fls-int2-p5.bmw.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 1c:30:7c:b7:b8:22:3a:af:77:11:35:2f was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 1c:30:7c:b7:b8:22:3a:af:77:11:35:2f
Serial Number (int): 8724197676805437427012416815
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 59:23:d9:39:83:16:38:0d:ef:8f:2f:df:3f:c6:90:c2:e8:c0:29:40
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2e:b3:d9:30:3d:b9:0e:24:70:b8:4f:26:82:6c:b7:3d:a3:87:21:b7
Fingerprint (sha256): 02:5d:88:cb:bb:8e:6b:a8:9b:a3:35:b6:e3:5e:d9:e1:dd:9e:15:80:6a:b1:63:aa:f5:f1:a1:47:9b:7c:0c:93

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate fls-int2-p5.bmw.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fls-int2-p5.bmw.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fls-int2-p5.bmw.com

Other certificates including the domain name bmw.com

(limited to 100 certificates)
famos-ecap.bmw.com
spa-int.sfchina.bmw.com.cn
int-b2b-fscast.bmw.com
b2b-swl-sec2-admin.bmw.com
epos-i.bmw.com
tms-prod.bmw.com
apisec.bmwgroup.com
ad-labeling-i.bmw.com
astras.bmw.com
control-panel.bmw.com
cmx-author-int5.bmw.com
swhrli6.bmw.com
rest-swlsec2.bmw.com
cbe-prod-us.bmw.com
con.api.mini
proxy.ris.bmw.com
b2b-swl-sec2.bmw.com
evonext-int-azure.bmw.com
ipa-int.bmw.com
www-origin-proda6.bmw.com
bdqv2-int1.bmw.com
vwh-services-i.bmw.com
myworkplace-prod2.bmw.com
vsrsales-test.bmw.com
tssbapac-int.bmw.com
esaus-i.bmw.com
teleservicefleet-int-web.bmw.com
esa-us-p-b2b.bmw.com
www.mini.rs
www.charging.bmwgroup.com
embx0-int.bmw.com
prod.34.slot.cdn.salesforce-communities.com
b2v-b2bapp.bmw.com
configure.bmw.com
pdm-sap-modules-int1.bmw.com
oo.labs.bmwna.com
dwhb-i.bmw.com
labs.bmw.com
prokkat-test.bmw.com
nspeuappt.bmw.com
swsfi-3-integration.bmw.com
rsa-asd-search-e2e.bmw.com
www-origin-prodn1.bmw.com
bmw-int1.com
cdc-us.bmw.com
tspartner-e2e-cn.bmw.com
spetros.bmw.com
www.bmw.de
www.bmw.com
qserv-train.bmw.com
pprmscaksgreen.bmw.com
ipq-lr7.bmw.com
apisec-i.bmwgroup.com
www.dlss21.bmw.com
ee-tmpbm.bmw.com
configure.bmw.com
uctemeasip02.bmwgroup.net
chargeforward-i1.bmw.com
b2b-sra.bmw.com
esa-us-e2e-b2b.bmw.com
micslp.bmw.com
casa-us-int.bmw.com
bmw-preprod-a6-b2bwen.bmw.com
otb.bmw.com
www.bmwgroup.com
imm-prod3.bmw.com
aida.bmw.com
ts-cts-ui-emea-e2e.bmw.com
c2b-services-i.bmw.com
cmx-author-int3.bmw.com
opal.bmw.com
se-int.wit.bmw.com
tpdm-i2.bmw.com
aem-author-inta11int.bmw.com
myworkplace.bmw.com
fzgsecca.bmw.com
bmw-int1.com
optibe.bmw.com
individual.bmw.com
tssbapac-prod.bmw.com
UCP14RP.bmw.de
ucemeafrepoolws04.bmwgroup.net
IgNew-test.bmw.com
psdmweb-test-py4.bmw.com
etik-new.bmw.com
mmp-test-rep-na.bmw.com
tssbemea.bmw.com
b2b-vts3-int.bmw.com
dbodb-gw-i.bmw.com
ucamersip02.bmwgroup.net
dsmon-bba.bmw.com
ifavor-cockpit.bmw.com
tc4jbt-tmp.bmw.com
ucsccnsip01.bmwgroup.net
fls-int2-p5.bmw.com
c2b-services-i.bmw.com
rplan-b2b.bmw.com
smw.bmw.com
engineoil-approval-gf4-int.bmw.com
aspr-b2b.bmw.com

