mail.akaflieg.uni-karlsruhe.de

- Karlsruhe Institute of Technology -

Issued by KIT-CA

About this certificate

This digital certificate with serial number 26:fe:17:5c:47:02:71:17:8c:f4:fc:45 was issued on by Karlsruhe Institute of Technology.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

Karlsruhe Institute of Technology

Organization: Karlsruhe Institute of Technology
State / Province: Baden-Wuerttemberg
Locality: Karlsruhe
Country: DE

This certificate has expire since

Certificate Details

Serial Number (hex): 26:fe:17:5c:47:02:71:17:8c:f4:fc:45
Serial Number (int): 12067607848039565677645069381
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: c6:f2:2e:54:10:34:7c:f3:30:37:47:14:70:33:bc:4f:d5:a4:ce:24
AuthorityKeyId: 04:1a:bf:1c:93:91:3d:d3:d9:3d:b0:de:13:23:e5:9a:70:f4:2e:08

Fingerprint (sha1): c4:f5:7b:c7:34:bd:bc:a1:c2:41:22:32:f0:74:d7:8f:0d:8d:ce:17
Fingerprint (sha256): 01:04:1f:5b:39:9d:ec:fe:03:ce:97:08:2e:27:dc:f3:c7:3c:e1:96:72:97:4b:75:f6:b7:e1:a9:63:81:23:64

Issuing Certificate URL: http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt
Issuing Certificate URL: http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt

Revocation information

OCSP Server: http://ocsp.pca.dfn.de/OCSP-Server/OCSP
CRL Distribution Point: http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl
CRL Distribution Point: http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl

Check the revocation status for certificate mail.akaflieg.uni-karlsruhe.de

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.akaflieg.uni-karlsruhe.de

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.akaflieg.uni-karlsruhe.de

Other certificates including the domain name uni-karlsruhe.de

(limited to 100 certificates)
www.lehrer.uni-karlsruhe.de
karrieretag.awika.uni-karlsruhe.de
code.em.uni-karlsruhe.de
www.kv-reihe.kit.edu
www.lists.uni-karlsruhe.de
www.mobilitaetssysteme.kit.edu
mail.akaflieg.uni-karlsruhe.de
www.oew.kit.edu
i72projekte.tm.uni-karlsruhe.de
wbkmail2.wbk.uni-karlsruhe.de
pp.info.uni-karlsruhe.de
irans-test.ira.uni-karlsruhe.de
ce.ioc.kit.edu
www.tvt.kit.edu
symposium.fbv.uni-karlsruhe.de
www.iiit.kit.edu
www.eti.kit.edu
www.mathematik.uni-karlsruhe.de
www.eti.kit.edu
www.fsz.kit.edu
www.philosophie.kit.edu
fsmi-www.fsmi.uni-karlsruhe.de
www.ite.kit.edu
www.ipc.kit.edu
www.ibu.uni-karlsruhe.de
www.itiv.kit.edu
i70tmdocs.tm.uni-karlsruhe.de
www.entechnon.kit.edu
www.konzertchor.kit.edu
www.kammerchor.kit.edu
www.mvm.uni-karlsruhe.de
wbkwss.wbk.uni-karlsruhe.de
pi-4pcm.physik.uni-karlsruhe.de
www.iww.uni-karlsruhe.de
atisverleih.informatik.kit.edu
www.physik.uni-karlsruhe.de
wasserversorgung.iwg.kit.edu
ekpwww.ekp.kit.edu
www.iam.kit.edu
www.ieh.kit.edu
www.intl.kit.edu
www.fs-fmc.kit.edu
mml-backup.informatik.kit.edu
www.mobilitaetssysteme.kit.edu
www.ifr.kit.edu
www.tm.kit.edu
fgt.ieb.kit.edu
www.fsm.kit.edu
www.stud.uni-karlsruhe.de
isnt.ikm.uni-karlsruhe.de
i81pc50.iar.kit.edu
i40dc3.uni-karlsruhe.de
fmi.fbv.uni-karlsruhe.de
geotech.ibf.uni-karlsruhe.de
i81server.iar.kit.edu
www.chem-bio.kit.edu
www.ibu.kit.edu
www.zak.kit.edu
www.ibt.kit.edu
www.cfn.uni-karlsruhe.de
iag1.webarchiv.kit.edu
www.konzertchor.kit.edu
test-www.rz.uni-karlsruhe.de
www.cfn.kit.edu
bup.ieb.kit.edu
www.paedagogik.uni-karlsruhe.de
munin.ira.uni-karlsruhe.de
www.kafep.uni-karlsruhe.de
stahl.vaka.kit.edu
www.agw.kit.edu
www.philosophie.kit.edu
fwi-servicebackend.wiwi.uni-karlsruhe.de
www.zak.kit.edu
www.stk.uni-karlsruhe.de
www.hek.uni-karlsruhe.de
smtp.ira.uni-karlsruhe.de
tfpimap-ext.tfp.uni-karlsruhe.de
kki-us-srv-01.informatik.kit.edu
listen.informatik.kit.edu
i02mac47.informatik.uni-karlsruhe.de
www.scc.kit.edu
www.its.kit.edu
zebio.zoo.kit.edu
www.botanik2.uni-karlsruhe.de
www.sport.kit.edu
www.fast.kit.edu
www.bgu.uni-karlsruhe.de
www.kit.edu
www.oew.kit.edu
www.kit.edu
cmwiki.cm-tm.uni-karlsruhe.de
www.rsm.kit.edu
aifb.kit.edu
i08workbench.informatik.kit.edu
www.imt.kit.edu
www.iam.kit.edu
www.imb.kit.edu
ts1.ubka.uni-karlsruhe.de
www.its.kit.edu
portal.akaflieg.uni-karlsruhe.de

Certificate

The complete raw certificate details for mail.akaflieg.uni-karlsruhe.de in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12067607848039565677645069381
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KIT-CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-07-25 13:25:33 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-08-25 13:25:33 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Baden-Wuerttemberg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Karlsruhe Institute of Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.akaflieg.uni-karlsruhe.de'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 693502199117460336773741009104529229566941650871676926924191357968248095770712837200049642549034406208871484763858103662691063085443275473183797835523809074852173994877372314806663005534007960277887026063991447838589241930694076781868159520569863622800322230539889266800899285862502195658006405803879627283937859525894937954923431522421921365829989327827098915376434986695068423203814625257956525244915483497199697537271900940298416886872421443540457266132476778698302607217863127228961253210132017872823816632877763260661831250742633625099818584147871529575789808013549890439048173197068430974500912396844677461427578731964149655583276283855557278619824314295065571971183597472302193129521350537512660872261685057104658134179145971925292152117140154382388220319389897877386395010909375386802903320205021936703523639131269391975822298884403364942015053706444956631752957548395412959626822225499796414928679273694487106595303613964691012299298526871918795860760907753691653444285950412877477322643482714973266789702791896095850204156542007546407271847209748642118815495911064494213751849507518178586823695236304898451185964851252718205356780825233152072848738668452340174960554598911820092686779258931449620179468032414741569724839389
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c6f22e5410347cf3303747147033bc4fd5a4ce24
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 041abf1c93913dd3d93db0de1323e59a70f42e08
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.akaflieg.uni-karlsruhe.de'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (118 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/crl/cacrl.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (192 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pca.dfn.de/OCSP-Server/OCSP'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp2.pca.dfn.de/kit-ca-g2/pub/cacert/cacert.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.30
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.1.1.4.10
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22177.300.2.1.4.10
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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