*.twu.idm.oclc.org

Issued by OCLC TLS Issuing RSA SubCA R1

About this certificate

This digital certificate with serial number 2c:12:56:1a:a9:c7:82:41:8d:01:79:5d:88:55:e5:b5 was issued on by OCLC, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.twu.idm.oclc.org

OCLC, Inc.

Organization: OCLC, Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2c:12:56:1a:a9:c7:82:41:8d:01:79:5d:88:55:e5:b5
Serial Number (int): 58581239557692222734362597824218391989
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 99:df:f8:29:cc:b4:c2:f1:8c:92:f4:40:69:00:1c:e9:4a:0d:2f:85
AuthorityKeyId: 20:98:fb:a1:f9:f3:06:85:f2:97:36:22:b4:80:f6:f5:a8:56:8a:30

Fingerprint (sha1): 77:3e:a6:13:7f:b2:25:ee:ad:67:cc:d7:f0:37:44:c5:14:71:11:0a
Fingerprint (sha256): 00:91:35:33:bd:08:d2:c8:1a:ff:13:8f:15:3e:83:c8:a6:28:45:5f:35:59:a5:e8:d3:c0:ec:83:ee:19:61:d7

Issuing Certificate URL: http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl

Check the revocation status for certificate *.twu.idm.oclc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.twu.idm.oclc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.twu.idm.oclc.org
twu.idm.oclc.org

Other certificates including the domain name oclc.org

(limited to 100 certificates)
*.cfra-msa.idm.oclc.org
*.nwcc.idm.oclc.org
*.southseattle.idm.oclc.org
*.iuhu.idm.oclc.org
*.liuc.idm.oclc.org
*.cfra-msa.idm.oclc.org
deweyess.oclc.org
*.greatlibrary.idm.oclc.org
*.apll.idm.oclc.org
*.muhlenberg.idm.oclc.org
*.abington.idm.oclc.org
*.nccu.idm.oclc.org
secure06.stage.lithium.com
*.trevecca.idm.oclc.org
*.twu.idm.oclc.org
*.udlap.idm.oclc.org
*.aic.idm.oclc.org
*.weston.idm.oclc.org
*.cide.idm.oclc.org
*.bchs.idm.oclc.org
*.neomed.idm.oclc.org
*.uiwtx.idm.oclc.org
*.bpcc.idm.oclc.org
*.dartmouth.idm.oclc.org
*.tjportal.idm.oclc.org
*.wcc.idm.oclc.org
*.limcollege.idm.oclc.org
OWA.OCLC.ORG
*.victimresearch.idm.oclc.org
*.greenville.idm.oclc.org
*.dsc.idm.oclc.org
*.fmarion.idm.oclc.org
*.ubu-es.idm.oclc.org
exeter.idm.oclc.org
*.springerpub.idm.oclc.org
*.sanlib.idm.oclc.org
*.tjc.idm.oclc.org
*.zhejianglibr.idm.oclc.org
*.zulib.idm.oclc.org
*.burmanu.idm.oclc.org
*.ccl.idm.oclc.org
*.chifedkc.idm.oclc.org
workday.oclc.org
*.nscad.idm.oclc.org
*.confederation.idm.oclc.org
*.yccc.idm.oclc.org
*.aspenuniversity.idm.oclc.org
*.nu.idm.oclc.org
*.ala.idm.oclc.org
*.mmc.idm.oclc.org
*.akkon-onlinelibrary.idm.oclc.org
*.mclarenmacomb.idm.oclc.org
ftp-bibliotheca.de.oclc.org
*.jjhs.idm.oclc.org
*.gold.idm.oclc.org
*.qvcc.idm.oclc.org
*.omahalibrary.idm.oclc.org
*.nishogakusha-u.idm.oclc.org
*.usu29.idm.oclc.org
*.bakeru.idm.oclc.org
*.cdkc.idm.oclc.org
*.southeast.idm.oclc.org
*.lourdes.idm.oclc.org
*.mvcc.idm.oclc.org
*.fid-avl.idm.oclc.org
*.wcsu.idm.oclc.org
*.hchs.idm.oclc.org
*.aus.idm.oclc.org
*.kuyper.idm.oclc.org
*.testemea.idm.oclc.org
*.uea.idm.oclc.org
*.nnu.idm.oclc.org
*.sanfrancisco.idm.oclc.org
*.szrof.idm.oclc.org
*.fls.idm.oclc.org
*.sri.idm.oclc.org
*.sierranev.idm.oclc.org
*.ozarks.idm.oclc.org
deweyess.oclc.org
*.hodges.idm.oclc.org
*.ncat.idm.oclc.org
*.antioch.idm.oclc.org
*.trevecca.idm.oclc.org
*.wvclibrary.idm.oclc.org
Cmsauthor-ext.oclc.org
*.bucm.idm.oclc.org
*.drexel.idm.oclc.org
*.hshs.idm.oclc.org
*.arlis.idm.oclc.org
*.aaas.idm.oclc.org
*.esf.idm.oclc.org
*.uhsp.idm.oclc.org
*.essec.idm.oclc.org
*.scclosrios.idm.oclc.org
*.salusdental.idm.oclc.org
*.stmarys.idm.oclc.org
*.kl.idm.oclc.org
*.barker.idm.oclc.org
lbs-avans.oclc.org
*.nutn.idm.oclc.org

