kiosk-gateway.kdfse.com

- Kodak GmbH -

Issued by TC TrustCenter SSL CA I

About this certificate

This digital certificate with serial number b2:eb:00:01:00:02:cd:74:6b:e9:3e:e9:f4:41 was issued on by TC TrustCenter GmbH.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • KeyUsage [ContentCommitment DataEncipherment DigitalSignature KeyEncipherment] (00001111) inconsistent with multiple purpose ExtKeyUsage [clientAuth serverAuth] The certificate MUST only be used for a purpose consistent with both key usage extension and extended key usage extension. (RFC 5280, Section 4.2.1.12.)

Kodak GmbH

Organization: Kodak GmbH
Organization unit: CDS
State / Province: BW
Locality: Stuttgart
Country: DE

TC TrustCenter GmbH

Organization: TC TrustCenter GmbH
Organization unit: TC TrustCenter SSL CA
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): b2:eb:00:01:00:02:cd:74:6b:e9:3e:e9:f4:41
Serial Number (int): 3628887528849826972476394751784001
Serial Number lenght: 112 bits, 14 octets

SubjectKeyId: 56:ac:f6:a6:d7:e3:d5:15:78:64:84:95:10:5b:ba:17:58:cc:ab:e9
AuthorityKeyId: e7:bf:6c:a9:48:99:77:86:e2:d0:ff:30:a0:90:1d:0b:64:d0:85:3a

Fingerprint (sha1): 7d:ef:f9:e5:25:3a:57:e8:f4:81:e9:e9:e1:95:ff:b0:a1:18:97:67
Fingerprint (sha256): 00:61:de:e5:78:f4:78:48:1f:fe:f2:40:45:6f:8f:6b:26:73:6d:2e:1f:a0:04:80:4d:49:fb:39:ca:39:e0:b0

Issuing Certificate URL: http://www.trustcenter.de/certservices/cacerts/tc_SSL_CA_I.crt

Revocation information

OCSP Server: http://ocsp.I.tcssl.trustcenter.de
CRL Distribution Point: http://crl.I.tcssl.trustcenter.de/crl/v2/tc_SSL_CA_I.crl

Check the revocation status for certificate kiosk-gateway.kdfse.com

1

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for kiosk-gateway.kdfse.com

Public Key Algorithm

RSA

Key Size

1024

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Content Commitment
Key Encipherment
Data Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

kiosk-gateway.kdfse.com [email protected]

Other certificates including the domain name kdfse.com

(limited to 100 certificates)
kiosk-gateway.kdfse.com
service.jpn.kdfse.com
*.test.kdfse.com
images.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.utils.kdfse.com
intra.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
*.test.kdfse.com
*.kdfse.com
rome.kdfse.com
service.kdfse.com
*.kdfse.com
vasp.jpn.kdfse.com
store-gateway.kdfse.com
vasp.jpn.kdfse.com
*.kdfse.com
*.test.kdfse.com
admin.kdfse.com
lab-gateway.kdfse.com
*.jpn.kdfse.com
*.kdfse.com
*.kdfse.com
picturecenter.kdfse.com
*.kdfse.com
kdfse.com
*.kdfse.com
feedback.kdfse.com
images.kdfse.com
feedback.kdfse.com
*.utils.kdfse.com
vasp.test.kdfse.com
*.jpn.kdfse.com
*.dev.kdfse.com
kdfse.com
*.dev.kdfse.com
*.dev.kdfse.com
*.apr.kdfse.com
picturecenter.jpn.kdfse.com
vasp.kdfse.com
ws.kdfse.com
service.jpn.kdfse.com
vasp.jpn.kdfse.com
intra.kdfse.com

