*.abington.idm.oclc.org

Issued by OCLC TLS Issuing RSA SubCA R1

About this certificate

This digital certificate with serial number 19:9d:da:63:e9:c4:57:26:15:d4:16:04:4a:d7:eb:bb was issued on by OCLC, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.abington.idm.oclc.org

OCLC, Inc.

Organization: OCLC, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 19:9d:da:63:e9:c4:57:26:15:d4:16:04:4a:d7:eb:bb
Serial Number (int): 34050319982641918034047365861091044283
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: 20:98:fb:a1:f9:f3:06:85:f2:97:36:22:b4:80:f6:f5:a8:56:8a:30

Fingerprint (sha1): e0:6d:04:3f:e7:f3:9a:03:8d:68:37:8f:0e:4b:be:96:85:8a:bc:bc
Fingerprint (sha256): 00:72:06:5e:1b:b6:c9:fa:66:c5:bd:6b:db:8a:ab:96:86:ce:79:94:a6:c1:fc:e2:e9:73:7a:65:f5:6c:ed:71

Issuing Certificate URL: http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl

Check the revocation status for certificate *.abington.idm.oclc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.abington.idm.oclc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.abington.idm.oclc.org
abington.idm.oclc.org

Other certificates including the domain name oclc.org

(limited to 100 certificates)
*.cfra-msa.idm.oclc.org
*.nwcc.idm.oclc.org
*.southseattle.idm.oclc.org
*.iuhu.idm.oclc.org
*.liuc.idm.oclc.org
*.cfra-msa.idm.oclc.org
deweyess.oclc.org
*.greatlibrary.idm.oclc.org
*.apll.idm.oclc.org
*.muhlenberg.idm.oclc.org
*.abington.idm.oclc.org
*.nccu.idm.oclc.org
secure06.stage.lithium.com
*.trevecca.idm.oclc.org
*.twu.idm.oclc.org
*.udlap.idm.oclc.org
*.aic.idm.oclc.org
*.weston.idm.oclc.org
*.cide.idm.oclc.org
*.bchs.idm.oclc.org
*.neomed.idm.oclc.org
*.uiwtx.idm.oclc.org
*.bpcc.idm.oclc.org
*.dartmouth.idm.oclc.org
*.tjportal.idm.oclc.org
*.wcc.idm.oclc.org
*.limcollege.idm.oclc.org
OWA.OCLC.ORG
*.victimresearch.idm.oclc.org
*.greenville.idm.oclc.org
*.dsc.idm.oclc.org
*.fmarion.idm.oclc.org
*.ubu-es.idm.oclc.org
exeter.idm.oclc.org
*.springerpub.idm.oclc.org
*.sanlib.idm.oclc.org
*.tjc.idm.oclc.org
*.zhejianglibr.idm.oclc.org
*.zulib.idm.oclc.org
*.burmanu.idm.oclc.org
*.ccl.idm.oclc.org
*.chifedkc.idm.oclc.org
workday.oclc.org
*.nscad.idm.oclc.org
*.confederation.idm.oclc.org
*.yccc.idm.oclc.org
*.aspenuniversity.idm.oclc.org
*.nu.idm.oclc.org
*.ala.idm.oclc.org
*.mmc.idm.oclc.org
*.akkon-onlinelibrary.idm.oclc.org
*.mclarenmacomb.idm.oclc.org
ftp-bibliotheca.de.oclc.org
*.jjhs.idm.oclc.org
*.gold.idm.oclc.org
*.qvcc.idm.oclc.org
*.omahalibrary.idm.oclc.org
*.nishogakusha-u.idm.oclc.org
*.usu29.idm.oclc.org
*.bakeru.idm.oclc.org
*.cdkc.idm.oclc.org
*.southeast.idm.oclc.org
*.lourdes.idm.oclc.org
*.mvcc.idm.oclc.org
*.fid-avl.idm.oclc.org
*.wcsu.idm.oclc.org
*.hchs.idm.oclc.org
*.aus.idm.oclc.org
*.kuyper.idm.oclc.org
*.testemea.idm.oclc.org
*.uea.idm.oclc.org
*.nnu.idm.oclc.org
*.sanfrancisco.idm.oclc.org
*.szrof.idm.oclc.org
*.fls.idm.oclc.org
*.sri.idm.oclc.org
*.sierranev.idm.oclc.org
*.ozarks.idm.oclc.org
deweyess.oclc.org
*.hodges.idm.oclc.org
*.ncat.idm.oclc.org
*.antioch.idm.oclc.org
*.trevecca.idm.oclc.org
*.wvclibrary.idm.oclc.org
Cmsauthor-ext.oclc.org
*.bucm.idm.oclc.org
*.drexel.idm.oclc.org
*.hshs.idm.oclc.org
*.arlis.idm.oclc.org
*.aaas.idm.oclc.org
*.esf.idm.oclc.org
*.uhsp.idm.oclc.org
*.essec.idm.oclc.org
*.scclosrios.idm.oclc.org
*.salusdental.idm.oclc.org
*.stmarys.idm.oclc.org
*.kl.idm.oclc.org
*.barker.idm.oclc.org
lbs-avans.oclc.org
*.nutn.idm.oclc.org

