bcfw.balliol.ox.ac.uk
- University of Oxford -
Issued by AffirmTrust Certificate Authority - OV1
About this certificate
This digital certificate with serial number f3:bc:69:89:30:f4:23:f9:00:00:00:00:58:08:a3:14 was issued on by AffirmTrust.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
University of Oxford
Organization:
University of Oxford
State / Province:
Oxfordshire
Locality: Oxford
Country: GB
Locality: Oxford
Country: GB
AffirmTrust
Organization:
AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Organization unit: See www.affirmtrust.com/repository
Country:
CA
This certificate has expire since
Certificate Details
Serial Number (hex): f3:bc:69:89:30:f4:23:f9:00:00:00:00:58:08:a3:14Serial Number (int): 323980695307556180836874321345078928148
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 4a:6a:35:84:21:ad:e9:34:6c:91:90:fb:78:c2:45:70:ab:37:57:72
AuthorityKeyId: fe:60:c3:0d:a4:a2:9d:21:4f:7a:78:4c:62:c5:db:14:fc:39:78:c4
Fingerprint (sha1): f8:6f:c2:c8:2a:7d:af:94:f1:08:32:18:f1:94:5d:3f:ae:8f:15:5f
Fingerprint (sha256): 01:c7:bd:36:6c:d1:bd:8c:7c:cb:d7:60:2c:e4:f1:65:5a:d9:19:43:ab:50:50:b4:58:02:9e:e7:00:39:32:b7
Issuing Certificate URL: http://aia.affirmtrust.com/aftov1ca.crt
Revocation information
OCSP Server: http://ocsp.affirmtrust.comCRL Distribution Point: http://crl.affirmtrust.com/crl/aftov1ca.crl
Check the revocation status for certificate bcfw.balliol.ox.ac.uk
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for bcfw.balliol.ox.ac.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
bcfw.balliol.ox.ac.uk
Other certificates including the domain name ox.ac.uk
(limited to 100 certificates)
idp.iamtest.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk
sn.sdc.ox.ac.uk
toothless.glam.ox.ac.uk
asmeals.chch.ox.ac.uk
sbs-libprox.sbs.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
drupal-pilot-rai.it.ox.ac.uk
seldenmap.bodleian.ox.ac.uk
bits.uas.ox.ac.uk
web.crested-test.haiku.fry-it.com
www.ict.ox.ac.uk
webcms-app-td.nsms.ox.ac.uk
community.bsg.ox.ac.uk
community.bsg.ox.ac.uk
ball.gtc.ox.ac.uk
autodiscover.nexus.ox.ac.uk
mobile.chorus.ox.ac.uk
golab.bsg.ox.ac.uk
tabul.ndorms.ox.ac.uk
print.new.ox.ac.uk
gbrowse.molbiol.ox.ac.uk
webmail.isis.ox.ac.uk
*.web.ox.ac.uk
isupplier.uas.ox.ac.uk
network.rhodeshouse.ox.ac.uk
castrovalva.it.ox.ac.uk
ssl1.aluminati.net
dpuk.fmrib.ox.ac.uk
grasp-bestpractice.octru.ox.ac.uk
ouclf.law.ox.ac.uk
www2.oxford-man.ox.ac.uk
exprodo.fmrib.ox.ac.uk
trainforpedhiv.conted.ox.ac.uk
zoo-godfray.zoo.ox.ac.uk
print.lmh.ox.ac.uk
zoo-kfoster.zoo.ox.ac.uk
openclinica2.ocdem.ox.ac.uk
e2.shared.global.fastly.net
hrisprd.uas.ox.ac.uk
zoo-oxlel.zoo.ox.ac.uk
status.museums.ox.ac.uk
minerva.maths.ox.ac.uk
lists.maths.ox.ac.uk
e2.shared.global.fastly.net
incapsula.com
www.alumniweb.ox.ac.uk
epos.merton.ox.ac.uk
dars-project-training.bsp.ox.ac.uk
ibme-linuxdev.eng.ox.ac.uk