Certificate

The complete raw certificate details for *.twu.idm.oclc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGoDCCBQigAwIBAgIQLBJWGqnHgkGNAXldiFXltTANBgkqhkiG9w0BAQsFADBK
MQswCQYDVQQGEwJVUzETMBEGA1UECgwKT0NMQywgSW5jLjEmMCQGA1UEAwwdT0NM
QyBUTFMgSXNzdWluZyBSU0EgU3ViQ0EgUjEwHhcNMjMwNDI0MTgwMTQ3WhcNMjQw
NDIzMTgwMTQ3WjAdMRswGQYDVQQDDBIqLnR3dS5pZG0ub2NsYy5vcmcwggEiMA0G
CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwRrkjjOKbOliRdTWoteRePupLMlH0
xCe8M9R6yfvcFApe4ZxZ/S3AF4J08jRs8akxPyGkE0mhoUpxVlk4we+cWGRRcTdg
OyhIZ4PVqj0t7X4m/SnXiqdW6miq25ZZDVDeJ2dSxytmq8vwfKt+sc4CfdVjxdXx
VGpDAgIpcqSGD1pxyCXQC/r27flGxrrV5t1owYsFLx6KDZCHchgSOpnAFvz0UsDV
5uf7Qhs+zQBaA3Hs7R0E+ErDI9WVASNAi/tQ3cY/DdA90ln85rty9HE4FhVVTj8+
KRP4kWISoV4uEP5gyKf8zGLVAUKIkP2sd5LJZu7qMHXfuf+tAH8tclSjAgMBAAGj
ggMtMIIDKTAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFCCY+6H58waF8pc2IrSA
9vWoVoowMGcGCCsGAQUFBwEBBFswWTA1BggrBgEFBQcwAoYpaHR0cDovL2NlcnQu
c3NsLmNvbS9PQ0xDLVRMUy1JLVJTQS1SMS5jZXIwIAYIKwYBBQUHMAGGFGh0dHA6
Ly9vY3Nwcy5zc2wuY29tMC8GA1UdEQQoMCaCEioudHd1LmlkbS5vY2xjLm9yZ4IQ
dHd1LmlkbS5vY2xjLm9yZzBRBgNVHSAESjBIMAgGBmeBDAECATA8BgwrBgEEAYKp
MAEDAQEwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cuc3NsLmNvbS9yZXBvc2l0
b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+g
LaArhilodHRwOi8vY3Jscy5zc2wuY29tL09DTEMtVExTLUktUlNBLVIxLmNybDAd
BgNVHQ4EFgQUmd/4Kcy0wvGMkvRAaQAc6UoNL4UwDgYDVR0PAQH/BAQDAgWgMIIB
fwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdgBz2Z6JG0yWeKAgfUed5rLGHNBRXnEZ
KoxrgBB6wXdytQAAAYe0dvzYAAAEAwBHMEUCIFoTaI8ZG6uMhH7UMKhM19kBqgFZ
wkjDMYX1Wde43rIoAiEA5l7ow7+XJ6cW98oqjHQkbhzjQgtCmmBAzIDg72IG5XIA
dgA7U3d1Pi25gE6LMFsG/kA7Z9hPw/THvQANLXJv4frUFwAAAYe0dvzBAAAEAwBH
MEUCIC/mtRtf5iUz/ZNCMHfCWkNh8nUBYNax7itzCeAXIxKDAiEAmVmDOMt5SrFj
ZyC1oI+MDARE8ijImI/ZbBQtswbI/MkAdwB2/4g/Crb7lVHCYcz1h7o0tKTNuync
aEIKn+ZnTFo6dAAAAYe0dvx2AAAEAwBIMEYCIQDQOTsnqn35a9XsPuPFvvPlp23R
GuRHCHyEefXEkDSdKgIhAOL7xaWjm8FGKEvgTClaDEco5bT6TU2B8y9Ljrhd1jrh
MA0GCSqGSIb3DQEBCwUAA4IBgQA11K9WszXAmzAq94F3zvITT6JAoyA6vqXmud3a
j2SnvYBqcXf41d5zY073PkcGl6GtvVouZKU1FcxnSRjD/Gxb1juHBfLbDBMn8GE4
DYwbdsbqT/rq+N67jPX2+IQlpjVTuXjZNEXCUdAiNHtrROOT4CzSr0r0JfBlhlVh
RTsQVKYsBcrXejsq05go48LGgr4dehRCbTD17Zk70jb/azci/Oi6V6W9lGhMhKzG
q2l7zWvwRNDRx3jW7zC1bT5ZqeNDAa6/M9rNArlmz6Oict8mCzES5ewyAr+QNegY
aJFFCpK4UHsfv/pinlMWQES3uw4wJLt3dzV3yIuabkctQ68BssVDIcTRtzyLZlGV
ejlhEE4QD/nmWFp2P7xJKyfMDX/DUMpyrnH4tJRnBWBE5l5/cLU51QjZZxVpW2mW
Lrxt+7yMR0wEE2YMNVUbZd77/EXyXr/1C1Mvjoo2oZdMq9xQIybeeA328bAGfn00
E+q/pg842O93XI15A8857pauxvE=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8Ea5I4zimzpYkXU1qLXk