Certificate

The complete raw certificate details for *.abington.idm.oclc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGYTCCBMmgAwIBAgIQGZ3aY+nEVyYV1BYEStfruzANBgkqhkiG9w0BAQsFADBK
MQswCQYDVQQGEwJVUzETMBEGA1UECgwKT0NMQywgSW5jLjEmMCQGA1UEAwwdT0NM
QyBUTFMgSXNzdWluZyBSU0EgU3ViQ0EgUjEwHhcNMjQwNDAzMTMxOTUwWhcNMjUw
NDAzMTMxOTUwWjAiMSAwHgYDVQQDDBcqLmFiaW5ndG9uLmlkbS5vY2xjLm9yZzCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK+Hemk5of0TeFOP0id+k704
cL8EqrpgslviDu68D+RHdR2wk+b38nG8BROJO/TXEE1ugT7lkpX0Zctzpppkm22C
rz7uIs8QGyuG2C/3qq4xr1/XNHFHglAcDgqMd5gOfGxQj+HD1Teq7cidEUvfhTRQ
eZr3HZiWMdljI7JYjdXxRKgG6VXdnTjONfdwmPrVhNATqtF0NyM2sm2RZdOEmnmS
DzWJl9bUKKvWpQ0PCt0GE/qqpRI1JastWty1KiomP+j76P3vFeqHB4X/vHx6bree
2qazsP8huUNUqyqF1eqE/hJFxhw+8a5yDd/YzaEGF5QwhyUsIWMTtDz1v0oI2K0C
AwEAAaOCAukwggLlMAwGA1UdEwEB/wQCMAAwHwYDVR0jBBgwFoAUIJj7ofnzBoXy
lzYitID29ahWijAwZwYIKwYBBQUHAQEEWzBZMDUGCCsGAQUFBzAChilodHRwOi8v
Y2VydC5zc2wuY29tL09DTEMtVExTLUktUlNBLVIxLmNlcjAgBggrBgEFBQcwAYYU
aHR0cDovL29jc3BzLnNzbC5jb20wOQYDVR0RBDIwMIIXKi5hYmluZ3Rvbi5pZG0u
b2NsYy5vcmeCFWFiaW5ndG9uLmlkbS5vY2xjLm9yZzAjBgNVHSAEHDAaMAgGBmeB
DAECATAOBgwrBgEEAYKpMAEDAQEwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUF
BwMBMDoGA1UdHwQzMDEwL6AtoCuGKWh0dHA6Ly9jcmxzLnNzbC5jb20vT0NMQy1U
TFMtSS1SU0EtUjEuY3JsMA4GA1UdDwEB/wQEAwIFoDCCAX4GCisGAQQB1nkCBAIE
ggFuBIIBagFoAHYATnWjJ1yaEMM4W2zU3z9S6x3w4I4bjWnAsfpksWKaOd8AAAGO
pCbRqgAABAMARzBFAiEAp5Iuxm0QHZYO9/dwqg8LwkGX4Oi4GfPiCQO7yixbxw4C
IFbCSIO6NAzLNiVi2G1vhcuH5oKPFQhi4oYOhLyccGJDAHcAzPsPaoVxCWX+lZtT
zumyfCLphVwNl422qX5UwP5MDbAAAAGOpCbR0wAABAMASDBGAiEAhmUAZX/LWKoi
fJDshorhSOdvVPF8TVZoyWCK+7wXFRoCIQC5PfnVi1Uxg5G/q6358qtaB4FTZaMn
jZiXkr0NTJ2q+wB1AObSMWNAd4zBEEEG13G5zsHSQPaWhIb7uocyHf0eN45QAAAB
jqQm0hsAAAQDAEYwRAIgXaacmViAiN6L+RIkegpAQBx7sy4rc2zKneErciN50YYC
IBtLj3UkRWKLfsDoI+nVG3NRXPWIytuTSLAn+UyWDQqFMA0GCSqGSIb3DQEBCwUA
A4IBgQBDju883g+3uhd0JMLGduwAnd72JRV6Jx2fS8VqDrY163pBq4OyI6BtPKbd
eg+Jacxt4KldYmFbLF440d3vOk5eCCqsAsu/jXRDZ6ktHZPeR6SA+hRmPJfHjgkL
wAcrUomzmktIVkK3thbXmFFiK+LmZYEjjQY65smsqqGHp8r1KV3KF/7TTpcrMjJB
+TeI99AMpD/kEGO1mragVXli2B/AGzxvu+E2GUEPcJFxlixDNuGGvN0Lw8CBgJ20
