cms.sfr.fr
- SFR -
Issued by CLASS 2 KEYNECTIS CA
About this certificate
This digital certificate with serial number 11:21:28:84:bb:fa:0e:dd:b8:8c:38:fb:a3:7c:a7:76:69:54 was issued on by KEYNECTIS.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
SFR
Organization:
SFR
Country:
FR
KEYNECTIS
Organization:
KEYNECTIS
Country:
FR
This certificate has expire since
Certificate Details
Serial Number (hex): 11:21:28:84:bb:fa:0e:dd:b8:8c:38:fb:a3:7c:a7:76:69:54Serial Number (int): 1492192037263954122864734942310337128851796
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: f3:a9:bb:ab:37:c7:7a:86:3e:42:22:d9:da:41:e6:8f:d4:b3:59:53
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99
Fingerprint (sha1): 65:2d:46:d6:9d:06:2c:c2:ef:14:eb:60:57:ed:b2:72:5b:2b:79:6d
Fingerprint (sha256): 01:15:a8:fa:e3:24:19:29:50:0b:93:af:e2:de:e9:3b:be:10:a1:59:42:05:ba:01:9c:8d:4c:76:51:9f:e9:b3
Revocation information
OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocspCRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl
Check the revocation status for certificate cms.sfr.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for cms.sfr.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
cms.sfr.fr
Other certificates including the domain name sfr.fr
(limited to 100 certificates)
osiri.sfr.fr
brandcenter.sfr.fr
sport.sfr.fr
maestro.sfr.fr
cms.ezy-distrib.sfr.fr
harmony-ws.sfr.fr
sfr-messagerie.services.sfr.fr
pontis.sfr.fr
analytics.sfr.fr
crm.sfr.fr
cms.sfr.fr
api-messagerie.sfr.fr
fsb2.sfr.fr
elr.sfr.fr
shop.ws-intmicrosites.sfr.fr
mdm-as.sfr.fr
*.services.sfr.fr
tonalites.sfr.fr
etoolonline.sfr.fr
pates-er.pprod.partenaires.sfr.fr
cms-hotspotsfr-test.sfr.fr
pates-xml.pprod.partenaires.sfr.fr
applimabox.sfr.fr
secure04.lithium.com
api.sfr.fr
contacteznous.sfr.fr
octopus-sd.sfr.fr
secure04.lithium.com
rp-test1.sso-a.sfr.fr
billing.m.sfr.fr
ulysseservices.sfr.fr
autorepair.sfr.fr
asc-ws.sfr.fr.casepp.sfr.fr
*.casepp.sfr.fr
rp-test2.sso-a.sfr.fr
was.sfr.fr
extrapart.sfr.fr
dw0c.sfr.fr
admin-scpsppr.sdp.sfr.fr
mdm-as.sfr.fr
secure.hotspot.sfr.fr
mypc.sfr.fr
secure04.lithium.com
kara.sfr.fr
mm-ds-stage2.sfr.fr
vadist-res.sfr.fr
distributeurs.sfr.fr
ezy.sfr.fr
filtrag.sfr.fr
monprofilwap.sfr.fr
secure01.stage.lithium.com
fournisseurs-pack.sfr.fr
boctc-gallery.funinfo.sfr.fr
nearlive.sfr.fr
api.mes-contenus.sfr.fr
repondeurplusentreprise-wifi-middle-ppd.sfr.fr
ctc.sfr.fr
dev-home.sfr.fr
p2s-ws.sfr.fr
appcol.sfr.fr
myprofil.sfr.fr
push.sfr.fr
8ezc.sfr.fr
www.gangstarneworleans.com
sfrbusinessteam-marketing.sfr.fr
distributeurs.sfr.fr
adminpro.sfr.fr
moncompte-neufbox.sfr.fr
campus.sfr.com
mdm.sfr.fr
docs.sfr.fr
crm.sfr.fr
extranet.funinfo.sfr.fr
pates.services.sfr.fr
play-fut.sfr.fr
pp.home.sfr.fr
mdm.sfr.fr
mdm-ds.sfr.fr
xml.sfr.fr
assistance.cms.sfr.fr
businessapps.sfr.fr
mdm-ds.sfr.fr
