:0e:b3:4e:53:ea:b4:74
Fingerprint (sha256): 00:52:fb:04:1c:10:03:51:5e:be:19:46:b6:39:6b:9e:e5:50:0c:f5:87:6d:da:f0:cd:c8:e2:92:44:6d:ff:7c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate cpsdefense.telefonica.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for cpsdefense.telefonica.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

cpsdefense.telefonica.com

Other certificates including the domain name telefonica.com

(limited to 100 certificates)
www.startups.telefonica.com
securelogin.telefonica.com
cpsdefense.telefonica.com
hub.telefonica.com
*.nos-eu-mad-1.instantservers.telefonica.com
*.telefonica.com
maileu.telefonica.com
gunna.digitalsec.telefonica.com
*.telefonica.com
console.vdc.telefonica.com
prometheus.csbtest.telefonica.com
sni.cloudflaressl.com
formacion.telefonica.com
atlas.telefonica.com
ct.mesgw.us.telefonica.com
content.formacion.telefonica.com
*.2.cdn.telefonica.com
test.arena-api.telefonica.com
innovationmap.telefonica.com
digitalsec.telefonica.com
equinox.telefonica.com
csp.telefonica.com
aura.telefonica.com
develop-mwc.telefonica.com
securelogin.telefonica.com
b2b.visualization.telefonica.com
cust05-expw-cl2-e02.meet.telefonica.com
sbc1.teams.telefonica.com
brandfactory.telefonica.com
piprod.telefonica.com
www.communities.telefonica.com
digitalsec.telefonica.com
kiteplatform-movistar-es.telefonica.com
search.telefonica.com
innovationmap.telefonica.com
atlas.telefonica.com
cybersecurity.telefonica.com
aws.dev.multicloud.telefonica.com
atlas.telefonica.com
sealsign.pki.telefonica.com
globalocs.telefonica.com
*.multinationalsolutions.telefonica.com
josemariaalvarezpallete.telefonica.com
*.voluntarios.telefonica.com
metaverso.telefonica.com
ris.telefonica.com
atlas.telefonica.com
*.vdc-ar.telefonica.com
*.valeria-test.telefonica.com
office365.business-solutions.telefonica.com
*.labs.gvp.telefonica.com
cdn.telefonica.com
gem.telefonica.com
tls.automattic.com
*.telefonica.com
console.vd2.telefonica.com
*.iotplatform.telefonica.com
kiteplatform-movistar-es.telefonica.com
datamanagement.cybersecurity.telefonica.com
wholesale.telefonica.com
auth.rtg.digitalsec.telefonica.com
marketintelligence.telefonica.com
eventos.telefonica.com
innovationmap.telefonica.com
m.eldiario.telefonica.com
*.labs.gvp.telefonica.com
*.identity.telefonica.com
partnersprogram.telefonica.com
www.eficienciaenergetica.telefonica.com
tls.automattic.com
*.infinity.telefonica.com
apps.tgies.telefonica.com
eventos.telefonica.com
cdncert.telefonica.com
*.vicky.telefonica.com
unica.csb.telefonica.com
console3.vdc.telefonica.com
ris.telefonica.com
*.us.telefonica.com
apis.telefonica.com
*.priv1.objetos.telefonica.com
www.telefonica.com
content.formacion.telefonica.com
apipymes.cyberacademyplus.telefonica.com
replicationsite-al3.vdc.telefonica.com
*.multinationalsolutions.telefonica.com
*.vdc-mx.telefonica.com
maileu.telefonica.com
tls.automattic.com
mss.telefonica.com
telefonica.com
replicationsite-al2.vdc.telefonica.com
sor.wholesale.telefonica.com
datacampus-csi-balea.telefonica.com
*.csb.telefonica.com
thinkingthings.telefonica.com
*.oam.gvp.telefonica.com
*.labs.gvp.telefonica.com
encuestas.online.telefonica.com
*.fast.telefonica.com

