impool2.fda.gov

- HHS -

Issued by HHS-SSP-CA-B7

About this certificate

This digital certificate with serial number 13:00:72 was issued on by U.S. Government.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • The Subject Alternate Name extension MUST contain only 'dnsName' and 'ipaddress' name types. (BRs: 7.1.4.2.1)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

HHS

Organization: HHS
Organization unit: FDA
State / Province: MD
Locality: Rockville
Country: US

U.S. Government

Organization: U.S. Government
Organization unit: HHS
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 13:00:72
Serial Number (int): 1245298
Serial Number lenght: 21 bits, 3 octets

SubjectKeyId: 96:bc:ea:61:37:2c:cc:cb:12:d8:e8:b0:04:6a:7c:57:59:98:81:17
AuthorityKeyId: fd:84:e3:57:1f:df:1e:ac:06:43:5e:92:0e:03:3c:29:cd:c3:6e:c5

Fingerprint (sha1): 36:6c:12:40:c2:3e:06:17:a1:37:5a:48:f3:80:3c:b6:45:4b:bb:fc
Fingerprint (sha256): 02:7a:a9:4b:cf:85:a0:87:81:1f:87:cf:1a:29:cb:64:fd:aa:13:8f:0c:67:ba:7e:46:8f:5d:de:24:d7:5e:6e

Issuing Certificate URL: http://aia1.ssp-strong-id.net/CA/HHS-SSP-CA-B7.p7c
Issuing Certificate URL: ldap://dir1.ssp-strong-id.net/cn=HHS-SSP-CA-B7,ou=HHS,o=U.S. Government,c=US,dc=hhs,dc=gov?cACertificate

Revocation information

OCSP Server: http://ocsp1.ssp-strong-id.net/HHS-SSP-CA-B7/
CRL Distribution Point: http://cdp1.ssp-strong-id.net/CDP/HHS-SSP-CA-B7.crl
CRL Distribution Point: ldap://dir1.ssp-strong-id.net/cn%3dHHS-SSP-CA-B7,ou%3dHHS,o%3dU.S.%20Government,c%3dUS,dc%3dhhs,dc%3dgov?certificateRevocationList

Check the revocation status for certificate impool2.fda.gov

4

DNS Names

1

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for impool2.fda.gov

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Any
Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sip.fda.hhs.gov
sip.fda.gov
impool2.fda.gov
FDSWP2240.fda.gov
[email protected]

Other certificates including the domain name fda.gov

(limited to 100 certificates)
collaborationcqauth1.fda.gov
sslvpn.fda.gov
fctakademie.com
www.access.fda.gov
adc-sfbfep1.fda.gov
trlm-ng-scan.preprod.fda.gov
www.fda.gov
rapid.fda.gov
medsun.fda.gov
poca-public.fda.gov
sslvpn.fda.gov
fms-5.collaboration.fda.gov
timsmmtamobiletrain.fda.gov
www.fda.gov
updates.fda.gov
impool2.fda.gov
scicsa.fda.gov
edkb.fda.gov
api.fda.gov
esgadmin.fda.gov
accessdata-preprod.fda.gov
esgtest.fda.gov
esghosted.test.fda.gov
www.accessdata.fda.gov
itacs.fda.gov
as2safetyreporting.preprod.fda.gov
info1test.cfsan.fda.gov
api.fda.gov
dnahive.fda.gov
purplebooksearch.fda.gov
fms-4.collaboration.fda.gov
fms-1.collaboration.fda.gov
oralcms-test.fda.gov
esg.fda.gov
gmvs.fda.gov
esaf.preprod.fda.gov
cfsan-caemsprp.fda.gov
userfees.fda.gov
iwsfdacbp.dev.fda.gov
dcg32.test.fda.gov
blogs.fda.gov
extoam.preprod.fda.gov
mpris.preprod.fda.gov
esgtestreg.preprod.fda.gov
xmsapps.fda.gov
www-aws.fda.gov
tims.fda.gov
ufsp2.preprod.fda.gov
itacs.fda.gov
fis.fda.gov
ufsp3.preprod.fda.gov
collaborationcqpub1.fda.gov
fissweb.preprod.fda.gov
myapps-val.fda.gov
force-dsc.fda.gov
precision.fda.gov
www.access.preprod.fda.gov
faers2-validator.fda.gov
ctpportal.fda.gov
portes.fda.gov
tims.fda.gov
ceportal.fda.gov
www.access.fda.gov
ofemsapps.fda.gov
www.fda.gov
api.fda.gov
cfsanappsexternal.fda.gov
sso3.preprod.fda.gov
www.fda.gov
pvreports-rapid.preprod.fda.gov
mvpn.fda.gov
ngtims.fda.gov
sso.esaf-pilot.fda.gov
xm-preprod.fda.gov
epublication.preprod.fda.gov
ceportal.fda.gov
api.fda.gov
ngtimsmobile.preprod.fda.gov
ngtims.preprod.fda.gov
userfees.fda.gov
wcms-test-internet.fda.gov
extbi.preprod.fda.gov
api.fda.gov
timstrain.fda.gov
staging.preprod.fda.gov
epublication.fda.gov
fms-2.collaboration.fda.gov
www.fda.gov
ngtims.fda.gov
nfsdx.fda.gov
search.usa.gov
www.fda.gov
www.fda.gov
cfsan-onlinesubmissions.preprod.fda.gov
esg.fda.gov
collaborationcqpub1.fda.gov
fms-1.collaboration.fda.gov
extaccess.fda.gov
datadashboard.fda.gov
blogs.fda.gov

