salesforcevsa.jlrext.com

- Jaguar Land Rover Limited -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 04:b5:d3:45:13:7d:7f:44:42:55:8c:07 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jaguar Land Rover Limited

Organization: Jaguar Land Rover Limited
State / Province: West Midlands
Locality: Coventry
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 04:b5:d3:45:13:7d:7f:44:42:55:8c:07
Serial Number (int): 1457753306193273326576962567
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 5f:a1:e1:58:ef:c8:78:ad:c6:2b:73:bf:54:51:10:2a:f5:97:66:57
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 93:55:20:2b:98:be:37:b1:ff:bd:4e:6a:57:59:ee:e3:68:8e:2e:9e
Fingerprint (sha256): 02:23:e8:cc:5b:04:95:dd:c9:23:81:14:c6:ed:6e:2e:2b:ec:be:72:4f:89:72:e3:18:93:49:df:69:60:a7:10

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate salesforcevsa.jlrext.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for salesforcevsa.jlrext.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

salesforcevsa.jlrext.com

Other certificates including the domain name jlrext.com

(limited to 100 certificates)
jlrvision.jlrext.com
stage-customerservice.jlrext.com
*.jlrext.com
web.qprqa.jlrext.com
retailer-assessment.jlrext.com
salesforcevsa.jlrext.com
topix.features.jlrext.com
www.aspenrms.com
srpss.jlrext.com
access.jlrext.com
mftl-qa.jlrext.com
web.epay.jlrext.com
bbsssm.jlrext.com
special-tools-qa.jlrext.com
*.jlrext.com
mftl.jlrext.com
*.jlrext.com
connect-cn.jlrext.com
www.webquote.jlrext.com
www.dcsext.jlrext.com
www.dcsext.jlrext.com
www.portal.jlrext.com
monroney.jlrext.com
jlrsp.jlrext.com
www.madcap.jlrext.com
web.cmmseddl-pr.jlrext.com
premierdocstest.jlrext.com
peg.bbss.jlrext.com
premierdocstest.jlrext.com
*.jlrext.com
www.lradvertising.jlrext.com
www.efdvs.jlrext.com
gcmservices.jlrext.com
jlrportalqajpc.jlrext.com
jaguarvehicles.jlrext.com
bbssqajpc.jlrext.com
aftermarket-ewm.jlrext.com
www.wslx.jlrext.com
retailer-database.jlrext.com
retailer-database.jlrext.com
www.webquote.jlrext.com
topix.jlrext.com
jaguarlandroverhub.jlrext.com
www.aspenrms.com
topixqa2.landrover.jlrext.com
pridepinnacle.jlrext.com
www.secureauthx.jlrext.com
www.nguams.jlrext.com
www.aspenrms.com
pridepinnacle.jlrext.com
www.aspenrms.com
web.qpr.jlrext.com
sps.jlrext.com
topixqa2.jlrext.com
retailer-database.jlrext.com
sps.jlrext.com
www.jaguarcreativepartners.jlrext.com
paws.jlrext.com
*.jlrext.com
jlrassuranttest.jlrext.com
webconnect.jlrext.com
jlrdocusedit.jlrext.com
www.gpirs-ddl.jlrext.com
dealerleads.jlrext.com
*.jlrext.com
jlrassurant.jlrext.com
paws.jlrint.com
topixqa2.jlrext.com
web.c3p.jlrext.com
journey.jlrext.com
mft.jlrext.com
sta-grms.jlrext.com
www.jlrvista.jlrext.com
myvpn.jlrext.com
premierdocs.jlrext.com
connect-cn.jlrext.com
www.dcsext.jlrext.com
sef.jlrext.com
jaguarlandroverhub.jlrext.com
jaguarlandroverbrand.jlrext.com
web.cmmseddl-pr.jlrext.com
dealerportalpp-cn.jlrext.com
special-tools-qa.jlrext.com
web.aim.jlrint.com
www.jlrvista.jlrext.com
ecar.jlrext.com
www.d42.jlrext.com
webconnect.jlrext.com
www.pd-rm.jlrext.com
www.secureauthx.jlrext.com
qa-wslx.jlrext.com
rmdv.jlrext.com
stage-esi.jlrext.com
wwwqa.jagcoopgrms.jlrext.com
iplm-training.jlrext.com
www.wslx.jlrext.com
www.gpirs-ddl.jlrext.com
svcrm.jlrext.com
www.efdvs.jlrext.com
web.sfq.jlrext.com

