www.lukb.ch

- Luzerner Kantonalbank AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 18:89:18:6f:3a:6a:5f:05:f3:e8:44:65 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Luzerner Kantonalbank AG

Organization: Luzerner Kantonalbank AG
State / Province: Luzern
Locality: Luzern
Country: CH

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 18:89:18:6f:3a:6a:5f:05:f3:e8:44:65
Serial Number (int): 7593378461592948180477559909
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: e3:a5:be:91:d1:cf:3d:e8:5f:ca:e7:6b:75:bd:c3:67:21:67:1f:16
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 9e:19:dd:49:25:1a:74:0e:72:35:0d:8b:2d:78:15:e1:20:49:e2:34
Fingerprint (sha256): 00:bb:a8:d7:55:fd:a3:30:27:ad:b8:2c:7c:06:fa:de:3e:02:30:8e:9d:79:ba:82:f3:78:74:0a:fb:be:da:89

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate www.lukb.ch

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.lukb.ch

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.lukb.ch
lukb.ch

Other certificates including the domain name lukb.ch

(limited to 100 certificates)
report.lukb.ch
www.lukb.ch
pricetrends.io
webmail.lukb.ch
loren.propertyservicesexchange.com
www.bambiskitchen.com
www.lukb.ch
app.swipefwd.com
int-caml.lucorp.ch
variobend-dev.az2.at
metisengine.com
test-inba.lukb.ch
elixir.college
quote-push1.lukb.ch
pic-sportingindexacceptance.mentor.neccton.com
download.osmanturan.com
www.massagestudio-harmonia.ch
www.lukb.ch
staposetiti.com
www.joseantonioribeiro.com
inba.lukb.ch
www.lukb.ch
ggx01006-013.gadabout.games
nhayendathung.com
www.softcode.com
kigalirides.rw
uci-lukh-nwe-002.lukb.ch
jovanpetrov.com
login.source.topic.com.ar
www.lukb.ch
uci-lukt-np-001.int-ucc.lucorp.ch
uci-lukt-np-001.int-ucc.lucorp.ch
www.softcode.com
call.telesastho.com
pxmystery.aureliencurti.fr
dev-ebics.lukb.ch
links.thevellaapp.com
kdvinhlong.xbot.com.vn
int-www.lukb.ch
secmail.lukb.ch
skillseastriding.co.uk
encaixat.webcoop.cat
api.freetrade.io
uci-lukt-np-001.int-ucc.lucorp.ch
www.syntacorp.com
qunying.es
staging.api.v2.tnsj.pt
dev-www.lukb.ch
www.anagramsgold.com
www.antonaparin.com
zerogermsmenus.com
listennow.usefulbots.com
auth.mqtizer.com
maximemivilledeschenes.com
na2.bqd.us
my2023.site
appl10-ocemd.lukb.ch
admin.loftyapps.com
kontakt.laburoso.ch
www.thuongthansohoc.vn
silvaconstructionandcleaning.com
stayc.re2fe.com
pruksamoney.co.th
maint-ebanking.lukb.ch
int-www.lukb.ch
todomundopurple.com.br
elektro-placzek.cz
reporting.oso-ai.com
quote-push2.lukb.ch
eas.lukb.ch
careers.lukb.ch
www.bidmytires.com
secmail.lukb.ch
sharefile.lukb.ch
uci-lukh-nwe-002.lukb.ch
secmail.lukb.ch
nlink.lukb.ch
secmail.lukb.ch
int-www.lukb.ch
vybinex.com
www.steelect.com
uci-lukh-np-001.ucc.lucorp.ch
www.dirtygoldfish.com
dev-www.lukb.ch
mo.lukb.ch
uci-lukt-nwc-001.int-ucc.lucorp.ch
mikulas.ddmpraha.app
apachi.app
mo.lukb.ch
juxco.de
appl06-ocemd.lukb.ch
int-www.lukb.ch
int-www.lukb.ch
webview.kairosgame.com
inba.lukb.ch
www.mvpsolutions.tech
uci-lukt-np-001.int-ucc.lucorp.ch
static.reality-overwritten.net
nbild.lukb.ch
eb99-www.lukb.ch

