*.aspenuniversity.idm.oclc.org

Issued by OCLC TLS Issuing RSA SubCA R1

About this certificate

This digital certificate with serial number 63:0a:25:bc:3f:a0:62:4c:80:08:2f:29:cc:3a:f8:5f was issued on by OCLC, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.aspenuniversity.idm.oclc.org

OCLC, Inc.

Organization: OCLC, Inc.
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 63:0a:25:bc:3f:a0:62:4c:80:08:2f:29:cc:3a:f8:5f
Serial Number (int): 131646259915033355440239984083612661855
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 15:e6:70:44:f5:c5:2c:ed:05:6a:92:e3:64:32:48:56:60:f2:87:46
AuthorityKeyId: 20:98:fb:a1:f9:f3:06:85:f2:97:36:22:b4:80:f6:f5:a8:56:8a:30

Fingerprint (sha1): fb:88:90:bb:63:b0:c0:c5:1a:2a:63:da:f2:33:c9:fe:45:08:4f:0c
Fingerprint (sha256): 01:56:15:b5:79:7f:0f:16:ef:fe:e1:43:03:c9:2f:02:50:a2:38:18:f4:66:3b:ad:a5:40:4d:54:de:5c:38:5d

Issuing Certificate URL: http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl

Check the revocation status for certificate *.aspenuniversity.idm.oclc.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.aspenuniversity.idm.oclc.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.aspenuniversity.idm.oclc.org
aspenuniversity.idm.oclc.org

Other certificates including the domain name oclc.org

(limited to 100 certificates)
*.cfra-msa.idm.oclc.org
*.nwcc.idm.oclc.org
*.southseattle.idm.oclc.org
*.iuhu.idm.oclc.org
*.liuc.idm.oclc.org
*.cfra-msa.idm.oclc.org
deweyess.oclc.org
*.greatlibrary.idm.oclc.org
*.apll.idm.oclc.org
*.muhlenberg.idm.oclc.org
*.abington.idm.oclc.org
*.nccu.idm.oclc.org
secure06.stage.lithium.com
*.trevecca.idm.oclc.org
*.twu.idm.oclc.org
*.udlap.idm.oclc.org
*.aic.idm.oclc.org
*.weston.idm.oclc.org
*.cide.idm.oclc.org
*.bchs.idm.oclc.org
*.neomed.idm.oclc.org
*.uiwtx.idm.oclc.org
*.bpcc.idm.oclc.org
*.dartmouth.idm.oclc.org
*.tjportal.idm.oclc.org
*.wcc.idm.oclc.org
*.limcollege.idm.oclc.org
OWA.OCLC.ORG
*.victimresearch.idm.oclc.org
*.greenville.idm.oclc.org
*.dsc.idm.oclc.org
*.fmarion.idm.oclc.org
*.ubu-es.idm.oclc.org
exeter.idm.oclc.org
*.springerpub.idm.oclc.org
*.sanlib.idm.oclc.org
*.tjc.idm.oclc.org
*.zhejianglibr.idm.oclc.org
*.zulib.idm.oclc.org
*.burmanu.idm.oclc.org
*.ccl.idm.oclc.org
*.chifedkc.idm.oclc.org
workday.oclc.org
*.nscad.idm.oclc.org
*.confederation.idm.oclc.org
*.yccc.idm.oclc.org
*.aspenuniversity.idm.oclc.org
*.nu.idm.oclc.org
*.ala.idm.oclc.org
*.mmc.idm.oclc.org
*.akkon-onlinelibrary.idm.oclc.org
*.mclarenmacomb.idm.oclc.org
ftp-bibliotheca.de.oclc.org
*.jjhs.idm.oclc.org
*.gold.idm.oclc.org
*.qvcc.idm.oclc.org
*.omahalibrary.idm.oclc.org
*.nishogakusha-u.idm.oclc.org
*.usu29.idm.oclc.org
*.bakeru.idm.oclc.org
*.cdkc.idm.oclc.org
*.southeast.idm.oclc.org
*.lourdes.idm.oclc.org
*.mvcc.idm.oclc.org
*.fid-avl.idm.oclc.org
*.wcsu.idm.oclc.org
*.hchs.idm.oclc.org
*.aus.idm.oclc.org
*.kuyper.idm.oclc.org
*.testemea.idm.oclc.org
*.uea.idm.oclc.org
*.nnu.idm.oclc.org
*.sanfrancisco.idm.oclc.org
*.szrof.idm.oclc.org
*.fls.idm.oclc.org
*.sri.idm.oclc.org
*.sierranev.idm.oclc.org
*.ozarks.idm.oclc.org
deweyess.oclc.org
*.hodges.idm.oclc.org
*.ncat.idm.oclc.org
*.antioch.idm.oclc.org
*.trevecca.idm.oclc.org
*.wvclibrary.idm.oclc.org
Cmsauthor-ext.oclc.org
*.bucm.idm.oclc.org
*.drexel.idm.oclc.org
*.hshs.idm.oclc.org
*.arlis.idm.oclc.org
*.aaas.idm.oclc.org
*.esf.idm.oclc.org
*.uhsp.idm.oclc.org
*.essec.idm.oclc.org
*.scclosrios.idm.oclc.org
*.salusdental.idm.oclc.org
*.stmarys.idm.oclc.org
*.kl.idm.oclc.org
*.barker.idm.oclc.org
lbs-avans.oclc.org
*.nutn.idm.oclc.org

