colloc2.erdfdistribution.fr

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:27:e7:0d:ec:7d:3e:33:38:00:72:89:4c:72:86:86:4f:fa was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:27:e7:0d:ec:7d:3e:33:38:00:72:89:4c:72:86:86:4f:fa
Serial Number (int): 1494486997113297706353441613803911431737338
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 40:c4:4a:58:83:91:78:64:61:e2:77:08:9b:af:29:26:c4:56:d1:b8
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 7b:6f:bf:6d:61:16:59:37:57:05:9f:e7:c9:21:81:51:d5:41:c4:35
Fingerprint (sha256): 03:19:52:ad:01:51:34:84:f9:c4:5d:45:ee:a3:ce:44:5a:fc:c6:ab:41:dc:50:cb:ff:4e:98:9d:ff:3a:fc:e9


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate colloc2.erdfdistribution.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for colloc2.erdfdistribution.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

colloc2.erdfdistribution.fr

Other certificates including the domain name erdfdistribution.fr

(limited to 100 certificates)
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
colloc2.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
ccd.erdfdistribution.fr
portail-osr-prestataires.enedis.fr
enedis.fr
brandcenter.enedis.fr
relevermoncompteur.erdfdistribution.fr
deploik.sid.erdfdistribution.fr
colloc.erdfdistribution.fr
perm.erdfdistribution.fr
perm.erdfdistribution.fr
enedis.fr
noedmzplywfe001.intranet.edf.com
enedis.fr
pilotin-dev.erdfdistribution.fr
herakles.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
fournisseursderdf.erdfdistribution.fr
distri-pictrel.edf.fr
colloc.erdfdistribution.fr
perm.enedis.fr
relevermoncompteur.erdfdistribution.fr
prac-pre-prod-internet.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
etoile-rh.edf.fr
portail-osr-prestataires.erdfdistribution.fr
brandcenter.enedis.fr
perm.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
connect-racco.erdfdistribution.fr
ccdsecours.erdfdistribution.fr
perm.erdfdistribution.fr
srk.pprd.sid.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
pcydmzplywfe001.intranet.edf.com
distri-pictrel.edf.fr
portail-osr-prestataires.enedis.fr
portail-osr-prestataires.enedis.fr
herakles.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc-perf.erdfdistribution.fr
ccd.erdfdistribution.fr
herakles.erdfdistribution.fr
brandcenter.enedis.fr
ccdsecours.erdfdistribution.fr
PCYINTPLYPFE001.neoprod.edf.fr
brandcenter.enedis.fr
relevermoncompteur.enedis.fr
pcydmzplywfe001.intranet.edf.com
perm.erdfdistribution.fr
perm.erdfdistribution.fr
connect-racco.enedis.fr
portail-osr-prestataires.erdfdistribution.fr
mediabox.erdfdistribution.fr
herakles-pp.erdfdistribution.fr
brandcenter.enedis.fr
pcydmzplywfe002.intranet.edf.com
relevermoncompteur.erdfdistribution.fr
brandcenter.enedis.fr
portail-osr-prestataires.enedis.fr
cko-osb-recf.erdfdistribution.fr
fournisseursderdf-pp.erdfdistribution.fr
distri-pictrel.edf.fr
enedis.fr
connect-racco.erdfdistribution.fr
herakles-iq.erdfdistribution.fr
colloc.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
noedmzplywdi001.intranet.edf.com
noedmzplywfe001.intranet.edf.com
www.erdfdistribution.fr
noedmzplywfe002.intranet.edf.com
etoile-rh.edf.fr
deploic.sid.erdfdistribution.fr
pcydmzplywdi001.intranet.edf.com
connect-racco.erdfdistribution.fr
noedmzplywdi001.intranet.edf.com
colloc.erdfdistribution.fr
portail-osr-prestataires.erdfdistribution.fr
pcydmzplywfe001.intranet.edf.com
rh-planete-formation.edf.fr
herakles.erdfdistribution.fr

