da21.xpress.com.mx
Issued by AlphaSSL CA - G2
About this certificate
This digital certificate with serial number 11:21:4d:a7:48:da:38:a9:a4:da:2a:4a:13:6a:40:7e:3c:66 was issued on by AlphaSSL.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=da21.xpress.com.mx,OU=Domain Control Validated,C=US
AlphaSSL
Organization:
AlphaSSL
This certificate has expire since
Certificate Details
Serial Number (hex): 11:21:4d:a7:48:da:38:a9:a4:da:2a:4a:13:6a:40:7e:3c:66Serial Number (int): 1492241398095188743263861158308741396708454
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: 08:c4:ba:6f:f9:27:7b:3f:44:9e:36:59:78:aa:32:8e:8e:17:8d:c3
AuthorityKeyId: 14:ea:19:55:f0:0e:0d:32:c6:1f:74:33:b7:8e:66:1a:4c:12:31:1e
Fingerprint (sha1): b8:48:9f:0b:2d:ff:fd:10:bb:90:0f:38:a0:c4:04:7f:b7:3a:be:48
Fingerprint (sha256): 01:5b:ba:36:37:a4:0c:cc:57:4b:38:f9:84:92:8e:5e:4b:6a:86:44:76:1f:4c:e3:80:89:1c:b1:eb:b0:a3:9a
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphag2.crt
Revocation information
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphag2.crlCheck the revocation status for certificate da21.xpress.com.mx
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for da21.xpress.com.mx
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
da21.xpress.com.mx
Other certificates including the domain name xpress.com.mx
(limited to 100 certificates)
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xlcp18001.xpress.com.mx
da21.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xtcp17001.xpress.com.mx
sni134338.cloudflaressl.com
da17.xpress.com.mx
da32.xpress.com.mx
xpcp19011.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xpcp16009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17001.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17002.xpress.com.mx
cl01w23.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
cl02w06.xpress.com.mx
xsda19014.xpress.com.mx
incapsula.com
xsda19012.xpress.com.mx
sni134338.cloudflaressl.com
cl01w08.xpress.com.mx
sni134338.cloudflaressl.com
xsda19012.xpress.com.mx
xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
xpcp19015.xpress.com.mx
sni134338.cloudflaressl.com
cl01w28.xpress.com.mx
da19.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
da34.xpress.com.mx
incapsula.com
xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp19009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xmcp16002.xpress.com.mx
cl01w01.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
*.xpress.com.mx
sni134338.cloudflaressl.com
vega.xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
da30.xpress.com.mx
cl02w02.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xlcp16002.xpress.com.mx
incapsula.com
xpress.com.mx
win64.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
xmcp17001.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
xlcp18001.xpress.com.mx
da21.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xtcp17001.xpress.com.mx
sni134338.cloudflaressl.com
da17.xpress.com.mx
da32.xpress.com.mx
xpcp19011.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xpcp16009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17001.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp17002.xpress.com.mx
cl01w23.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
cl02w06.xpress.com.mx
xsda19014.xpress.com.mx
incapsula.com
xsda19012.xpress.com.mx
sni134338.cloudflaressl.com
cl01w08.xpress.com.mx
sni134338.cloudflaressl.com
xsda19012.xpress.com.mx
xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
xpcp19015.xpress.com.mx
sni134338.cloudflaressl.com
cl01w28.xpress.com.mx
da19.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni.cloudflaressl.com
xpcp18012.xpress.com.mx
incapsula.com
da34.xpress.com.mx
incapsula.com
xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xpcp19009.xpress.com.mx
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
xmcp16002.xpress.com.mx
cl01w01.xpress.com.mx
incapsula.com
incapsula.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
incapsula.com
sni134338.cloudflaressl.com
*.xpress.com.mx
sni134338.cloudflaressl.com
vega.xpress.com.mx
xpcp16016.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
da30.xpress.com.mx
cl02w02.xpress.com.mx
sni134338.cloudflaressl.com
sni134338.cloudflaressl.com
incapsula.com
xlcp16002.xpress.com.mx
incapsula.com