analytics.sfr.fr
paws.partenaires.sfr.fr
pates.pprod.pdct.sfr.fr
secure01.stage.lithium.com
tv.sfr.fr
test-int-admin-ctc.funinfo.sfr.fr
secure01.stage.lithium.com
prev-hotspot.sfr.fr
questions-reponses.sfr.fr
jeux-mobile.sfr.fr
video-qlf.wapsvp.sfr.fr
mdm-as.sfr.fr
id.sfr.fr
campus.sfr.com
adminpatesng.pprod.sfr.fr
jg0c.sfr.fr
espace-client.sfr.fr
m.red.sfr.fr
brandcenter.sfr.fr
sport.sfr.fr
maestro.sfr.fr
cms.ezy-distrib.sfr.fr
harmony-ws.sfr.fr
sfr-messagerie.services.sfr.fr
pontis.sfr.fr
analytics.sfr.fr
crm.sfr.fr
cms.sfr.fr
api-messagerie.sfr.fr
fsb2.sfr.fr
elr.sfr.fr
shop.ws-intmicrosites.sfr.fr
mdm-as.sfr.fr
*.services.sfr.fr
tonalites.sfr.fr
etoolonline.sfr.fr
pates-er.pprod.partenaires.sfr.fr
cms-hotspotsfr-test.sfr.fr
pates-xml.pprod.partenaires.sfr.fr
applimabox.sfr.fr
secure04.lithium.com
api.sfr.fr
contacteznous.sfr.fr
octopus-sd.sfr.fr
secure04.lithium.com
rp-test1.sso-a.sfr.fr
billing.m.sfr.fr
ulysseservices.sfr.fr
autorepair.sfr.fr
asc-ws.sfr.fr.casepp.sfr.fr
*.casepp.sfr.fr
rp-test2.sso-a.sfr.fr
was.sfr.fr
extrapart.sfr.fr
dw0c.sfr.fr
admin-scpsppr.sdp.sfr.fr
mdm-as.sfr.fr
secure.hotspot.sfr.fr
mypc.sfr.fr
secure04.lithium.com
kara.sfr.fr
mm-ds-stage2.sfr.fr
vadist-res.sfr.fr
distributeurs.sfr.fr
ezy.sfr.fr
filtrag.sfr.fr
monprofilwap.sfr.fr
secure01.stage.lithium.com
fournisseurs-pack.sfr.fr
boctc-gallery.funinfo.sfr.fr
nearlive.sfr.fr
api.mes-contenus.sfr.fr
repondeurplusentreprise-wifi-middle-ppd.sfr.fr
ctc.sfr.fr
dev-home.sfr.fr
p2s-ws.sfr.fr
appcol.sfr.fr
myprofil.sfr.fr
push.sfr.fr
8ezc.sfr.fr
www.gangstarneworleans.com
sfrbusinessteam-marketing.sfr.fr
distributeurs.sfr.fr
adminpro.sfr.fr
moncompte-neufbox.sfr.fr
campus.sfr.com
mdm.sfr.fr
docs.sfr.fr
crm.sfr.fr
extranet.funinfo.sfr.fr
pates.services.sfr.fr
play-fut.sfr.fr
pp.home.sfr.fr
mdm.sfr.fr
mdm-ds.sfr.fr
xml.sfr.fr
assistance.cms.sfr.fr
businessapps.sfr.fr
mdm-ds.sfr.fr
analytics.sfr.fr
paws.partenaires.sfr.fr
pates.pprod.pdct.sfr.fr
secure01.stage.lithium.com
tv.sfr.fr
test-int-admin-ctc.funinfo.sfr.fr
secure01.stage.lithium.com
prev-hotspot.sfr.fr
questions-reponses.sfr.fr
jeux-mobile.sfr.fr
video-qlf.wapsvp.sfr.fr
mdm-as.sfr.fr
id.sfr.fr
campus.sfr.com
adminpatesng.pprod.sfr.fr
jg0c.sfr.fr
espace-client.sfr.fr
m.red.sfr.fr
Certificate
The complete raw certificate details for cms.sfr.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcTCCA1mgAwIBAgISESEohLv6Dt24jDj7o3yndmlUMA0GCSqGSIb3DQEBCwUA MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM QVNTIDIgS0VZTkVDVElTIENBMB4XDTE1MTAwNjEzMDgyMloXDTE3MTAwNjEzMDgy MlowMDELMAkGA1UEBhMCRlIxDDAKBgNVBAoUA1NGUjETMBEGA1UEAxMKY21zLnNm ci5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAImlFAbr0o25tK+A Pu1GuZzn3/Fknpy7jukP234LyLse+4kFP0/zoN6M6M49GM3ZGklk/FSIi38hTFY9 jhFTIxE5dfuTTlSAl0I6BXwj8Uj4UWUxskywJbYjCS0FbmsM3xnvhvtiZC1qT5Kx