Certificate

The complete raw certificate details for *.aspenuniversity.idm.oclc.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGwjCCBSqgAwIBAgIQYwolvD+gYkyACC8pzDr4XzANBgkqhkiG9w0BAQsFADBK
MQswCQYDVQQGEwJVUzETMBEGA1UECgwKT0NMQywgSW5jLjEmMCQGA1UEAwwdT0NM
QyBUTFMgSXNzdWluZyBSU0EgU3ViQ0EgUjEwHhcNMjMwNzA3MTUyMTQwWhcNMjQw
NzA2MTUyMTQwWjApMScwJQYDVQQDDB4qLmFzcGVudW5pdmVyc2l0eS5pZG0ub2Ns
Yy5vcmcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHqk+jE3AtjuQw
8SK4rf1bxp9A2lfGgSxyY8jMAExgiBLDa6t1m887d94fCmF5plyuIQgfSuQIm5cJ
inHedze2Em9BbKT8WGYZAlpiYHGOlwaZPWGbxXugSxg2DSgZawORUyobq7INsukC
ekNWFdStMGfAlgTZ7nHKpbh1f3ybz2xa9UM6bcalK+X/tBMsAUBiroGaRbWjgvFR
Pdmugby5VVnQtYqS2eP/vbDpKddh0wXIHJ8xTQCvy5RxIwvxrI5ZgVfOFO/G9MD9
G1lSDsvZxjBn+2UQn/naFgGY9JnkPrBoyABwLsZzxZzRfBvtqaVqog0P8i2LwiqH
6HPUrTXtAgMBAAGjggNDMIIDPzAMBgNVHRMBAf8EAjAAMB8GA1UdIwQYMBaAFCCY
+6H58waF8pc2IrSA9vWoVoowMGcGCCsGAQUFBwEBBFswWTA1BggrBgEFBQcwAoYp
aHR0cDovL2NlcnQuc3NsLmNvbS9PQ0xDLVRMUy1JLVJTQS1SMS5jZXIwIAYIKwYB
BQUHMAGGFGh0dHA6Ly9vY3Nwcy5zc2wuY29tMEcGA1UdEQRAMD6CHiouYXNwZW51
bml2ZXJzaXR5LmlkbS5vY2xjLm9yZ4IcYXNwZW51bml2ZXJzaXR5LmlkbS5vY2xj
Lm9yZzBRBgNVHSAESjBIMAgGBmeBDAECATA8BgwrBgEEAYKpMAEDAQEwLDAqBggr
BgEFBQcCARYeaHR0cHM6Ly93d3cuc3NsLmNvbS9yZXBvc2l0b3J5MB0GA1UdJQQW
MBQGCCsGAQUFBwMCBggrBgEFBQcDATA6BgNVHR8EMzAxMC+gLaArhilodHRwOi8v
Y3Jscy5zc2wuY29tL09DTEMtVExTLUktUlNBLVIxLmNybDAdBgNVHQ4EFgQUFeZw
RPXFLO0FapLjZDJIVmDyh0YwDgYDVR0PAQH/BAQDAgWgMIIBfQYKKwYBBAHWeQIE
AgSCAW0EggFpAWcAdQA/F0tP1yJHWJQdZRyEvg0S7ZA3fx+FauvBvyiF7PhkbgAA
AYkw+v5iAAAEAwBGMEQCIH89OEXlH2VKYOgo+x6sFY2jLIGQ/JfqVuIi4tGkijfR
AiBqMfW2oMfynqzBzMY2cCOjIcDw7Ulc8AbcCUsiXixnDQB2AFWB1MIWkDYBSuoL
m1c8U/DA5Dh4cCUIFy+jqh0HE9MMAAABiTD6/m8AAAQDAEcwRQIgZiUk++VSTUtN
cOigdKhJMe3Pw8LmigkH4+nDuAUB94QCIQCfQ0uTujENNaN0fo2nrw4DE+5MPlOO
h+8EmxrCS0iS/gB2AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAAB
iTD6/o0AAAQDAEcwRQIhAMeFoHxClFfsNSz+UAt7zw6rM/hFOvcqT3uRoYCCZSoV
AiBfk1Kwyf6/gd9MJS8f/vaXsmqGxtVu4eVGD1Pe1OiiATANBgkqhkiG9w0BAQsF
AAOCAYEAIb5h7ZRMzqcfbR8C5N29qlGir/8vgqlDoyaVPpyTjorCvJ0trFqi3F+u
USXdXwnS9pl0/jP0TOoVq88W5dL+wCSTCAhLeMw0+O1mXLX1SII+0tKmonRESolW
oZ2VZL/yyjxmKDsPmMBdGAr1NW4rK4iHdLraGQLoC9v+tarC11ur8s3p6HHl1KHt
GAFUx0OPYH7rcE2VQdHSmZQ9JUPGA+IH/1J1GIuJh6Ymb0yd1ijvRgYPcwDy5BAU
u/TLf86045EAelFRwSyIvJs7pytZRbnEEOjIuZLZb1fUYH2pG3Xvg8Lts2BqzhB2