Certificate

The complete raw certificate details for impool2.fda.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQDCCBSigAwIBAgIDEwByMA0GCSqGSIb3DQEBCwUAMHcxEzARBgoJkiaJk/Is
ZAEZFgNnb3YxEzARBgoJkiaJk/IsZAEZFgNoaHMxCzAJBgNVBAYTAlVTMRgwFgYD
VQQKEw9VLlMuIEdvdmVybm1lbnQxDDAKBgNVBAsTA0hIUzEWMBQGA1UEAxMNSEhT
LVNTUC1DQS1CNzAeFw0xMzAxMTAyMDI1MjdaFw0xNTAxMTAyMDI0MDBaMGQxCzAJ
BgNVBAYTAlVTMQswCQYDVQQIEwJNRDESMBAGA1UEBxMJUm9ja3ZpbGxlMQwwCgYD
VQQKEwNISFMxDDAKBgNVBAsTA0ZEQTEYMBYGA1UEAxMPaW1wb29sMi5mZGEuZ292
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvf9Q6orTEAlqUrwUPXw
Syb5He2w/6vuzZmmfoYrOC4uaRkoRMQoPiFv9Hk4I6LX387WUQj1In7mlz9gdI8O
jNoY/yVC4mkbtAR5Lkr+HvickuiZrMCYBdCsw6yYS+5Mlxe70E+Pb227ywMDzoCa
7mrLhtHf9mps0vAUfHBRaHMvJWEuTWCiqm/SnymlYcuE963PGBkeA0foJCdw1nWj
ZfBbdwWozfWwnESOAwHgt43+vO8YjZEMxBQRhLK1ApImj3o7f1Gg2hx69j/Hj7Yx
re8Lo8U/Jpk+RwJ2lROncdqfapkMFnsObFWqLKf7txb93TCcXUg9qo5/CmA+CsJF
mwIDAQABo4IC5jCCAuIwYgYDVR0RBFswWYIPc2lwLmZkYS5oaHMuZ292ggtzaXAu
ZmRhLmdvdoIPaW1wb29sMi5mZGEuZ292ghFGRFNXUDIyNDAuZmRhLmdvdoEVQ2Vy
dEFkbWluQGZkYS5oaHMuZ292MBcGA1UdIAQQMA4wDAYKYIZIAWUDAgEDCDCCAQEG
CCsGAQUFBwEBBIH0MIHxMD4GCCsGAQUFBzAChjJodHRwOi8vYWlhMS5zc3Atc3Ry
b25nLWlkLm5ldC9DQS9ISFMtU1NQLUNBLUI3LnA3YzB0BggrBgEFBQcwAoZobGRh
cDovL2RpcjEuc3NwLXN0cm9uZy1pZC5uZXQvY249SEhTLVNTUC1DQS1CNyxvdT1I
SFMsbz1VLlMuIEdvdmVybm1lbnQsYz1VUyxkYz1oaHMsZGM9Z292P2NBQ2VydGlm
aWNhdGUwOQYIKwYBBQUHMAGGLWh0dHA6Ly9vY3NwMS5zc3Atc3Ryb25nLWlkLm5l
dC9ISFMtU1NQLUNBLUI3LzAOBgNVHQ8BAf8EBAMCBaAwNwYDVR0lBDAwLgYEVR0l
AAYIKwYBBQUHAwEGCCsGAQUFBwMCBggrBgEFBQgCAgYIYIZIAWUDBgcwHwYDVR0j
BBgwFoAU/YTjVx/fHqwGQ16SDgM8Kc3DbsUwgdQGA1UdHwSBzDCByTA5oDegNYYz
aHR0cDovL2NkcDEuc3NwLXN0cm9uZy1pZC5uZXQvQ0RQL0hIUy1TU1AtQ0EtQjcu
Y3JsMIGLoIGIoIGFhoGCbGRhcDovL2RpcjEuc3NwLXN0cm9uZy1pZC5uZXQvY24l
M2RISFMtU1NQLUNBLUI3LG91JTNkSEhTLG8lM2RVLlMuJTIwR292ZXJubWVudCxj
JTNkVVMsZGMlM2RoaHMsZGMlM2Rnb3Y/Y2VydGlmaWNhdGVSZXZvY2F0aW9uTGlz
dDAdBgNVHQ4EFgQUlrzqYTcszMsS2OiwBGp8V1mYgRcwDQYJKoZIhvcNAQELBQAD
ggEBABdvOHc77R3d4CS3nCk7W6LJgXv//Ic6Liva0UoztH13OCVrrXqY5sCLkeo2
ZRc1l2P7DaljVR8iiNIIngUOmO8jBvMf1U3mxD2Rq/zrb4lZvGMWK9uWaWWfTdoe
hHEuFGMsH3W6KiYibZbPvcyo6eOhUxKC8ZyrtwzWG8bnWTs01jG9+N8cZdDVMbQD
HPn9WvL3tghFkIp4gflSVn8jZHAKDFQH0z5qWNiRj7Er9hZJ9pA5i0v2OGMlZdpV
vWjWl/cor6q++8ghjJhFiVnHprlD/Gtazwvupx8/hy4nt+GDkcXRoxx2jCwz5kfK
lqL5zmEnG1IXtIL5eOdIz59Dmf4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvf9Q6orTEAlqUrwUPXw
Syb5He2w/6vuzZmmfoYrOC4uaRkoRMQoPiFv9Hk4I6LX387WUQj1In7mlz9gdI8O
jNoY/yVC4mkbtAR5Lkr+HvickuiZrMCYBdCsw6yYS+5Mlxe70E+Pb227ywMDzoCa
7mrLhtHf9mps0vAUfHBRaHMvJWEuTWCiqm/SnymlYcuE963PGBkeA0foJCdw1nWj
ZfBbdwWozfWwnESOAwHgt43+vO8YjZEMxBQRhLK1ApImj3o7f1Gg2hx69j/Hj7Yx
re8Lo8U/Jpk+RwJ2lROncdqfapkMFnsObFWqLKf7txb93TCcXUg9qo5/CmA+CsJF
mwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1245298
