subscribe.hearstmags.com

- The Hearst Corporation -

Issued by Verizon Akamai SureServer CA G14-SHA2

About this certificate

This digital certificate with serial number 29:65:00:b9:79:16:80:db:02:c9:a5:24:1d:b1:c7:df:ea:05:01:11 was issued on by Verizon Enterprise Solutions.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

The Hearst Corporation

Organization: The Hearst Corporation
Organization unit: Digital
State / Province: NY
Locality: New York
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 29:65:00:b9:79:16:80:db:02:c9:a5:24:1d:b1:c7:df:ea:05:01:11
Serial Number (int): 236321059982020325325591936092526987012513005841
Serial Number lenght: 158 bits, 20 octets

SubjectKeyId: 1c:55:21:27:39:ca:f3:91:c6:21:e6:09:07:0d:52:7a:b6:c1:09:17
AuthorityKeyId: f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11

Fingerprint (sha1): 3c:d8:80:be:0e:a8:d5:2e:93:90:c3:e8:3b:fe:26:b8:ab:3f:bb:01
Fingerprint (sha256): 03:38:d3:a9:ef:68:12:8f:50:e1:1d:27:15:ee:10:67:e0:73:ba:ad:53:de:c1:71:e5:88:2c:0b:78:fb:a9:2a

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.der

Revocation information

OCSP Server: http://vassg142.ocsp.omniroot.com
CRL Distribution Point: http://vassg142.crl.omniroot.com/vassg142.crl

Check the revocation status for certificate subscribe.hearstmags.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for subscribe.hearstmags.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

subscribe.hearstmags.com

Other certificates including the domain name hearstmags.com

(limited to 100 certificates)
wpm.ccmp.eu
*.25ans.jp
subscribe.hearstmags.com
wpm03.eccmp.com
cosmopolitan.com
services.hearstmags.com
preferences.hearstmags.com
wpm.ccmp.eu
preferences.hearstmags.com
cosmopolitan.com
wpm03.eccmp.com
subscribe.hearstmags.com
wpm.ccmp.eu
admin.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm03.eccmp.com
hearst-hdm.map.fastly.net
wpm.ccmp.eu
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm03.eccmp.com
cosmopolitan.com
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
stage.services.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
services.hearstmags.com
wpm03.eccmp.com
stage.services.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
admin.hearstmags.com
wpm03.eccmp.com
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
stage.services.hearstmags.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
wpm.ccmp.eu
services.hearstmags.com
subscribe.hearstmags.com
services.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
subscribe.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
cosmopolitan.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
cosmopolitan.com
hearst-hdm.map.fastly.net
cosmopolitan.com
wpm.ccmp.eu
optout.hearstmags.com
cosmopolitan.com
cosmopolitan.com
hearst-hdm.map.fastly.net
preferences.hearstmags.com
wpm.ccmp.eu
subscribe.hearstmags.com
admin.hearstmags.com
subscribe.hearstmags.com
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
hearst-hdm.map.fastly.net
wpm.ccmp.eu
wpm.ccmp.eu
subscribe.hearstmags.com
hearst-hdm.map.fastly.net
cosmopolitan.com
subscribe.hearstmags.com