Certificate

The complete raw certificate details for kiosk-gateway.kdfse.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIPALLrAAEAAs10a+k+6fRBMA0GCSqGSIb3DQEBBQUAMG0x
CzAJBgNVBAYTAkRFMRwwGgYDVQQKExNUQyBUcnVzdENlbnRlciBHbWJIMR4wHAYD
VQQLExVUQyBUcnVzdENlbnRlciBTU0wgQ0ExIDAeBgNVBAMTF1RDIFRydXN0Q2Vu
dGVyIFNTTCBDQSBJMB4XDTA5MTAwNjA5NTQxNFoXDTEyMTAwNjA5NTQwMFowczEL
MAkGA1UEBhMCREUxCzAJBgNVBAgTAkJXMRIwEAYDVQQHEwlTdHV0dGdhcnQxEzAR
BgNVBAoTCktvZGFrIEdtYkgxDDAKBgNVBAsTA0NEUzEgMB4GA1UEAxMXa2lvc2st
Z2F0ZXdheS5rZGZzZS5jb20wgZ8wDQYJKoZIhvcNAQEBBQADgY0AMIGJAoGBAKju
VptPZyQSMX+88ow0GMKW3pBHVTlrXF0hHwD64Awiu8vxXmKYjY3x3fBJ5a0q9j+s
bmUmaWoimH1k6R6eXT/+oys8NSEqqk3Nk6dy8LcPl3eYUMSo3jvz2vsJri9ao/Oo
9TTCEV89ECusBZo5d4y/6+IKaD0blwNTfYxHxlHjAgMBAAGjggIhMIICHTCBigYI
KwYBBQUHAQEEfjB8MEoGCCsGAQUFBzAChj5odHRwOi8vd3d3LnRydXN0Y2VudGVy
LmRlL2NlcnRzZXJ2aWNlcy9jYWNlcnRzL3RjX1NTTF9DQV9JLmNydDAuBggrBgEF
BQcwAYYiaHR0cDovL29jc3AuSS50Y3NzbC50cnVzdGNlbnRlci5kZTAfBgNVHSME
GDAWgBTnv2ypSJl3huLQ/zCgkB0LZNCFOjAMBgNVHRMBAf8EAjAAMHYGA1UdIARv
MG0wawYJKoIUACwBAQECMF4wKgYIKwYBBQUHAgIwHhocVEMgVHJ1c3RDZW50ZXIg
Q2xhc3MyIFNlcnZlcjAwBggrBgEFBQcCARYkaHR0cDovL3d3dy50cnVzdGNlbnRl
ci5kZS9ndWlkZWxpbmVzMA4GA1UdDwEB/wQEAwIE8DAdBgNVHQ4EFgQUVqz2ptfj
1RV4ZISVEFu6F1jMq+kwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5JLnRj
c3NsLnRydXN0Y2VudGVyLmRlL2NybC92Mi90Y19TU0xfQ0FfSS5jcmwwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBEGCWCGSAGG+EIBAQQEAwIGwDA7BgNV
HREENDAygRdqZXJnLmx1ZXRrZW5zQGtvZGFrLmNvbYIXa2lvc2stZ2F0ZXdheS5r
ZGZzZS5jb20wDQYJKoZIhvcNAQEFBQADggEBAMDaIEaYy9q9OSBxsjARZVN8wn8J
fK9QQExhRSKLqVuz8VrbE5ByXftikRCL3iVLWdncIlx//EhEGVymcf8E8gS5XQSu
05Fa5eMHrnkGDFxWPhc+eecmOvXEWj81IcKPwlqULx/Gkz2KAy0DhiGL+bwvUQoD
kixa7mxbBBN0kCmEFf6WvB5ikX9SvFPQKMQf/kLxi8OAuYh5PhmMV9eHyLka34Dh
vt5bJPix9LEBO1IWfUKduwjZyFZStuwu5nQ9UZPrFjZ5LZWL7GGi52w82B3/ALbB
xX0jWwigVcCJqqC4OznH9sgpTbXsf+r+RECm2ww3MZ/qZNCtlnEqZ5CaPlc=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQCo7labT2ckEjF/vPKMNBjClt6Q
R1U5a1xdIR8A+uAMIrvL8V5imI2N8d3wSeWtKvY/rG5lJmlqIph9ZOkenl0//qMr
PDUhKqpNzZOncvC3D5d3mFDEqN4789r7Ca4vWqPzqPU0whFfPRArrAWaOXeMv+vi
Cmg9G5cDU32MR8ZR4wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3628887528849826972476394751784001
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter SSL CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'TC TrustCenter SSL CA I'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-10-06 09:54:14 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-10-06 09:54:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stuttgart'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kodak GmbH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CDS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kiosk-gateway.kdfse.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (1120 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 118627388737560193362167855031043477235198642677290527404571696788225924629944230904350923615275909717612894584649288540589426714892390008712194885069896814897078743518393733239962535469579373059698426012742986369142511904841923303001045312186898122669129254208583545026800377913515700318586587971614128099811
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (126 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.trustcenter.de/certservices/cacerts/tc_SSL_CA_I.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.I.tcssl.trustcenter.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName e7bf6ca948997786e2d0ff30a0901d0b64d0853a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.276.0.44.1.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:26|false] VisibleString, ISO646String [84 67 32 84 114 117 115 116 67 101 110 116 101 114 32 67 108 97 115 115 50 32 83 101 114 118 101 114]
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.trustcenter.de/guidelines'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4 bits)
							04f0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							56acf6a6d7e3d51578648495105bba1758ccabe9
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.I.tcssl.trustcenter.de/crl/v2/tc_SSL_CA_I.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.113730.1.1 (netscape-cert-type)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2 bits)
							06c0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kiosk-gateway.kdfse.com'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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