m4PzJL/Q2yUxpGysK9cJXjAcApUqvfh/Ju9q5WqeDBd8T1Mcyc3X0wdT0R0U3PGs
krluqY+UV4/V98bdQP1PbUZTvIc8wKflxDKxqsvBzJV48f7Fpp3F7ogZ6EUUBFVh
aIRRDTUK2DGPKz9jfHDk65zgzSJorjTrTF+8t7vmDrSgdHZGcyyC4xxx2ZOSK6md
vh8hNW/t
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6pPoxNwLY7kMPEiuK39
W8afQNpXxoEscmPIzABMYIgSw2urdZvPO3feHwpheaZcriEIH0rkCJuXCYpx3nc3
thJvQWyk/FhmGQJaYmBxjpcGmT1hm8V7oEsYNg0oGWsDkVMqG6uyDbLpAnpDVhXU
rTBnwJYE2e5xyqW4dX98m89sWvVDOm3GpSvl/7QTLAFAYq6BmkW1o4LxUT3ZroG8
uVVZ0LWKktnj/72w6SnXYdMFyByfMU0Ar8uUcSML8ayOWYFXzhTvxvTA/RtZUg7L
2cYwZ/tlEJ/52hYBmPSZ5D6waMgAcC7Gc8Wc0Xwb7amlaqIND/Iti8Iqh+hz1K01
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 131646259915033355440239984083612661855
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'OCLC TLS Issuing RSA SubCA R1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-07 15:21:40 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-06 15:21:40 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.aspenuniversity.idm.oclc.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25205406212933678989240316130542116115924605146569156520993365150035003771108694581022679549604483763185211692987524989777604491371072091715531043822090801777300343691300294866101303268011906932918747666204225170109743928634535062034376664219681492921678967211904992072661691556968237119130544021776138548884174346253164927705803442390379276494599462190741964951033095035344250321640269050307838791796000215991212847905392931521660914844247005140179138079195810118365650862022905251584066328115194151046151354380352120874350227605889322233170571879341270060886425465927207147928593191438661268642980626498597304481261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 2098fba1f9f30685f2973622b480f6f5a8568a30
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/OCLC-TLS-I-RSA-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.aspenuniversity.idm.oclc.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'aspenuniversity.idm.oclc.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/OCLC-TLS-I-RSA-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							15e67044f5c52ced056a92e36432485660f28746
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (3072 bits)
		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