Certificate

The complete raw certificate details for www.lukb.ch in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIMGIkYbzpqXwXz6ERlMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTcxMjE0MTE0NDU0WhcNMjAwMjI3MTMyMjA5WjBoMQswCQYDVQQGEwJD
SDEPMA0GA1UECBMGTHV6ZXJuMQ8wDQYDVQQHEwZMdXplcm4xITAfBgNVBAoTGEx1
emVybmVyIEthbnRvbmFsYmFuayBBRzEUMBIGA1UEAxMLd3d3Lmx1a2IuY2gwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5vMn5AOO6fmf+vcw+OqeCqBq
6cQXcSjLBoXj4MnhmUSbVjQAwu3eHuhXbchYt8r9asbjUn+JW0pXoHaptNgjK/3X
16Y5lzysgeRIJrTxfFKssqjuyPX7iZ0on9ndJ3N1ID0fklj7mgXExdt1b9zTfgvU
1OklLgP0KRP71uvpmcZnfX30RACa8X3/mum66iSeeYcSoPVocWWlZSU1JeVrR/ct
GxD83LTtgKPDKvBgt411/IGDe0sHwDZTizKacAbZKacDM6ioKPJlv6rv/Ujj3nEx
+kpnRW/U6Wt8U44v4fwMGAaKclItciE7qCfMSSm0kaTVksIYueC/fEgHQ7JnAgMB
AAGjggH6MIIB9jAOBgNVHQ8BAf8EBAMCBaAwgaAGCCsGAQUFBwEBBIGTMIGQME0G
CCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n
c29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0cDov
L29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyMFYG
A1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3
Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAA
MEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Mv
Z3Nvcmdhbml6YXRpb252YWxzaGEyZzIuY3JsMB8GA1UdEQQYMBaCC3d3dy5sdWti
LmNoggdsdWtiLmNoMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAdBgNV
HQ4EFgQU46W+kdHPPehfyudrdb3DZyFnHxYwHwYDVR0jBBgwFoAUlt5h8b0cFilT
HMDMfTuDAEDmGnwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQAD
ggEBAKCrGTXskHuheRdTx6SALky9lYIYLbr9cKjhLpeh1yI0+vTbrewU0PwqX6ad
AMJ7rxCnPRLljbQFZ2OvLo/2wCAKIDWGerMKV1VC2K6RB2z37EIWiQOWjD9OIhOn
g2JBBfpQyRThidmCPJMDGyMa0pdzXlfMDDqRNHs8Sp0EvKVpwmk9nLvzDkjnABJf
iKbXE7imO9mYYV36XgtJUrdTfQ7gbgE8YuBnlQU/+uKE/7cgdaGcbJ4bo2sYE9ZE
bf4JA7Y/uwmCv5fJ+iS5wAkTG8bhZ7IQzO3C7j+aZyVNfir3bZmnuYY6m0lcoC9/
aDpW7q+Zx4wIxAg83lYoReBodF4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ubzJ+QDjun5n/r3MPjq
ngqgaunEF3EoywaF4+DJ4ZlEm1Y0AMLt3h7oV23IWLfK/WrG41J/iVtKV6B2qbTY
Iyv919emOZc8rIHkSCa08XxSrLKo7sj1+4mdKJ/Z3SdzdSA9H5JY+5oFxMXbdW/c
034L1NTpJS4D9CkT+9br6ZnGZ3199EQAmvF9/5rpuuoknnmHEqD1aHFlpWUlNSXl
a0f3LRsQ/Ny07YCjwyrwYLeNdfyBg3tLB8A2U4symnAG2SmnAzOoqCjyZb+q7/1I
495xMfpKZ0Vv1OlrfFOOL+H8DBgGinJSLXIhO6gnzEkptJGk1ZLCGLngv3xIB0Oy
ZwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7593378461592948180477559909
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-12-14 11:44:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 13:22:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CH'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luzern'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Luzerner Kantonalbank AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.lukb.ch'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28643742526811294926435878585878544907569918743296437301104122538855885119046458270910798944032925735902349224166364140682039070192857726163512759943433740055576818388225091380039545424055738261431721058416710273596275181627849751348387698651249804517591114696060976572596660003335776968826145342947165251913011350509377733228479314615124111733214176639691173221168428707225075840869755110236739314959729551576946671248473166171502723406258967560558214490375932903277393393161563585459578651421077937416442926065988714684318539217961563620396861387394612114553698429882855257758518825825204384921268068994192456790631
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.lukb.ch'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lukb.ch'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e3a5be91d1cf3de85fcae76b75bdc36721671f16
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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