talks-dev.oucs.ox.ac.uk
rramp-test.octru.ox.ac.uk
bits.uas.ox.ac.uk
zoo-nercdtp.zoo.ox.ac.uk
fe1.chorus.ox.ac.uk
www.ml.ox.ac.uk
mimas.sgc.ox.ac.uk
webcms-1.nsms.ox.ac.uk
admn-sql03.connect.ox.ac.uk
cposxfs01.physics.ox.ac.uk
nsmsweb44.nsms.ox.ac.uk
printing.wadham.ox.ac.uk
app-vadalog.cs.ox.ac.uk
www.conted.ox.ac.uk
rramp-test.octru.ox.ac.uk
www.occt.ox.ac.uk
mysite.nexus.ox.ac.uk
www.bodleian.ox.ac.uk
spivey.oriel.ox.ac.uk
office-nextcloud-mmsid.ouce.ox.ac.uk
dars-website-test-one.bsp.ox.ac.uk
case-sql01.connect.ox.ac.uk
ridd.octru.ox.ac.uk
gower.octru.ox.ac.uk
sjc-kx.sjc.ox.ac.uk
malmecc.eu
webmail.earth.ox.ac.uk
dse.oucs.ox.ac.uk
sansonegroup.eng.ox.ac.uk
files.new.ox.ac.uk
analytics.spc.ox.ac.uk
medievalpaternosterwheels.bodleian.ox.ac.uk
tolkien.bodleian.ox.ac.uk
munki.orchard.ox.ac.uk
www.greenlightcreative.co.uk
staging.gatewayticketing.hosting
nsmsweb44.nsms.ox.ac.uk
www.mpls.ox.ac.uk
shapestacks.robots.ox.ac.uk
incapsula.com
webmail.earth.ox.ac.uk
owa.nexus.ox.ac.uk
live2.podcasts.ox.ac.uk
portal.stats.ox.ac.uk
bcfw.balliol.ox.ac.uk
www.kellogg.ox.ac.uk
drupaldev.conted.ox.ac.uk
worc-argon.worc.ox.ac.uk
members.hmc.ox.ac.uk
muninn.pmb.ox.ac.uk
mail.physiol.ox.ac.uk
Certificate
The complete raw certificate details for bcfw.balliol.ox.ac.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIRAPO8aYkw9CP5AAAAAFgIoxQwDQYJKoZIhvcNAQELBQAw gYIxCzAJBgNVBAYTAkNBMRQwEgYDVQQKEwtBZmZpcm1UcnVzdDErMCkGA1UECxMi U2VlIHd3dy5hZmZpcm10cnVzdC5jb20vcmVwb3NpdG9yeTEwMC4GA1UEAxMnQWZm aXJtVHJ1c3QgQ2VydGlmaWNhdGUgQXV0aG9yaXR5IC0gT1YxMB4XDTE4MTAyOTE1 MzYxMFoXDTIwMTEyNDE2MDYwN1owczELMAkGA1UEBhMCR0IxFDASBgNVBAgTC094 Zm9yZHNoaXJlMQ8wDQYDVQQHEwZPeGZvcmQxHTAbBgNVBAoTFFVuaXZlcnNpdHkg b2YgT3hmb3JkMR4wHAYDVQQDExViY2Z3LmJhbGxpb2wub3guYWMudWswggEiMA0G CSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3uxCYTL31luCmlozZsF/xPgmkaezJ fi3fZDyKh3FvplXZSusdnacFWFWJZPpTApP4fqPqemT6qq/xIHtLr9D57r9UdU5D W3CSqPGYfOLKVTzJSTSpdrCyBHjYyYTQRGvlWHMXqIcI/2xVXcL91djvZ7cTrbJ/ Gt0AuEAD9PggTT6M5zGuyJTseNlnmxUHlGv+gDxXT3m08LoCMPzW2ruJa6vHYpKP At4gXAcyxOs+PVO1Mfzd5cgfR+kb+fSZEAR3ywUiSHVdCE+RyEN3tQD5mhAPGbap dSG1PotpIDbjMMTPJWN70gQQb+KCgHCu56WqbQ/jezTMDcthafm9XDMPAgMBAAGj ggG6MIIBtjATBgorBgEEAdZ5AgQDAQH/BAIFADAgBgNVHREEGTAXghViY2Z3LmJh bGxpb2wub3guYWMudWswDgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAJBgNVHRMEAjAAMGwGCCsGAQUFBwEBBGAwXjAnBggrBgEF BQcwAYYbaHR0cDovL29jc3AuYWZmaXJtdHJ1c3QuY29tMDMGCCsGAQUFBzAChido dHRwOi8vYWlhLmFmZmlybXRydXN0LmNvbS9hZnRvdjFjYS5jcnQwVwYDVR0gBFAw TjBCBgorBgEEAYKPCQIFMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3LmFmZmly bXRydXN0LmNvbS9yZXBvc2l0b3J5MAgGBmeBDAECAjA8BgNVHR8ENTAzMDGgL6At hitodHRwOi8vY3JsLmFmZmlybXRydXN0LmNvbS9jcmwvYWZ0b3YxY2EuY3JsMB8G A1UdIwQYMBaAFP5gww2kop0hT3p4TGLF2xT8OXjEMB0GA1UdDgQWBBRKajWEIa3p NGyRkPt4wkVwqzdXcjANBgkqhkiG9w0BAQsFAAOCAQEAHTmfyaCQm4Q/5BqeM1Ad fRgZ8976inxVIhTxCmz36bv5Wdd0wcR5wpa+sNvxHZ/OKLV4T1yHHJHhBFxSyf9M 