Certificate

The complete raw certificate details for subscribe.hearstmags.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFiDCCBHCgAwIBAgIUKWUAuXkWgNsCyaUkHbHH3+oFAREwDQYJKoZIhvcNAQEL
BQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoT
HFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1
c3QxLjAsBgNVBAMTJVZlcml6b24gQWthbWFpIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNI
QTIwHhcNMTUxMDEwMDk1MzMwWhcNMTYxMDEwMDk1MzI4WjCBgzELMAkGA1UEBhMC
VVMxCzAJBgNVBAgTAk5ZMREwDwYDVQQHEwhOZXcgWW9yazEfMB0GA1UEChMWVGhl
IEhlYXJzdCBDb3Jwb3JhdGlvbjEQMA4GA1UECxMHRGlnaXRhbDEhMB8GA1UEAxMY
c3Vic2NyaWJlLmhlYXJzdG1hZ3MuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArGs7QWDE6eDS7muZRrN0aN1CcqAh3ZtSMS6J2r0DAobhoU55Kfcn
cUh7AlNN5k1Su+NTXHS86Y2GNf4VhVZ2F0a7J33JQXzPcN93JTB87T3ewtMdMCgW
tEprmmF5f2TVtLik94F0Jg5nEP+FjoeIjTDHgq808CYOQIuLoGiwBgHkESXtL6GV
LFg73fWiPwgxyM8IVFd1SOd8qL0E0GMPbcVnAX0hNGpvUV+LnsMTM6dT1rUemcFf
nqSkgTP/yYny+JxsiIPaZeZbUMuXe4Qobd1qxKVWYArRGfjpRvHPU9tt+CTR25h3
UQNLOtbkYOHKP5D1QZM9l2SrATxDZCGEVQIDAQABo4IB5jCCAeIwDAYDVR0TAQH/
BAIwADBMBgNVHSAERTBDMEEGCSsGAQQBsT4BMjA0MDIGCCsGAQUFBwIBFiZodHRw
czovL3NlY3VyZS5vbW5pcm9vdC5jb20vcmVwb3NpdG9yeTCBrwYIKwYBBQUHAQEE
gaIwgZ8wLQYIKwYBBQUHMAGGIWh0dHA6Ly92YXNzZzE0Mi5vY3NwLm9tbmlyb290
LmNvbTA2BggrBgEFBQcwAoYqaHR0cHM6Ly9jYWNlcnQuYS5vbW5pcm9vdC5jb20v
dmFzc2cxNDIuY3J0MDYGCCsGAQUFBzAChipodHRwczovL2NhY2VydC5hLm9tbmly
b290LmNvbS92YXNzZzE0Mi5kZXIwIwYDVR0RBBwwGoIYc3Vic2NyaWJlLmhlYXJz
dG1hZ3MuY29tMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHwYDVR0jBBgwFoAU+L36r3N3xscb+UtNEafRM6+vchEwPgYDVR0f
BDcwNTAzoDGgL4YtaHR0cDovL3Zhc3NnMTQyLmNybC5vbW5pcm9vdC5jb20vdmFz
c2cxNDIuY3JsMB0GA1UdDgQWBBQcVSEnOcrzkcYh5gkHDVJ6tsEJFzANBgkqhkiG
9w0BAQsFAAOCAQEAneHQfb4eh/N85aPmiX1AtwcQul151P3Nz1aH3zncnCo0d+SG
lVoQ7N8yUhQ5vqvzpfvOuW/OU3jwCrUuJjPRBbfzrHCtg8x9bysGZe+jRbaCFPNh
EG5iJjV7PjJV8ZDstzz4nIGlejEzPYgwkewfQD0gSIXGNUHk/NkVMm0xI+t3aIOL
dGFlPNdUQfSl7E8UmqqgXz4uXxaz9V+N33RoRPjH0vhOn0rAFAIsyD8xa2ZC8TpQ
NjuXYPbhRI2dZZ7ZonhtOsTTEfXOVpPdv/mneJvaajmq+/SmV6XRqXdaPPO0E/vQ
c8Ypb1aILJb4zn6fhftk/pT7OeNZjqb1NpHPaQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArGs7QWDE6eDS7muZRrN0
aN1CcqAh3ZtSMS6J2r0DAobhoU55KfcncUh7AlNN5k1Su+NTXHS86Y2GNf4VhVZ2
F0a7J33JQXzPcN93JTB87T3ewtMdMCgWtEprmmF5f2TVtLik94F0Jg5nEP+FjoeI
jTDHgq808CYOQIuLoGiwBgHkESXtL6GVLFg73fWiPwgxyM8IVFd1SOd8qL0E0GMP
bcVnAX0hNGpvUV+LnsMTM6dT1rUemcFfnqSkgTP/yYny+JxsiIPaZeZbUMuXe4Qo
bd1qxKVWYArRGfjpRvHPU9tt+CTR25h3UQNLOtbkYOHKP5D1QZM9l2SrATxDZCGE
VQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 236321059982020325325591936092526987012513005841
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-10 09:53:30 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-10 09:53:28 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'New York'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'The Hearst Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'subscribe.hearstmags.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21765866260996783684138877566898230654947482357965413022400893321792672165054331402067443353971832554516648367607219547773955209972231388401330113037182257894149125696872301906604399702167064662727895181408860231064076964315481953483969458289491437567703790495138865950291561569182247786441261220730649669587314845821448701972857066140218436951835701523982626764422931138216177022400546249806995553589419958470930707331035650822890748827119643681946785215665336278194136848936554477433819973140034140342283734139360028637654478489656346915842103326175301619793054046817340276367832767007431640115991029036386487469141
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'subscribe.hearstmags.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8bdfaaf7377c6c71bf94b4d11a7d133afaf7211
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.crl.omniroot.com/vassg142.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c55212739caf391c621e609070d527ab6c10917
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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