Certificate

The complete raw certificate details for colloc2.erdfdistribution.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIExDCCA6ygAwIBAgISESfnDex9PjM4AHKJTHKGhk/6MA0GCSqGSIb3DQEBBQUA
MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM
QVNTIDIgS0VZTkVDVElTIENBMB4XDTE0MTAwMTA5MDgwNVoXDTE1MTAwMjA5MDgw
NVowcjELMAkGA1UEBhMCRlIxDjAMBgNVBAgUBVBBUklTMQ4wDAYDVQQHFAVQQVJJ
UzEPMA0GA1UECxQGQ1NQIElUMQwwCgYDVQQKFANFREYxJDAiBgNVBAMTG2NvbGxv
YzIuZXJkZmRpc3RyaWJ1dGlvbi5mcjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCC
AQoCggEBAKpGFSPEl/BmhuZaX3VaxrDRfGWg5LSCB23gVclgtmdAfv3T/JB1X8MB
/XS9XTCfMoe/obf7majcOXsWTAcs+LDMPVHT2I4+NFu2GNzPt8rAG628ZX29DnvK
e0bnl5RbtPtYOBvdeetoyidNJlyvqrZqPuSupvlzetm1UhWtYKktmwB+cagKCNjW
UdYBRtUgCqrSEmt8G9ny0k/Imjlen16TZbDLVcLk5Hcq94aZbTl03gH1+LYoYTJi
pbhqjs3oNsI0+WWPYnepCeveJnvT847DoJE9r4qkj8n1PZ3VfFL+kSD4tLJr1np/
Y78SUkyYVGDF7Rkf1AJl3CdmkGV1kHMCAwEAAaOCAYQwggGAMAkGA1UdEwQCMAAw
DgYDVR0PAQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAm
BgNVHREEHzAdghtjb2xsb2MyLmVyZGZkaXN0cmlidXRpb24uZnIwTwYDVR0fBEgw
RjBEoEKgQIY+aHR0cDovL2NybC1zc2wuY2VydGlmaWNhdDIuY29tL2tleW5lY3Rp
cy9jbGFzczJrZXluZWN0aXNjYS5jcmwwRAYIKwYBBQUHAQEEODA2MDQGCCsGAQUF
BzABhihodHRwOi8vb2NzcC1zc2wuY2VydGlmaWNhdDIuY29tL3NzbC1vY3NwMEUG
A1UdIAQ+MDwwOgYNKwYBBAGBrVoCBQIFATApMCcGCCsGAQUFBwIBFhtodHRwOi8v
d3d3Lm9wZW50cnVzdC5jb20vUEMwHQYDVR0OBBYEFEDESliDkXhkYeJ3CJuvKSbE
VtG4MB8GA1UdIwQYMBaAFAARQd87nTvLuKLBM5KogczlfeeZMA0GCSqGSIb3DQEB
BQUAA4IBAQCXA+YT9qvMFYtq10+HF+I1BborE1Qxh8/xzVMr7kTCY1+68gdfzfaL
Ks8DO89WKigjsxU6M5iP5o9uyflz9LRO4fr1nzAjFYpMLtQVdw+7ULa59/6BXpqR
VB7zRN4ljZi9Vjo2wuDRH3tT3Jxb29vgzawF2YDVXfuPTlzw6Uv7CzLouPUTaGQJ
XwSvVNl+jtX71aUYzWn1yXjGyJF6L4i4ZjPR9iTfCev2jNf5nHh22x9EfQllp8b/
HiaFSiHfqGEyyp8zFNh8xr7ERHqfx/K/Qg5HBfODMdlmwGOtCzgZZLLy7jhpz+9h
BdBIkbR/amYkpY8NB3FesPlzI+gqKJiv
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqkYVI8SX8GaG5lpfdVrG
sNF8ZaDktIIHbeBVyWC2Z0B+/dP8kHVfwwH9dL1dMJ8yh7+ht/uZqNw5exZMByz4
sMw9UdPYjj40W7YY3M+3ysAbrbxlfb0Oe8p7RueXlFu0+1g4G91562jKJ00mXK+q
tmo+5K6m+XN62bVSFa1gqS2bAH5xqAoI2NZR1gFG1SAKqtISa3wb2fLST8iaOV6f
XpNlsMtVwuTkdyr3hpltOXTeAfX4tihhMmKluGqOzeg2wjT5ZY9id6kJ694me9Pz
jsOgkT2viqSPyfU9ndV8Uv6RIPi0smvWen9jvxJSTJhUYMXtGR/UAmXcJ2aQZXWQ
cwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1494486997113297706353441613803911431737338
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-10-01 09:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-02 09:08:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'colloc2.erdfdistribution.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21495070850993062743691675057702128903656362165738340919780655949068747598600556639376565496335936049415379443956031659359783038843403311618960409015123884547743660987155058251908431331577937307238338548641537371267664063517415382724409771100315740538635076999701756140692719210723397255502691431324570112761839227616278235060083296292632801279858212984442752785335733373688646196139583343691671728621452379995593207991074370001528914747551639365295194989942335334223462181670826316534959616265083104400756219542968919834972118280042440889116101210142292199838614846849735873593613273357906474356227025461850179735667
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'colloc2.erdfdistribution.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							40c44a588391786461e277089baf2926c456d1b8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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