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'gov'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.9.2342.19200300.100.1.25 (domainComponent)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'hhs'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'U.S. Government'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HHS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HHS-SSP-CA-B7'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-01-10 20:25:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-10 20:24:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Rockville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HHS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FDA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'impool2.fda.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22592706372299023490336492873996793380227401108404337767741992191886267675930756391711184069075786406340353781540449216701522878661716161911036511230267963869460361701915135372972335281595178762577134527990926215620243536746981125972630895658481380780332409679128526635323780919026509258963544869101571009918287935437960702811711212387954942580966634375774576496397447142612043360896475529738838456638542186898705553308144740210445511174702188064516960659200365473591320614936851238236129698041278548515335579879359444516618547611883453006221972077624387843728619410672581901389737323029937239919893697154965022328219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (91 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fda.hhs.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sip.fda.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'impool2.fda.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'FDSWP2240.fda.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|false] IA5String '[email protected]'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.2.1.3.8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (244 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia1.ssp-strong-id.net/CA/HHS-SSP-CA-B7.p7c'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn=HHS-SSP-CA-B7,ou=HHS,o=U.S. Government,c=US,dc=hhs,dc=gov?cACertificate'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp1.ssp-strong-id.net/HHS-SSP-CA-B7/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37.0 (anyExtendedKeyUsage)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.8.2.2 (iKEIntermediate)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.101.3.6.7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName fd84e3571fdf1eac06435e920e033c29cdc36ec5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (204 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cdp1.ssp-strong-id.net/CDP/HHS-SSP-CA-B7.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://dir1.ssp-strong-id.net/cn%3dHHS-SSP-CA-B7,ou%3dHHS,o%3dU.S.%20Government,c%3dUS,dc%3dhhs,dc%3dgov?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							96bcea61372ccccb12d8e8b0046a7c5759988117
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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