Certificate

The complete raw certificate details for fls-int2-p5.bmw.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIMHDB8t7giOq93ETUvMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDAzMTMwNDMyNDVaFw0y
NTA0MTQwNDMyNDRaMHQxCzAJBgNVBAYTAkRFMRAwDgYDVQQIEwdCYXZhcmlhMQ8w
DQYDVQQHEwZNdW5pY2gxJDAiBgNVBAoTG0JheWVyaXNjaGUgTW90b3JlbiBXZXJr
ZSBBRzEcMBoGA1UEAxMTZmxzLWludDItcDUuYm13LmNvbTCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBANbHN0SlZjLS1SxLCgX4CGg08vR3QIIs9SdRCIpu
/hxSQjzJdPv12ELvOKuI3h0aY5inijK9edojC2V3UxpMo1yWk/NfUFW8/PSToS6z
vXzbhlRQt69hzp+FspcR/YVGKTHCVTaplC/iBTstTGrje5whi/CQVK5tos6fRF4t
4qvZVYZGeRhn366wLLs4q91cET2Z2ppmLqVt6x4flAk91qKhOBKBbX4QgcT1fDaF
nJ5CBc8zlletyttIq7BgdTEdyIjUm//ExQV9Uhczg5C2wp567SuZDFbLlUD7/+x6
cFsXtiyPzix23jyP1Dn5ntWJAwU48/gtCEqpdAEoMtAX/NUCAwEAAaOCAeAwggHc
MA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSBgTB/
MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy
dC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3Au
Z2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsG
AQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNv
bS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwPwYDVR0fBDgwNjA0oDKgMIYuaHR0cDov
L2NybC5nbG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4LmNybDAeBgNVHREE
FzAVghNmbHMtaW50Mi1wNS5ibXcuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4E
FgQUWSPZOYMWOA3vjy/fP8aQwujAKUAwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBACQo0Juqw+NY32tzU0jaOWHTurr3ThmpE/5adKTNhcBK
7VIfTNEpQuBkAaCxQ/9b79cCY1f+9xZPt+aG/txWaM8XnsfN4Ylqk8e9H4h/r3cv
fo6Em4WkZqATvo14N1MP7YS99+jrMiQqySuUfQi/k2nvTuY8+SgxkylYH1OL4XjH
uZ3bc+L4ZvUFqzVvGRUMFQZ1M5fCGdhW7ufT5qPiBCLOH2ZoviFUGWfmVMdUopm7
DRKE055Gj32LFbN7imqO0rXxBZs5AqeP1K8pR1jZK0RXyWSEShi/folx2JW87fvK
diEc626pjK3TBkzb8Mgbfs8HEzW8JQDaQRzWpxN8RnY=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1sc3RKVmMtLVLEsKBfgI
aDTy9HdAgiz1J1EIim7+HFJCPMl0+/XYQu84q4jeHRpjmKeKMr152iMLZXdTGkyj
XJaT819QVbz89JOhLrO9fNuGVFC3r2HOn4WylxH9hUYpMcJVNqmUL+IFOy1MauN7
nCGL8JBUrm2izp9EXi3iq9lVhkZ5GGffrrAsuzir3VwRPZnammYupW3rHh+UCT3W
oqE4EoFtfhCBxPV8NoWcnkIFzzOWV63K20irsGB1MR3IiNSb/8TFBX1SFzODkLbC
nnrtK5kMVsuVQPv/7HpwWxe2LI/OLHbePI/UOfme1YkDBTjz+C0ISql0ASgy0Bf8
1QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8724197676805437427012416815
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-13 04:32:45 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-14 04:32:44 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fls-int2-p5.bmw.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27113234280034106305579549334083567671179612359627501939019540887675024654953489473603985669272739604295713671686382150302598067980314568505221568691981435899663343722835899337703249967676098875782853039573239156983996736715659619385350481643973657926657493700401901351942578261800612177305039795081680896840714363845260607386735540351078975891433757366984907480533339423488493355269257808798261776791908755424203763961679542796475267241056437290300918752891503199154312033612755550366117377084547629367878669063861601514881666967473927650225691315747096754761201021886066779227157450891981322113575062355350021209301
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (23 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fls-int2-p5.bmw.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5923d9398316380def8f2fdf3fc690c2e8c02940
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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