Certificate

The complete raw certificate details for salesforcevsa.jlrext.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFOTCCBCGgAwIBAgIMBLXTRRN9f0RCVYwHMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA4MDYxMjAxMTNaFw0y
MTA4MDYxMjAxMTNaMH8xCzAJBgNVBAYTAkdCMRYwFAYDVQQIEw1XZXN0IE1pZGxh
bmRzMREwDwYDVQQHEwhDb3ZlbnRyeTEiMCAGA1UEChMZSmFndWFyIExhbmQgUm92
ZXIgTGltaXRlZDEhMB8GA1UEAxMYc2FsZXNmb3JjZXZzYS5qbHJleHQuY29tMIIB
IjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6xLxLjpgtA5kg1XyuiL+yOE
6Fhii+n23AS3g9hiMOfR26CuaFo2n+9LzMV07qjKPecKZJvBNWf2EnTBE5Rq93tD
JHqV4hecWVAqvKhHcvNrlxXVhvwkOBJfOsamUkBniPFQ+t0LJUsGp9y8DeNHntTy
q5sRfXA2MvznG0s776zidckDl6n17+WeKCOesL3jXBbCDx42+xlTm7jpYPCUXQhk
RyTGwEvXeMLPZmhuNjBOybGRA8RirYJ18HO6oQw45EEE0y2a/7J5M6rtEVpAgnE3
ExTh+k5IRdpVe8/IQywVp6GiPOe8GxmKdii4+Tep2aylKunKy39H/HGFlsZVlwID
AQABo4IB4jCCAd4wDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQG
CCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n
c3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xv
YmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQB
oDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y
ZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAw
hi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3Js
MCMGA1UdEQQcMBqCGHNhbGVzZm9yY2V2c2EuamxyZXh0LmNvbTAdBgNVHSUEFjAU
BggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14Z6jeb48kjYjx
hwMCs+swHQYDVR0OBBYEFF+h4VjvyHitxitzv1RRECr1l2ZXMBMGCisGAQQB1nkC
BAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAMOo41/K5qYueGpaLnhdeUw59e
sTBRJshky1plvfm7UX9iWF9GgDQ5shPz32QovXz0LCkVag9gsaeEauK3N0jR7gxC
BZ2eclbBRrF3ywsnraLUpd4Vu3vTSBSn6oQcW9h/h8d74+3XXzueFk/p669f47ud
BqMvgZ+eqLdATFgZZhsjH8gC8oynWnn7wl2U5nmxrLLAfiW6ERPmDdQx2DJ29Ws1
QAb6gpt8gzkzR0lVaPuY2zbiB5svMa6Nxbq6QeLpoPaAnN7O4Y9dc+hpD8uAi+PO
CSb5OOjvrZAymtcv75zPLh57kJpYtPqiJ2zxd3N4zzNPcGUEM6XXHEp/nZk+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo6xLxLjpgtA5kg1XyuiL
+yOE6Fhii+n23AS3g9hiMOfR26CuaFo2n+9LzMV07qjKPecKZJvBNWf2EnTBE5Rq
93tDJHqV4hecWVAqvKhHcvNrlxXVhvwkOBJfOsamUkBniPFQ+t0LJUsGp9y8DeNH
ntTyq5sRfXA2MvznG0s776zidckDl6n17+WeKCOesL3jXBbCDx42+xlTm7jpYPCU
XQhkRyTGwEvXeMLPZmhuNjBOybGRA8RirYJ18HO6oQw45EEE0y2a/7J5M6rtEVpA
gnE3ExTh+k5IRdpVe8/IQywVp6GiPOe8GxmKdii4+Tep2aylKunKy39H/HGFlsZV
lwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1457753306193273326576962567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-06 12:01:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-08-06 12:01:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'West Midlands'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Coventry'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jaguar Land Rover Limited'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'salesforcevsa.jlrext.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20661806019106929966390090672278618067216437688418459563378296711258981884324977496389205148156702260817155091558200345874858436472000145364681137715677967573583605422593941528490438108062864549843071806607542752592995909587346061998681411631236517574305296020426022606325423720942365560232335671877622476452794850375219546836315521200448481499619902110081396628588316412749858433231095370156940984550288605880774175787848963204473650739935458795883953578917045266574177830254996150677981923167325111361028008497382864047719962380433283955627603311367416120496850399589054222604730006440779901872945869601765365011863
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'salesforcevsa.jlrext.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5fa1e158efc878adc62b73bf5451102af5976657
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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