test1.crosscert.com

- CrossCert -

Issued by CrossCert Class 2 Server CA

About this certificate

This digital certificate with serial number 32:55:a3:7a:00:00:42:2a was issued on by CrossCert.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • CAs MUST NOT issue certificates that have authority key IDs that include both the key ID and the issuer's issuer name and serial number (Mozilla Root Store Policy / Section 5.2)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificate cRLDistributionPoints extension must contain the HTTP URL of the CA’s CRL service (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

CrossCert

Organization: CrossCert
Organization unit: AccreditedCA
Organization unit: SSL
Organization unit: 002
Country: KR

CrossCert

Organization: CrossCert
Organization unit: AccreditedCA
Country: KR

This certificate has expire since

Certificate Details

Serial Number (hex): 32:55:a3:7a:00:00:42:2a
Serial Number (int): 3626984819298157098
Serial Number lenght: 62 bits, 8 octets

SubjectKeyId: 35:f3:48:93:f1:98:05:d3:e5:84:b6:13:d0:ae:a0:d9:62:8d:72:e6
AuthorityKeyId: 6e:74:11:ec:10:f5:49:20:fc:59:0f:b8:e0:b0:d8:78:ab:23:94:50

Fingerprint (sha1): 83:f2:2b:5a:bf:8b:1d:c5:b1:5a:a3:0f:3a:1e:ba:06:1f:b4:c1:e5
Fingerprint (sha256): 02:21:8e:21:09:7b:70:1b:b8:ed:9c:c7:58:99:d0:b7:27:bd:97:f8:47:d2:ee:49:39:4a:b7:ae:5c:eb:d9:3c

Issuing Certificate URL: ldap://ssl.crosscert.com:389/cn=CrossCert Class 1 Server CA,ou=AccreditedCA,o=CrossCert,c=KR?cACertificate;binary

Revocation information

CRL Distribution Point: ldap://211.180.234.203:389/cn=s1dp7p1,ou=crldp,ou=AccreditedCA,o=CrossCert,c=KR?certificateRevocationList

Check the revocation status for certificate test1.crosscert.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for test1.crosscert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

7 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name crosscert.com

(limited to 100 certificates)
test1.crosscert.com
ebill.crosscert.com
www.crosscert.com
board.crosscert.com
dr-raadmin.crosscert.com
raadmin.crosscert.com
support2.cdnetworks.net
www.crosscert.com
hm.crosscert.com
support2.cdnetworks.net
marketing-picc.crosscert.com
www.crosscert.com
support2.cdnetworks.net
marketing-unisign.crosscert.com
raadmin.crosscert.com
testraadmin.crosscert.com
onsite.crosscert.com
support2.cdnetworks.net
auth.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
*.crosscert.com
onsite-admin.crosscert.com
support11b.cdnetworks.net
digitalid.crosscert.com
svn.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
digitalid.crosscert.com
aa-ttp.crosscert.com
mpki-admin.crosscert.com
*.crosscert.com
support2.cdnetworks.net
crmra.crosscert.com
support2.cdnetworks.net
cert.crosscert.com
pcsprelay3.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
*.crosscert.com
onsite-admin.crosscert.com
raadmin.crosscert.com
billing.crosscert.com
onsite.crosscert.com
crmra.crosscert.com
support11b.cdnetworks.net
test.crosscert.com
marketing-etrade.crosscert.com
1.crosscert.com
fidoserver3.crosscert.com
marketing-picc.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
*.crosscert.com
mpki.crosscert.com
support2.cdnetworks.net
*.crosscert.com
marketing-g2b.crosscert.com
testhmkim.crosscert.com
support2.cdnetworks.net
1dy.crosscert.com
digitalid.crosscert.com
star.crosscert.com
raadmin.crosscert.com
support11b.cdnetworks.net
auth.crosscert.com
www.crosscert.com
billing.crosscert.com
cm-test2.crosscert.com
support2.cdnetworks.net
kecacrl.crosscert.com
mail.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
m.crosscert.com
support11b.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
onsite-admin.crosscert.com
support11b.cdnetworks.net
fidotestserver.crosscert.com
api.crosscert.com
*.crosscert.com
eeapi.crosscert.com
www.crosscert.com
raadmin.crosscert.com
ev-rsa.crosscert.com
chatapp.crosscert.com
support2.cdnetworks.net
onsite.crosscert.com
board.crosscert.com
support2.cdnetworks.net
support11b.cdnetworks.net

Certificate

The complete raw certificate details for test1.crosscert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XT8jV45tqgIo1GaInR6
4PuUFH/kY9biS8yPuP+X3G/2OZfg+FaG9vt9AHwzKkUhvJ44fmpMDifHnY072/S7
iwbJNFFm8c1Bt9/+dGOmXvi55ghX557QD+F8dKbS6s9EJzzocKLx3aJ+RkXlXHtu
RAkqAL5+kZpNB7744HHVw7lS2iFkXNRp0Zk7Z7p4a0lFnfydlyPjwzQJ/NvgDhir
3R1b36oxplbqGpQUL1fwQ9k6k0cnBSSVuEWmSupvZ2kgj00v2B2zoyaF9sHKtKaA
VdwNwF4MlTHVDaFzDh8CvNuhDM5ikyYFESz+nKoBrnK8WqQMru0ao4M8ifB98PqL
KQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3626984819298157098
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AccreditedCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert Class 2 Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-01-26 00:36:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-02-26 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AccreditedCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '002'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'test1.crosscert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28461306826413423382389940177586656111061274215006974232844482840883946132670866749171453964190508667743966266656903058864480866382879831970429880555684861109766203440073737241286725791744922717219308701019333184135510971424303718812206092586616888610764797267131071351221795189408073072397863127872713581053929353066313515917077961769685250976562697986736452385652012568374248647842737338075109667773522978210600839670578211858393519307237004569548266682521420838166437205920969130550502594049901938451795070242796757322327994799328565043821433156985523997725028321972846287699972760394659452826433839742520355621673
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6e7411ec10f54920fc590fb8e0b0d878ab239450
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KISA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Korea Certification Authority Central'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KISA RootCA 1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String ''�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							35f34893f19805d3e584b613d0aea0d9628d72e6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.200004.5.4.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://gca.crosscert.com/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [199 116 0 32 199 120 201 157 193 28 178 148 0 32 198 249 193 28 188 132 0 32 199 120 201 157 193 28 199 133 178 200 178 228 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://211.180.234.203:389/cn=s1dp7p1,ou=crldp,ou=AccreditedCA,o=CrossCert,c=KR?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ssl.crosscert.com:389/cn=CrossCert Class 1 Server CA,ou=AccreditedCA,o=CrossCert,c=KR?cACertificate;binary'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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