connectplus.dhl.com

- Deutsche Post AG -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 27:fa:22:cf:4f:f4:ed:9f:db:65:a0:7e was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Deutsche Post AG

Organization: Deutsche Post AG
State / Province: Nordrhein-Westfalen
Locality: Bonn
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 27:fa:22:cf:4f:f4:ed:9f:db:65:a0:7e
Serial Number (int): 12372311222634046893907615870
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 1c:95:90:ab:0f:97:fc:98:ad:95:ae:01:22:a9:8d:31:b0:aa:ec:59
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 0a:00:1e:a9:97:41:04:cc:33:ea:80:fb:75:2a:6e:fe:5f:a9:f0:f6
Fingerprint (sha256): 02:06:c5:f8:30:db:d9:58:99:86:36:b5:98:b8:e2:fe:b3:14:de:de:64:8c:6e:b5:b9:80:d3:87:fc:f0:0b:97

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate connectplus.dhl.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for connectplus.dhl.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

connectplus.dhl.com

Other certificates including the domain name dhl.com

(limited to 100 certificates)
dsctmspptr4.dhl.com
san-10-s10.tlsprovisioning.exacttarget.com
ideahub.dhl.com
CalidusTMS.dhl.com
direct.dhl.com
fcp-backend.dhl.com
tm300i.dhl.com
gaitcitrix.dhl.com
tradeteamdeg.dhl.com
api.dhl.com
jdadlxp1.dhl.com
dhllink-apimgnt-qa.dhl.com
gbsdoxis.dhl.com
cz-wgp-syr.dhl.com
payments-mybill-uat.dhl.com
agente.dhl.com
iis.ecm.stars.dhl.com
docs.dhl.com
esolutions.dhl.com
confluence-test.dhl.com
parcelshop-ref.dhl.com
prgdclyaee01.dhl.com
dsc6stars-aca.dhl.com
flysmart.dhl.com
lots.dhl.com
dgf-elp.dhl.com
dsctmsr2.dhl.com
beta.dhl.com
netconnect-bluedart.dhl.com
packet.deutschepost.com
D5UsO9AHbG.dhl.com
test-api.freight-logistics.dhl.com
dcscbj.dhl.com
www.smartsensor-temperature-test.dhl.com
pp-meinservice-grax.dhl.com
csg.crest.dpwn.com
dci2.dhl.com
comuat.dhl.com
SPDP-ref.dhl.com
mits-ia4-ext.dhl.com
npts3test.dhl.com
www.dhltoolbox.se
V-DA-002.dhl.com
dhlexpress-myjob-api-test.dhl.com
external.customerreports.dhl.com
keyserver-lab.dhl.com
dcontest.dhl.com
imgit.dhl.com
test.gbs.dhl.com
*.datalake-dev.dhl.com
cyclone2-eu-prod.dhl.com
dpst.dhl.com
dci-dev.dhl.com
m.dhl.com
aux.dhl.com
webmail.dhl.com
dscotmllp05test.dhl.com
gatwickdirect.dhl.com
mailing.dhl.com
cvpn.dhl.com
reqit-dev.dhl.com
esecure-int.dhl.com
ryr.dhl.com
logistics.dhl
QA-tmsweb.dhl.com
apigbs.dhl.com
aviationmailsync.dhl.com
keurignj-6rivers-prod.dhl.com
czchoap0214.prg-dc.dhl.com
ADMSSCICERTWebService-temp.dhl.com
prgdclywse14.dhl.com
globalmaileurope.dhl.com
connectplus.dhl.com
kuldclyaee21.dhl.com
www.dhl.com
globalecom.dhl.com
cvpntest.dhl.com
back-eut.dhl.com
us-dsc-gvp-ac01.dhl.com
gsconnectcsm.dhl.com
isupply.dhl.com
irecprjb.dhl.com
dhlexpresspt.com
wsbexpressuat.dhl.com
amrta02app.dhl.com
servicenow-dev2.dhl.com
www.packstation.de
direct.dhl.com
fidgfcustomsdirectaccessprod.dhl.com
spl-test.dhl.com
onlineshipping.dhl.com
goarcbj1.dhl.com
czcholsint1661.prg-dc.dhl.com
portalemydhlplus.dhl.com
packaging.dhl.com
myaccount.dhl.com
mobilefleet-test.dhl.com
jupiter.dhl.com
mirror-bat.dhlec.dhl.com
cdex.dhl.com