EKDb0WsmG++q+5Y274Mbke62p/s9AEA5eroAZ+ELbC4zh5UVC0dQxJmIlq5Aw7Z8
ppY2GBBiRqNe5xT+ZPkSA5/zvME3+AIOB7k2VNeljwI5VAIOQATAAApdk3W98RRV
kJnvxf9EV4qxbHikaa8SrfiXJl36Ay9y8KBuUqoP9OB6g69NrTP+JttafK8uWVtF
7tQGnLQ7wj1J3DtZZoKGdq8ta8h/DQ8SW5Z7okxHJe5dLiO+zxq0zFud/pGAnGAb
sf/ssic=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4d6aTmh/RN4U4/SJ36T
vThwvwSqumCyW+IO7rwP5Ed1HbCT5vfycbwFE4k79NcQTW6BPuWSlfRly3OmmmSb
bYKvPu4izxAbK4bYL/eqrjGvX9c0cUeCUBwOCox3mA58bFCP4cPVN6rtyJ0RS9+F
NFB5mvcdmJYx2WMjsliN1fFEqAbpVd2dOM4193CY+tWE0BOq0XQ3IzaybZFl04Sa
eZIPNYmX1tQoq9alDQ8K3QYT+qqlEjUlqy1a3LUqKiY/6Pvo/e8V6ocHhf+8fHpu
t57aprOw/yG5Q1SrKoXV6oT+EkXGHD7xrnIN39jNoQYXlDCHJSwhYxO0PPW/SgjY
rQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34050319982641918034047365861091044283
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC TLS Issuing RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-03 13:19:50 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-03 13:19:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.abington.idm.oclc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22158510143676917993131998278734411326568591769980516028770838553070211204143841823025029442266844143038867934174614742867509929132254225057356708638493576921542590881746566188984027109229525513574476778334083832161635744257321691632650226461437877620346354961920602624927810145613041776912630162706571098513491483286232025493857523143955526548578903686673639028818541411557199247574524303328743378085379703199586615171134309786297275605494176764660327509433875219344655197103460051890720877606392533400089961979891805620533313036946551332661141522959234381462377167240536161814719132942524268164182747641264105642157
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2098fba1f9f30685f2973622b480f6f5a8568a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (50 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.abington.idm.oclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'abington.idm.oclc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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