ssltest21.bbtest.net

- GeoTrust, Inc. -

Issued by GeoTrust Primary Certification Authority - G3

About this certificate

This digital certificate with serial number 37:9e:60:52:01:8b:12:83:c3:a9:18:70:09:94:56:49 was issued on by GeoTrust Inc..

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

GeoTrust, Inc.

Company registration number: 3479750
Organization: GeoTrust, Inc.
Organization unit: SHA256 EV SSL Test Site
State / Province: California
Locality: Mountain View
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Organization unit: (c) 2008 GeoTrust Inc. - For authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 37:9e:60:52:01:8b:12:83:c3:a9:18:70:09:94:56:49
Serial Number (int): 73929876280327765637020359153673328201
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: f6:87:17:aa:b8:27:4c:1d:2e:39:1f:4d:3b:84:25:7f:0b:8f:c7:8f
AuthorityKeyId: c4:79:ca:8e:a1:4e:03:1d:1c:dc:6b:db:31:5b:94:3e:3f:30:7f:2d

Fingerprint (sha1): 53:a8:94:55:80:16:bb:8e:bf:25:30:90:68:5c:d1:35:c8:cb:59:83
Fingerprint (sha256): 01:41:f8:c8:7c:b6:2e:1b:2a:54:68:6f:29:fa:30:a2:1a:85:47:8b:cb:53:9c:ec:15:5a:af:f3:46:3c:d9:d8


Revocation information

OCSP Server: http://pca-g3-ocsp.geotrust.com
CRL Distribution Point: http://crl.geotrust.com/GeoTrustPCA-G3.crl

Check the revocation status for certificate ssltest21.bbtest.net

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ssltest21.bbtest.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ssltest21.bbtest.net

Other certificates including the domain name bbtest.net

(limited to 100 certificates)
www.bbtest.net
evenevsha1汉字-1.bbtest.net
bbtest.net
bbtest.net
ssevchangecn.bbtest.net
UYse1vl.ATT_PROD.www.bbtest.net
?.bbtest.net
8Dec-prerelrenEV2.bbtest.net
jimmy.bbtest.net
www.bbtest.net
eccre.bbtest.net
bbtest.net
s9qSVMhN.bbtest.net
ptnr-pki-ws.bbtest.net
authapi8.bbtest.net
*.bbtest.net
renew1.bbtest.net
ssltest21.bbtest.net
*.bbtest.net
ssltest9.bbtest.net
bbtest.net
PTNR-MSSL-ADMIN.BBTEST.NET
bbtest.net
symc-pc2-enroll.symclab.net
漢字QtvBCW72.bbtest.net
dev-pki-est.symclab.net
msslmy.www.bbtest.net
565654.bbtest.net
?.bbtest.net
dev-pki-cbo.bbtest.net
alex2012.bbtest.net
joetestcustomfld.bbtest.net
pv-enterprise-ssl-adminmanager.websecurity.symclab.net
bryancicauto.bbtest.net
70h3n209em.bbtest.net
dev-mmadmin-manager.bbtest.net
Sep14ProdTest2.bbtest.net
vicy.www.bbtest.net
pv-testdrive-pki-idp.symclab.net
pv-userservices-auth.vip.symclab.com
mmadmin1-enroll.bbtest.net
bt-testdrive-pki-idp.bbtest.net
pv-mmadmin.bbtest.net
ft-ent-admin.bbtest.net
xofUVdb.www.bbtest.net
ptnr-vipservices-auth.bbtest.net
mnigudkar-vlabs.bbtest.net
authmail4.bbtest.net
25Aug201701.bbtest.net
oneyear2.bbtest.net
?.bbtest.net
standdsa.bbtest.net
ft-pki-internal-svc.symclab.com
漢字replace.bbtest.net
ptnr-authentication.bbtest.net
bbtest.net
24JULPRODEVVICE1.BBTEST.NET
trustblade.bbtest.net
ev34.bbtest.net
dev-trustcenter-enterprise1.websecurity.symclab.net
T0BEsAZda_b.bbtest.net
?.bbtest.net
server1.bbtest.net
pki-idp.symclab.net
SHA1.test01.bbtest.net
ssp.gqa.vip.symc.io
mmadmin10-manager.bbtest.net
ptnr-pki-idp.symclab.com
j1yau98.bbtest.net
?.bbtest.net
ssltest30.bbtest.net
certmanager5.websecurity.symclab.net
SjKElDRJ12.bbtest.net
ssltest27.bbtest.net
ft-vip-fin.bbtest.net
dHGsxJb.www.bbtest.net
?.bbtest.net
?.?.bbtest.net
ft.m.vip.symclab.com
dev-vsc.ws.symclab.com
dev-testdrive-pki-idp.bbtest.net
ft-ent-admin-enroll.bbtest.net
?.bbtest.net
ft-ent-control.bbtest.net
dev-pc1-ocsp.symclab.net
?.bbtest.net
bbtest.net
idc-cic-sso.symclab.net
ft-vsc.bbtest.net
?.bbtest.net
ssltest21.bbtest.net
final14-3sevv1汉字.bbtest.net
bbtest.net
*.bbtest.net
testing1.bbtest.net
ptnr-enterprise-ssl-admin.jp.websecurity.symclab.com
ptnr-sso.websecurity.symclab.com
pki-cmp.symclab.net
asb1-mpi-ise-2.net.bbtest.net
?.bbtest.net

Certificate

The complete raw certificate details for ssltest21.bbtest.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvwgNoM4/ZjGjg3fmALFu
6tIlE1QoDnmWe72vDDbK/DKjAayLUlEEtnsUMw7skD2fX6obEw1rOywCgaz4guBL
8WcG31mqqIESbMF5aY+zEgytIrrluVU6JUt4AoZaJHomMpN1l8EcsMzd0LfM80CS
jZuPV4UMBnMduHsn763NUgMKsrCj55n9q8wXOZMr6/opsCs9TvHi0CfTmBSbbQAm
uOvCV9PELRmjF8aDpsAfbhoauvcZSOXM9d1XpDAJwg6MwLQCYkEhvA6KSjfbgtuK
A7ta1DN0nF+Gdg2mgLhCFyxZ2LRjZJJhw4l+VjHVDqsuqSeWlMz0CpZxVnQ39RwJ
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 73929876280327765637020359153673328201
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2008 GeoTrust Inc. - For authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Primary Certification Authority - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-28 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-01-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Delaware'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Business Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '3479750'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Mountain View'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SHA256 EV SSL Test Site'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ssltest21.bbtest.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24115487446679411304135375426961650829040409637838231995570436585460877525940846270405196139285596992715058535048203419694110677660573316736426575207685846353910347741139035145763500906355067752062499540613461600037234054615797549644410989666180698811993129541054721473498125277597056570200322021293257894830100978290091827660676682964230724688583137109639398395771262358061156923411328036075502429230054673579356984508164943259101151613219035912710706108440183897100145395755848609987300857794679781231341549343235941284215249139604075209867137305853075459911135431643670369512708983626116857617146636597773419153877
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							f68717aab8274c1d2e391f4d3b84257f0b8fc78f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.14370.1.6 (GeoTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.geotrust.com/resources/cps'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssltest21.bbtest.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.geotrust.com/GeoTrustPCA-G3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (47 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pca-g3-ocsp.geotrust.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c479ca8ea14e031d1cdc6bdb315b943e3f307f2d
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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