Certificate

The complete raw certificate details for connectplus.dhl.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWjCCBEKgAwIBAgIMJ/oiz0/07Z/bZaB+MA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTgwODEzMTQxNjA4WhcNMTkwODE0MTQxNjA4WjBzMQswCQYDVQQGEwJE
RTEcMBoGA1UECBMTTm9yZHJoZWluLVdlc3RmYWxlbjENMAsGA1UEBxMEQm9ubjEZ
MBcGA1UEChMQRGV1dHNjaGUgUG9zdCBBRzEcMBoGA1UEAxMTY29ubmVjdHBsdXMu
ZGhsLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/PqBicW4mJ
mA37V6YYQQq6cH5hbXFIzJqFdcRLxg+7l8mfjbNLeh/O7KRqCkdEafZjZR2A0SaU
eZZXdiAlJ1OLxd3LMXoXX/LIHpkkWJ8OuqcRe+Feipyo2K9t+LePZWA6m3U8F4WU
RfR/X0ezOSNEoYS7TR+F8S3X5LvTrK0vrouwp5OSpm5KImUPoCv+C0yRMFDEZPL5
YT9Ry1hn2c983GC1Ua7Rg2EqQOTLP5XiBE2mnTaXEBkZdcFyRoovPPDfVOyU0u6X
lgTsndIA+Mrn6GuLLbsDs6PzW2TJ4Arcn5WxozyY8MeRDcDXnH8XJ4Pn9jplDFiM
lO/3dDHnWKcCAwEAAaOCAfkwggH1MA4GA1UdDwEB/wQEAwIFoDCBoAYIKwYBBQUH
AQEEgZMwgZAwTQYIKwYBBQUHMAKGQWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5j
b20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsc2hhMmcycjEuY3J0MD8GCCsGAQUF
BzABhjNodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRpb252
YWxzaGEyZzIwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYm
aHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIC
MAkGA1UdEwQCMAAwSQYDVR0fBEIwQDA+oDygOoY4aHR0cDovL2NybC5nbG9iYWxz
aWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMi5jcmwwHgYDVR0RBBcw
FYITY29ubmVjdHBsdXMuZGhsLmNvbTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYB
BQUHAwIwHQYDVR0OBBYEFByVkKsPl/yYrZWuASKpjTGwquxZMB8GA1UdIwQYMBaA
FJbeYfG9HBYpUxzAzH07gwBA5hp8MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqG
SIb3DQEBCwUAA4IBAQB+brVysETTsS9AgrZNKYDNWIq04WJm4U1etFSF+Srbza9F
VpWnDnj5ZPXMbjMziiqqeNx69bNd2jDX15B/MEGTIJX3KwUEp613Igev2l5+7rnH
0y40sK2cRxFCgGCU8Y1qBOl9jpKIDdcC5ks6Uy/RHrHuP5EZjqk6O4nyyPcycKr/
bOboWA1i0mqeue6cYjCekTwSrSWJBuZ5MiUff6+qLHEjrVY5Jf5OmqNnXHlYBSa3
tXsXZhEVKjtaXTq6RpQx4+wmQG06OrFcYeVEBbb4NDv1cobjK3h2cET4CVdAiEjx
LqlHUaIeVzRSIjTqiLdnMOV4MYhVU5VYgkSs98nW
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8+oGJxbiYmYDftXphhB
CrpwfmFtcUjMmoV1xEvGD7uXyZ+Ns0t6H87spGoKR0Rp9mNlHYDRJpR5lld2ICUn
U4vF3csxehdf8sgemSRYnw66pxF74V6KnKjYr234t49lYDqbdTwXhZRF9H9fR7M5
I0ShhLtNH4XxLdfku9OsrS+ui7Cnk5KmbkoiZQ+gK/4LTJEwUMRk8vlhP1HLWGfZ
z3zcYLVRrtGDYSpA5Ms/leIETaadNpcQGRl1wXJGii888N9U7JTS7peWBOyd0gD4
yufoa4stuwOzo/NbZMngCtyflbGjPJjwx5ENwNecfxcng+f2OmUMWIyU7/d0MedY
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12372311222634046893907615870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-13 14:16:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-14 14:16:08 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bonn'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Deutsche Post AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'connectplus.dhl.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22194102667583506286851625724762583462242097072466258303042410774584215480852529936749670406374490277148007054454831131745018396512367003801159572534864561577975799865898822607496430715954813711120908360299076636980486917145432351469233549784194347923586518038427637428596408433082449195101102873043856184012443531596266607682437978844359950734961683036469765730025717614463627129455678026546682940583655414651070785054885447422836409811803070768298414105154180271400265195011914861826500660429622483942258687470084508007369012739257056430214147466426018266669211868570381055319862419819706369249085084049634285279399
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'connectplus.dhl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c9590ab0f97fc98ad95ae0122a98d31b0aaec59
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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