Certificate

The complete raw certificate details for cpsdefense.telefonica.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIMSBEq7Okx4UATgx7ZMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MDUxMTQxMDVaFw0y
MTA2MDUxMTQxMDVaMG0xCzAJBgNVBAYTAkVTMQ8wDQYDVQQIEwZNYWRyaWQxDzAN
BgNVBAcTBk1hZHJpZDEYMBYGA1UEChMPVGVsZWZvbmljYSBTLkEuMSIwIAYDVQQD
ExljcHNkZWZlbnNlLnRlbGVmb25pY2EuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOC
AQ8AMIIBCgKCAQEAs4wDTGjxCJNbqaWgNzHWXouZI4lHZ6OLrM8Jlxt0t5ffrU0N
EdaQZOjaWx/dPFrX5I89kFRo6u6B0+7MbMWz31xUZUu5eJ1Zs2sfkFHXjRGYSgEk
8rAYK/Y5D0Q1lmOEZ3mY4mhXGv1Xf2x7NZM5+skYKF8LzqrUOlus6Fi5tey2saxo
Qpc7Ru8Dva3LqaeE5INcDokG4xRNUzwfVx6deFblm1sTvBivhWlJPoDrDHZBwKXa
5WWBdo9ZTJUEljbVQAMFWqq7cX6OL42aT+GAYIscZBGpLPvjHFm0LCJM94aeCuoy
2VWhpZiDeiV1SCAWaQ1cZAyUtz/tMSHJImBDpQIDAQABo4IB4zCCAd8wDgYDVR0P
AQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8v
c2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNy
dDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2Fv
dnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIB
FiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwB
AgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRwOi8vY3JsLmdsb2Jh
bHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMCQGA1UdEQQdMBuCGWNwc2Rl
ZmVuc2UudGVsZWZvbmljYS5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBRF
aK9iA8y76QeUtSJBHj5R0JaQ6zATBgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG
9w0BAQsFAAOCAQEAMUglUdKmI54WzmH50R+hS6vUvQtRA7j67Q2WUINUOwnSYt7+
eREWzJQE5rvQVbz0ZyQ94mtbMZdXCybd2gyy6+vuOWsbj29sXSaV0YlR7q3gd7wx
XtEHDICET3UTzer/IzqVULNVZV5GsXYu67QTYUijYqH9yCytnnesfJNeQsjPysCP
3lcxQJJrPSeJdCN2i1SWdDirCu6CDAscnOQV/q+khFXXGeLercbW8m2ekNlPAk7U
1KSRi4ZSkOe7fmB5IsW8Aa1laaXXeN2p149AuNDnO0ba5aRO46xJxKzlDsaOW/pg
GjVhHd1WaneMdLqux2qhHQ1P4M511s2m49Sdbw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4wDTGjxCJNbqaWgNzHW
XouZI4lHZ6OLrM8Jlxt0t5ffrU0NEdaQZOjaWx/dPFrX5I89kFRo6u6B0+7MbMWz
31xUZUu5eJ1Zs2sfkFHXjRGYSgEk8rAYK/Y5D0Q1lmOEZ3mY4mhXGv1Xf2x7NZM5
+skYKF8LzqrUOlus6Fi5tey2saxoQpc7Ru8Dva3LqaeE5INcDokG4xRNUzwfVx6d
eFblm1sTvBivhWlJPoDrDHZBwKXa5WWBdo9ZTJUEljbVQAMFWqq7cX6OL42aT+GA
YIscZBGpLPvjHFm0LCJM94aeCuoy2VWhpZiDeiV1SCAWaQ1cZAyUtz/tMSHJImBD
pQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22303675155697634914724945625
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-05 11:41:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-06-05 11:41:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telefonica S.A.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cpsdefense.telefonica.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22665699515621853573675454217190037235654418235095032933114266281079696569297665204437643340705452294301941860417279817099179326235188262145851445159946230692032855852865231545518905737356385972134267723978161046210381859278585461921849911727559265041946213437686116962556902202859973914905789565329114560224381039962686862211316261114680334240334966659898527567019995425899225874404321288856799294591112576096778931445571186705836501491191346330496690166605247893366179805288954589906290301419981515012729208544577297287509089137339916538457242794706334659465601261374388063615690153078449587389662681669577174172581
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cpsdefense.telefonica.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4568af6203ccbbe90794b522411e3e51d09690eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0031482551d2a6239e16ce61f9d11fa14babd4bd0b5103b8faed0d965083543b09d262defe791116cc9404e6bbd055bcf467243de26b5b3197570b26ddda0cb2ebebee396b1b8f6f6c5d2695d18951eeade077bc315ed1070c80844f7513cdeaff233a9550b355655e46b1762eebb4136148a362a1fdc82cad9e77ac7c935e42c8cfcac08fde573140926b3d27897423768b54967438ab0aee820c0b1c9ce415feafa48455d719e2deadc6d6f26d9e90d94f024ed4d4a4918b865290e7bb7e607922c5bc01ad6569a5d778dda9d78f40b8d0e73b46dae5a44ee3ac49c4ace50ec68e5bfa601a35611ddd566a778c74baaec76aa11d0d4fe0ce75d6cda6e3d49d6f