9Nyv9aaOU76dypMlsaM/wYUIlBLyhjp7Wc6uNrXPQiEeaWcXnjHGnlLRU79zNG8b enxQGJfOJ6KlZEj6drAelVgc+ZTxOpbg7TK7KUpgY2kIFHXJutFFwFPDf53748b0 wwO2+9+0u9sKQX0orSXV+49zPUPlIWR9iETheUY3kyX/QSR0Mpob3ijIeIsSX8jn kelwv6XsSJll43oVRn+nn6fN9gaPjsdHuyqht9TdeB9sTrgusD8FOsEjGB0ufZqs hg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7sQmEy99ZbgppaM2bBf 8T4JpGnsyX4t32Q8iodxb6ZV2UrrHZ2nBVhViWT6UwKT+H6j6npk+qqv8SB7S6/Q +e6/VHVOQ1twkqjxmHziylU8yUk0qXawsgR42MmE0ERr5VhzF6iHCP9sVV3C/dXY 72e3E62yfxrdALhAA/T4IE0+jOcxrsiU7HjZZ5sVB5Rr/oA8V095tPC6AjD81tq7 iWurx2KSjwLeIFwHMsTrPj1TtTH83eXIH0fpG/n0mRAEd8sFIkh1XQhPkchDd7UA +ZoQDxm2qXUhtT6LaSA24zDEzyVje9IEEG/igoBwruelqm0P43s0zA3LYWn5vVwz DwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 323980695307556180836874321345078928148 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Certificate Authority - OV1' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-29 15:36:10 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-11-24 16:06:07 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxfordshire' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Oxford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'University of Oxford' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bcfw.balliol.ox.ac.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23193854911480867089898590574943211956200689544422264149243634000401458252730858021820043574937723322408581741085164997437271629578939706800112187153227737481519394165189916553743941209712844300080754645733873550067415905575939324624191617059029922632557457777328819902801115046268033669216276884296822950713913838092054048015544194833871484219761603950376931040919570392799515403794968525914642033578558802578366074611669305940495376976649386997378258660223589974858480438765210741258918744284690009030529858444119064244191443713112571517995256133524260984216814373663450883737831310141745078352441154192438973969167 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bcfw.balliol.ox.ac.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftov1ca.crt' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftov1ca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fe60c30da4a29d214f7a784c62c5db14fc3978c4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 4a6a358421ade9346c9190fb78c24570ab375772 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 001d399fc9a0909b843fe41a9e33501d7d1819f3defa8a7c552214f10a6cf7e9bbf959d774c1c479c296beb0dbf11d9fce28b5784f5c871c91e1045c52c9ff4cf4dcaff5a68e53be9dca9325b1a33fc185089412f2863a7b59ceae36b5cf42211e6967179e31c69e52d153bf73346f1b7a7c501897ce27a2a56448fa76b01e95581cf994f13a96e0ed32bb294a606369081475c9bad145c053c37f9dfbe3c6f4c303b6fbdfb4bbdb0a417d28ad25d5fb8f733d43e521647d8844e17946379325ff412474329a1bde28c8788b125fc8e791e970bfa5ec489965e37a15467fa79fa7cdf6068f8ec747bb2aa1b7d4dd781f6c4eb82eb03f053ac123181d2e7d9aac86