Xj7qSzJR9MQnvDPUesn73BQKXuGcWf0twBeCdPI0bPGpMT8hpBNJoaFKcVZZOMHv
nFhkUXE3YDsoSGeD1ao9Le1+Jv0p14qnVupoqtuWWQ1Q3idnUscrZqvL8HyrfrHO
An3VY8XV8VRqQwICKXKkhg9accgl0Av69u35Rsa61ebdaMGLBS8eig2Qh3IYEjqZ
wBb89FLA1ebn+0IbPs0AWgNx7O0dBPhKwyPVlQEjQIv7UN3GPw3QPdJZ/Oa7cvRx
OBYVVU4/PikT+JFiEqFeLhD+YMin/Mxi1QFCiJD9rHeSyWbu6jB137n/rQB/LXJU
owIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 58581239557692222734362597824218391989
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC TLS Issuing RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-04-24 18:01:47 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-23 18:01:47 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.twu.idm.oclc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30332068100941180799119487083784633613630217602032755560631752845485961008385582057260730459129013028437328480645555554538934359502129407091779282521021846635875749004970026635649703603013842037771312582779758987023226095769181630639667531587456272833546121548635333759007665569849077090884569471663890142397298343083304718528842477171246830766610534147099679847190607700189828129973521438719390730096800549345458574043074467876137400322481546448979445340778509814467633600669084741931029653132801313200524339331525309035839555559516064447813149662915135617810523989939252684952305970700517628916781582870898397041827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2098fba1f9f30685f2973622b480f6f5a8568a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.twu.idm.oclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'twu.idm.oclc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							99dff829ccb4c2f18c92f44069001ce94a0d2f85
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900760073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b500000187b476fcd8000004030047304502205a13688f191bab8c847ed430a84cd7d901aa0159c248c33185f559d7b8deb228022100e65ee8c3bf9727a716f7ca2a8c74246e1ce3420b429a6040cc80e0ef6206e5720076003b5377753e2db9804e8b305b06fe403b67d84fc3f4c7bd000d2d726fe1fad41700000187b476fcc1000004030047304502202fe6b51b5fe62533fd93423077c25a4361f2750160d6b1ee2b7309e01723128302210099598338cb794ab1636720b5a08f8c0c0444f228c8988fd96c142db306c8fcc900770076ff883f0ab6fb9551c261ccf587ba34b4a4cdbb29dc68420a9fe6674c5a3a7400000187b476fc760000040300483046022100d0393b27aa7df96bd5ec3ee3c5bef3e5a76dd11ae447087c8479f5c490349d2a022100e2fbc5a5a39bc146284be04c295a0c4728e5b4fa4d4d81f32f4b8eb85dd63ae1
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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