hCzLcu+xjPOZE+vi8p6bq8GIExuyC9dK4pnej7FG/T6iNpQULB2QZ6KQqM1baiKS p1cAlhDuipk8or/AqYT1ANxtEkQ559zDxGywLHZZPlOu4jy4IGGJUzwhJ0Q7sEJd OiSo+S8UzkV+pNJxtVDuyJjmOtQ+OjMfH+Zc/DGr7rFPsbcqZRspTeIfMuXqynX4 1tW+EZUCAwEAAaOCAXMwggFvMAkGA1UdEwQCMAAwDgYDVR0PAQH/BAQDAgWgMB0G A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAVBgNVHREEDjAMggpjbXMuc2Zy LmZyME8GA1UdHwRIMEYwRKBCoECGPmh0dHA6Ly9jcmwtc3NsLmNlcnRpZmljYXQy LmNvbS9rZXluZWN0aXMvY2xhc3Mya2V5bmVjdGlzY2EuY3JsMEQGCCsGAQUFBwEB BDgwNjA0BggrBgEFBQcwAYYoaHR0cDovL29jc3Atc3NsLmNlcnRpZmljYXQyLmNv bS9zc2wtb2NzcDBFBgNVHSAEPjA8MDoGDSsGAQQBga1aAgUCBQEwKTAnBggrBgEF BQcCARYbaHR0cDovL3d3dy5vcGVudHJ1c3QuY29tL1BDMB0GA1UdDgQWBBTzqbur N8d6hj5CItnaQeaP1LNZUzAfBgNVHSMEGDAWgBQAEUHfO507y7iiwTOSqIHM5X3n mTANBgkqhkiG9w0BAQsFAAOCAQEAv00+9euOA7RIXVBFitN00mmoij5QyU9509aH IUFnhDN+ua7zj6zHJuf6+UFi8Z/vfIOp/e3n1Vv57bHGbMy64HWjnGTvEWECsuE3 pKDHfOs3BGWr09nUxFJjma1g1FwI4/malxaonK2ZCLaYUXDAhqyO0cQCfOaPyqll yASpg6KMYHvMakJiBl+5hH3Mwu+1HKU3Sct77YyXQYFjxbgb1uGwcIsSLngfNFUo 4wQuFAoARyrMduKQQJS2YHn4IYgSVmvxj2fMGVH79M+KWQGnhy8kgrH+iw6Zln0r VZQ5q7SxRtp0hxp3fql5fCgqFR9kCHg8qNGVHBox0tiiTRQ4vA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiaUUBuvSjbm0r4A+7Ua5 nOff8WSenLuO6Q/bfgvIux77iQU/T/Og3ozozj0YzdkaSWT8VIiLfyFMVj2OEVMj ETl1+5NOVICXQjoFfCPxSPhRZTGyTLAltiMJLQVuawzfGe+G+2JkLWpPkrGELMty 77GM85kT6+LynpurwYgTG7IL10rimd6PsUb9PqI2lBQsHZBnopCozVtqIpKnVwCW EO6KmTyiv8CphPUA3G0SRDnn3MPEbLAsdlk+U67iPLggYYlTPCEnRDuwQl06JKj5 LxTORX6k0nG1UO7ImOY61D46Mx8f5lz8MavusU+xtyplGylN4h8y5erKdfjW1b4R lQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492192037263954122864734942310337128851796 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-06 13:08:22 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-06 13:08:22 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SFR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'cms.sfr.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17376050889798692431744230521149087330269263340166782128921267015472009027045992174351048600837046573537324670052762606893134463021262698524753598252064519825322181788630488815775593645031900054973329765142009785166398753804308674406485835711437024527781447187612678043116474582849026144463579203595994055508061831669951781440544165138634252638668300838553801005405363001510150142812778620030453004281200621030944736693594441720897565702932672845827275469130483103352939361915306739240623336888118029809541034709357581548829553295753376821761303885476477164604737883558720150352970944851968310421695298453031054348693 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (14 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cms.sfr.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) f3a9bbab37c77a863e4222d9da41e68fd4b35953 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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