xpress.com.mx
win64.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
xmcp17001.xpress.com.mx
sni134338.cloudflaressl.com
incapsula.com
Certificate
The complete raw certificate details for da21.xpress.com.mx in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEfzCCA2egAwIBAgISESFNp0jaOKmk2ipKE2pAfjxmMA0GCSqGSIb3DQEBBQUA MC4xETAPBgNVBAoTCEFscGhhU1NMMRkwFwYDVQQDExBBbHBoYVNTTCBDQSAtIEcy MB4XDTEyMTExNDAxNDI0NFoXDTEzMTExNTAxNDI0NFowTTELMAkGA1UEBhMCVVMx ITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRlZDEbMBkGA1UEAxMSZGEy MS54cHJlc3MuY29tLm14MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA szxIE2gLeV6GN8C3Oad00rEciOl5E5F4kXtfo6JRK/lMszl+tzXj5UeiuIAKm8zB 2JOkbi+/+3BEE1+lxdpxjHbKkkGuUHVG8LRdc5Jbpw5m2xWltgywaq6RP43TKi0J lhItPbFjjPrV7o0Z9dZsWSqrXhMjHaBIFGo6i7GQaEIVU0PgZZyy50BB+M2RLvuK M9dgNMRMKIAWFH4vTcvFDh91bz8aD49xul8VWmY14nDBJvC7eYR4gw6Z9TBXOqz7 muq5n2YNy88HccDGjySUl85YPNX7lCksDOGUK7kxdcY0ssuWVLnw7PxPy9Vmdq/l 9Iv+CtwEVEykqhT1fbcAKQIDAQABo4IBdjCCAXIwDgYDVR0PAQH/BAQDAgWgME0G A1UdIARGMEQwQgYKKwYBBAGgMgEKCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3 dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAdBgNVHREEFjAUghJkYTIxLnhw cmVzcy5jb20ubXgwCQYDVR0TBAIwADAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB BQUHAwIwOgYDVR0fBDMwMTAvoC2gK4YpaHR0cDovL2NybDIuYWxwaGFzc2wuY29t L2dzL2dzYWxwaGFnMi5jcmwwTAYIKwYBBQUHAQEEQDA+MDwGCCsGAQUFBzAChjBo dHRwOi8vc2VjdXJlMi5hbHBoYXNzbC5jb20vY2FjZXJ0L2dzYWxwaGFnMi5jcnQw HQYDVR0OBBYEFAjEum/5J3s/RJ42WXiqMo6OF43DMB8GA1UdIwQYMBaAFBTqGVXw Dg0yxh90M7eOZhpMEjEeMA0GCSqGSIb3DQEBBQUAA4IBAQCz5s7famh13vhuWeA/ lYeXdKiNpD6t1AI+mhesZ2etuUKFzlzgkFiX2pkfAbSFcuKoDgynThIP+G6tArrM +8khRsFdAax+R6/dyY/SokQ6gwjaWP5AeGD0kIS8FwdkKBL8Cr/oB2W11zrNdqMy jWKM7Pc2UEgaE5vaBDljco6nLMS32Vp1DP0PDFP5KTnbf6kwmnU4QmzjDk8UcuYE ksIg3+UghEbXvDIjCg4YNmDbtesj/2vkXMflsVb/V2A4YWpcWbUUzUWFcbfNKdyE CUTSZA/O2JvcR9TitQYfCdAagSyKxBcti4N3xmgXTkC5bP5IloI/PXVmYO11aWTa pI4h -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszxIE2gLeV6GN8C3Oad0 0rEciOl5E5F4kXtfo6JRK/lMszl+tzXj5UeiuIAKm8zB2JOkbi+/+3BEE1+lxdpx jHbKkkGuUHVG8LRdc5Jbpw5m2xWltgywaq6RP43TKi0JlhItPbFjjPrV7o0Z9dZs WSqrXhMjHaBIFGo6i7GQaEIVU0PgZZyy50BB+M2RLvuKM9dgNMRMKIAWFH4vTcvF Dh91bz8aD49xul8VWmY14nDBJvC7eYR4gw6Z9TBXOqz7muq5n2YNy88HccDGjySU l85YPNX7lCksDOGUK7kxdcY0ssuWVLnw7PxPy9Vmdq/l9Iv+CtwEVEykqhT1fbcA KQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1492241398095188743263861158308741396708454 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-14 01:42:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-11-15 01:42:44 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'da21.xpress.com.mx' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22626382527216441175355613895928426925223671451146430791242758896852512737797546697135334655446215561008262374544893751463908846204296493495986779750041480104156237573505172162032804394619615367375941791964682102427731434982705199293258544528806033171942255480068858304962198148093470154200002745669004558827503117908334207918860408805960479273623521553131886968811953469387676202111259580121147349645724215089821253788925150822717868012826687193533403734189033381823507462247269799992382735581884756498936367266500923377712177200867788296671394509925083022009310633699105612892406895839720491287829566482949739053097 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (70 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'da21.xpress.com.mx' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphag2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphag2.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 08c4ba6ff9277b3f449e365978aa328e8e178dc3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 14ea1955f00e0d32c61f7433b78e661a4c12311e . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 00b3e6cedf6a6875def86e59e03f95879774a88da43eadd4023e9a17ac6767adb94285ce5ce0905897da991f01b48572e2a80e0ca74e120ff86ead02baccfbc92146c15d01ac7e47afddc98fd2a2443a8308da58fe407860f49084bc1707642812fc0abfe80765b5d73acd76a3328d628cecf73650481a139bda043963728ea72cc4b7d95a750cfd0f0c53f92939db7fa9309a7538426ce30e4f1472e60492c220dfe5208446d7bc32230a0e183660dbb5eb23ff6be45cc7e5b156ff576038616a5c59b514cd458571b7cd29dc840944d2640fced89bdc47d4e2b5061f09d01a812c8ac4172d8b8377c668174e40b96cfe4896823f3d756660ed756964daa48e21