bem.barclays.co.uk

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number ef:de:f8:4e:f8:02:7f:4c:00:00:00:00:54:ce:3a:ee was issued on by Entrust, Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: IT
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): ef:de:f8:4e:f8:02:7f:4c:00:00:00:00:54:ce:3a:ee
Serial Number (int): 318843217189323308514255809157222251246
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a5:3e:9f:9a:12:3b:da:f0:43:76:fe:38:59:d9:e2:e5:86:b5:76:c5
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 20:c1:d3:bb:6a:de:52:39:0a:8f:18:27:a9:65:bc:ed:89:29:6f:fc
Fingerprint (sha256): 00:6d:2e:3a:3e:ff:57:06:32:dd:ec:e3:72:35:e9:c8:3f:12:0e:9c:fc:a4:e0:ae:2e:1a:7e:18:d5:05:13:9b

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate bem.barclays.co.uk

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bem.barclays.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bem.barclays.co.uk

Other certificates including the domain name barclays.co.uk

(limited to 100 certificates)
vies.b2b-dr.barclays.co.uk
email-int.barclays.co.uk
sagt1.wload.barclays.co.uk
secure03.stage.lithium.com
leads-and-referral-salesforce-prod-outbound.barclays.co.uk
Personalisedcard.barclays.co.uk
emailvideo.barclays.co.uk
bem.barclays.co.uk
MQSQM5T0.MQSEGWD0.barclays.co.uk
aptpodsqa1.barclays.co.uk
BARXP01.barclays.co.uk
cba-commbank.barclays.co.uk
cidv-bc-sign.barclays.co.uk
www.barclaysaccelerator.com
MQIPT-MQFNYD01-NYKCSR000000509-TEST.barclays.co.uk
www.barclays.co.uk
hrportal.ple.barclays.co.uk
documents-dr.barclays.co.uk
BarclaysFNZINTFIX.extranet.barclays.co.uk
www.apply.barclays.co.uk
insights.barclays.co.uk
Personalisedcard.barclays.co.uk
pilot4.barclays.co.uk
www.compliancepassport.barclays.co.uk
cockpit-test.barclays.co.uk
bmbdss-aviva.barclays.co.uk
gateway.identity.barclays.co.uk
cop-sl.barclays.co.uk
ibank.barclays.co.uk
letmechoose.barclays.co.uk
secure.personalisedcard.barclays.co.uk
chics.barclays.co.uk
partneroffers-salesforce-dev-outbound.barclays.co.uk
bancos-api-test.barclays.co.uk
www.signup.barclays.co.uk
www.barclaysaccelerator.com
www.extractor.barclays.co.uk
secure03.stage.lithium.com
videocall.barclays.co.uk
www.barclays.co.uk
www.barclays.co.uk
insights.barclays.co.uk
cfp.bank.barclays.co.uk
bc.barclays.co.uk
BarclaysFNZMQDR.extranet.barclays.co.uk
cloudit.docusignout.barclays.co.uk
bwo.dss.barclays.co.uk
ibank.barclays.co.uk
eg3c.wload.barclays.co.uk
businessapply.barclays.co.uk
Personalisedcard.barclays.co.uk
www.barclays.co.uk
cloudit.docusignout.barclays.co.uk
email.barclays.co.uk
www.barclays.co.uk
www.stockbrokers.barclays.co.uk
cfp.bank.barclays.co.uk
www.onlineabs.barclays.co.uk
cloudit.bank.barclays.co.uk
email.barclays.co.uk
letmechoose.barclays.co.uk
email.barclays.co.uk
cloudit.bank.barclays.co.uk
ibank.barclays.co.uk
www.stockbrokers.barclays.co.uk
www.resources.barclays.co.uk
C6459PreDR.barclays.co.uk
jmp-emea-cmap-ipsec.barclays.co.uk
bl-sign.barclays.co.uk
bem.barclays.co.uk
www.secure.barclays.co.uk
featuresstore.barclays.co.uk
youniquely.barclays.co.uk
bwodss.barclays.co.uk
cidv-rsa3ds.barclays.co.uk
www.secure.barclays.co.uk
mail-assure1.barclays.co.uk
www.sharestore.barclays.co.uk
b.email.barclays.co.uk
akamai-san21.exacttarget.com
www.sharestore.barclays.co.uk
api.mastercard.barclays.co.uk
api.barclays.co.uk
www.barclays.co.uk
ibdn-enc.barclays.co.uk
search-int-dr.barclays.co.uk
bmb-pv.barclays.co.uk
www.extractor.barclays.co.uk
www.digitaldrivinglicence.barclays.co.uk
smetrics.barclays.co.uk
surv.email.barclays.co.uk
FNZPORTAL.extranet.barclays.co.uk
bank.barclays.co.uk
bank.barclays.co.uk
ibank.barclays.co.uk
cloudit.bank.barclays.co.uk
W.CUKPBCC1WEB541.barclays.co.uk
ibank.pilot.barclays.co.uk
barclaysvideobanking.video.secure.barclays.co.uk
assets.communitydrivinglicence.barclays.co.uk

Certificate

The complete raw certificate details for bem.barclays.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5aabtZPEJM7Ld55XSbU
RbKKEJKgDS1TAon8RYfrw5u78Vh+NrC2En/AtkHjru8frwk2aOH7ebI8ew5cH4oN
IDVJnIN0lS1OrMg63qnsbuqZn6AxsE801ZjH7I3kInBzMmGMlVzNIDRLFpbA16+v
njPuxMknNqDehdlxbNIwbuFB2Z2FL+utJMRWx9UAhDHsQIhUg8wbgOsWPsfHxceM
5bSWfL1Iad4XHWROqygnW8PCWG64rc1yLPNtuzTrp4vg03mONK9oUuaXX1Awva9g
tvOIfcLdSYLD6ENb6DW9/xHXzdRQtPyNe3guYf7b8kkvF135AL6LskBxOAoqQgoX
BwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 318843217189323308514255809157222251246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-08 16:25:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-08 16:55:24 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bem.barclays.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17116436402740517581636098986023732352466896433693942511135638617058579405717420501268174342986836912750410963795035803008519897054527025061361253621941714411125513811340833727132686365412442141892374117639256160788115117999799049755081128394862679181295572701860961403597878789032513092797727240382243565651251417558462394865185824094176233185325147378860080241593638571349045265911602619302864413539648208665322106546753371517390797393845307246802465891621138196350451687671512916184136495070687300556808431511748400048808937923777038865036700607149480997072998650358478959968835645303364509212387656236922739234567
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bem.barclays.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a53e9f9a123bdaf04376fe3859d9e2e586b576c5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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