WIPZ-INFW-ASP.cdcres.org

- Centers for Disease Control and Prevention -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number b1:2d:50:cc:e5:20:ee:bf:00:00:00:00:51:02:4f:8c was issued on by Entrust, Inc..

With 19 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Centers for Disease Control and Prevention

Organization: Centers for Disease Control and Prevention
State / Province: Georgia
Locality: Atlanta
Country: US

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): b1:2d:50:cc:e5:20:ee:bf:00:00:00:00:51:02:4f:8c
Serial Number (int): 235508647438789502112683236794514427788
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: a4:b1:90:3d:d7:26:13:bc:eb:81:a4:d3:64:35:28:2c:34:0e:b0:27
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 9a:8c:45:ee:8b:14:95:d2:15:f3:68:a6:3a:40:96:8b:a6:65:9d:e8
Fingerprint (sha256): 03:47:8a:e4:2b:c4:f0:95:e2:9e:af:28:07:5e:72:3e:7d:77:0f:d3:9a:94:61:a7:9d:86:29:bf:41:e4:c2:2f

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate WIPZ-INFW-ASP.cdcres.org

19

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for WIPZ-INFW-ASP.cdcres.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

WIPZ-INFW-ASP.cdcres.org
ATSDR.cdc.gov
ATSDR.glb.cdc.gov
www.ATSDR.cdc.gov
Emergency.cdc.gov
Emergency.glb.cdc.gov
www.Emergency.cdc.gov
Emergency-1.cdc.gov
Emergency-2.cdc.gov
Emergency-Origin.cdc.gov
Emergency-Origin.glb.cdc.gov
WebAppa.cdc.gov
WebAppa.glb.cdc.gov
WebApp.cdc.gov
WebApp.glb.cdc.gov
WWW2a.cdc.gov
WWW2a.glb.cdc.gov
WWW2.cdc.gov
WWW2.glb.cdc.gov

Other certificates including the domain name cdcres.org

(limited to 100 certificates)
NDMSIA.cdc.gov
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-NET1.cdcres.org
WWWNC.cdc.gov
WIPZ-INFW-CSAM.cdcres.org
WIPZ-INFW-CSAM.cdcres.org
NDMSIA.cdc.gov
CSAMS.cdc.gov
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-NET.cdcres.org
Wipz-infw-blk.cdcres.org
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-CS.cdcres.org
WIPZ-INFW-CSAM.cdcres.org
WIPZ-INFW-CSAM.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-NET.cdcres.org
aspz-infm-gw06.cdcres.org
openteam.cdc.gov
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-NET1.cdcres.org
WIPZ-INFW-AKM.cdcres.org
WIPZ-CWS-ASP.cdcres.org
NDMSIA.cdc.gov
WIPZ-CWS-ASP.cdcres.org
WIPZ-INFW-AKM.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-AKM.cdcres.org
WIPZ-INFW-NET.cdcres.org
CSAMS.cdc.gov
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-AKM.cdcres.org
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-ASP.cdcres.org
NDMSIA.cdc.gov
WIPZ-INFW-NET.cdcres.org
WIPZ-INFW-CSAM.cdcres.org
WIPZ-INFW-ASP.cdcres.org
WIPZ-INFW-CS.cdcres.org

Certificate

The complete raw certificate details for WIPZ-INFW-ASP.cdcres.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2TW7oZzFmzz4f1Jr/ubc
tWomLSvbu8i3WWkL1DKhnraHT+BgO6JMR8fvu1Wzd+xAk8ZtnxPgXKg+2HlfPKHb
ghmzIzuu7nGtBeq19z5XiIdyn5Yih2bgfm9uYhHiCHlZV94JqTzWYa5jmCWyk5s/
AaFjkvH4DHDzTedUwLCtfmLZS/TLgmP7EeBz7nEyq/3Hrp+VwYnKTDUxPO7LqX30
PIrU9W7WTOClROggf4GChUyFQqTL74blmNcHihxGKjbfKkPMEtQ3GkWCOXy5ZXvS
8EHz4op203//HpiCm4egaiy5rdwjvkVnHDffLOCW21bsIQMkNJKH48ek3QCfdNYR
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 235508647438789502112683236794514427788
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-09 11:15:22 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-04-08 11:45:21 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Georgia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Atlanta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Centers for Disease Control and Prevention'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'WIPZ-INFW-ASP.cdcres.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27420208875310013977415325971803898854676717889460220951024447504812824679839634786698717524323678678723108834736269163109801243751665348188780086080684550457320579030789929260203331847031239896816830702642956990479603573731783128544514472949312742472315271922881453039112968573806995882418655573096418633410366921164046283439953929025022463130953358425299198227827897381504740461074016365967904924593280298032653772789029734915389725314893247444128466325851697542271822683882947178675141622800675516693021704537888473911219932358762705054500959324536444330684544820944587016836834835651715322359620520490781333918189
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (386 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WIPZ-INFW-ASP.cdcres.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ATSDR.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ATSDR.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ATSDR.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Emergency.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency-1.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency-2.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency-Origin.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Emergency-Origin.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WebAppa.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WebAppa.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WebApp.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WebApp.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW2a.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW2a.glb.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW2.cdc.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'WWW2.glb.cdc.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a4b1903dd72613bceb81a4d36435282c340eb027
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b47beffdee11b57624e740eba36e212070829e78ed1cf277ba27bd56d18dda5abd68741e8fa16b8f1593ec5c20695f31b1332f8b61098cfd9af86991a70c20af72cac7aef1859cc882404edaf5061e4e45e99aef4115a848b084359004c9d83ac46b34cdfc2de672abedcd0998ce510ea2c85d11a523249a5061216b8eddff4a47edfb05647ce45d22c1c6fcb053ffa87a95986817432d016f728e9bde04172b3b6edd941da134da878f8ca74e0b02afff9990bd5221236644733dfdc2d0f6931396b031c9b30448be09aa6740f957c6439a803e033ca1dd5fdd3827b9133127a8fecde17d88c8e094a7e7d07e49d90a45b4fa93a83357f7ca958c009146a8b2