*.kuliah.itb.ac.id

Issued by AlphaSSL CA - SHA256 - G2

About this certificate

This digital certificate with serial number 56:ca:20:be:90:18:eb:99:14:c7:7d:e7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.kuliah.itb.ac.id,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 56:ca:20:be:90:18:eb:99:14:c7:7d:e7
Serial Number (int): 26860068491189964820697284071
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 28:06:ab:0c:ab:74:ea:f2:e1:84:f5:cd:7f:cd:9d:2e:4e:46:d1:06
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7

Fingerprint (sha1): 8c:59:9d:6d:6d:b9:34:c0:d8:b2:32:22:22:50:bc:75:67:3c:1b:e6
Fingerprint (sha256): 03:a1:76:8a:90:5c:68:7e:9f:0d:8f:39:66:df:46:ce:fa:84:e0:32:1e:e4:cc:8f:a2:41:d9:24:e7:3c:86:a1

Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2
CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl

Check the revocation status for certificate *.kuliah.itb.ac.id

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.kuliah.itb.ac.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.kuliah.itb.ac.id
kuliah.itb.ac.id

Other certificates including the domain name itb.ac.id

(limited to 100 certificates)
knpts.ftsl.itb.ac.id
www.as.itb.ac.id
analytics.karir.itb.ac.id
concern.itb.ac.id
kep.itb.ac.id
g.six.itb.ac.id
kuliah2021.tf.itb.ac.id
admission.itb.ac.id
help.fttm.itb.ac.id
robotika.unit.itb.ac.id
icgere.fttm.itb.ac.id
tuid.km.itb.ac.id
ftsl19.kuliah.itb.ac.id
aksantara.kemahasiswaan.itb.ac.id
nautika.unit.itb.ac.id
alumni.if.stei.itb.ac.id
alumni.itb.ac.id
sik.fti.itb.ac.id
webmail.icici-bme.itb.ac.id
tf.fti.itb.ac.id
ecosystem.sbm.itb.ac.id
himasda.ftsl.itb.ac.id
www.lppm.itb.ac.id
ccc.itb.ac.id
percama.itb.ac.id
aerocreation.ftmd.itb.ac.id
medphys.fi.itb.ac.id
fsrd.itb.ac.id
pertunjukan.lfm.itb.ac.id
psa.itb.ac.id
gamais.itb.ac.id
*.stei.itb.ac.id
subaru.ccc.itb.ac.id
hmrh.sith.itb.ac.id
ciel.sbm.itb.ac.id
geothermal.itb.ac.id
integrasi.itb.ac.id
yon1.unit.itb.ac.id
redmine.ditsti.itb.ac.id
*.arc.itb.ac.id
homecoming.itb.ac.id
tenismeja.itb.ac.id
proposal.lp4.itb.ac.id
pri.itb.ac.id
ukm.itb.ac.id
ciel.sbm.itb.ac.id
asasi.itb.ac.id
elibpascasi.ftsl.itb.ac.id
mg.fttm.itb.ac.id
ck4bc.sbm.itb.ac.id
ss.fa.itb.ac.id
geothermal.itb.ac.id
logistics-center.itb.ac.id
esdc.aryya.admin.if.itb.ac.id
www.fmipa.itb.ac.id
himastron.as.itb.ac.id
pme.itb.ac.id
dosen.fti.itb.ac.id
taiga.if.itb.ac.id
medphys.fi.itb.ac.id
research.fitb.itb.ac.id
kmpaganesha.itb.ac.id
kep.itb.ac.id
perisaidiri.itb.ac.id
dev.help.fttm.itb.ac.id
hidrografi.gd.itb.ac.id
asrama.itb.ac.id
layanan.uptor.itb.ac.id
p2d.itb.ac.id
*.arc.itb.ac.id
beasiswa.itb.ac.id
new-multisite.itb.ac.id
mwa-wm.itb.ac.id
dc.ftmd.itb.ac.id
wisuda.lfm.itb.ac.id
atletikganesha.unit.itb.ac.id
selva.sith.itb.ac.id
care.fitb.itb.ac.id
aksantara.kemahasiswaan.itb.ac.id
s3tmi.fti.itb.ac.id
kompaq.mtk.itb.ac.id
api.esdc.aryya.admin.if.itb.ac.id
*.kuliah.itb.ac.id
debust.unit.itb.ac.id
tpb19.kuliah.itb.ac.id
imk-artha.sbm.itb.ac.id
terra.gf.itb.ac.id
sipintar.ftmd.itb.ac.id
fpa.itb.ac.id
mwa-wm.itb.ac.id
desainproduk.fsrd.itb.ac.id
new-multisite.itb.ac.id
icgere.fttm.itb.ac.id
ojs.itb.ac.id
debust.unit.itb.ac.id
inventory.fa.itb.ac.id
jerse.fttm.itb.ac.id
jerse.fttm.itb.ac.id
scaapg.gc.itb.ac.id
asasi.itb.ac.id

Certificate

The complete raw certificate details for *.kuliah.itb.ac.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIF8TCCBNmgAwIBAgIMVsogvpAY65kUx33nMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTE5MDMyMDA4MzcxMloXDTIwMDUy
NTAzNTgwN1owQDEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRsw
GQYDVQQDDBIqLmt1bGlhaC5pdGIuYWMuaWQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC8X2D2ckeLsNjOLzo9r9BYMKAEkgwqbXSNn2qxVt8Fxu8eL9Lj
f+nNhxgl+nD/3RT/ts9mCLgkNcCjsPiNQT0706sqYQ6DbMkpFXSgJ3qbCYlSgjNv
DhicO3WLl6b0Und1/228cRPD1FTeOn1iirGEGnxyb/sPpFDMnO310K8ILymETb9C
sy9IejeF3vqc595804xvFerCeyUCBJszQ2PFfDfJdSFOCym3WGqwDSAudawgelei
Lx1vXMfUk/T8vBQIkVYF9cPDVBbf1EEV1cn/1lBp4a6DalGlBQJTI26QGxsLy5YP
WuDEH7tJSD08iX90w54cXksDXQNo/63Swc/DAgMBAAGjggLdMIIC2TAOBgNVHQ8B
Af8EBAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggrBgEFBQcwAoY2aHR0cDovL3Nl
Y3VyZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhc2hhMmcycjEuY3J0MDUG
CCsGAQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3NhbHBoYXNo
YTJnMjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgowNDAyBggrBgEFBQcCARYmaHR0
cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkG
A1UdEwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NybDIuYWxwaGFzc2wu
Y29tL2dzL2dzYWxwaGFzaGEyZzIuY3JsMC8GA1UdEQQoMCaCEioua3VsaWFoLml0
Yi5hYy5pZIIQa3VsaWFoLml0Yi5hYy5pZDAdBgNVHSUEFjAUBggrBgEFBQcDAQYI
KwYBBQUHAwIwHQYDVR0OBBYEFCgGqwyrdOry4YT1zX/NnS5ORtEGMB8GA1UdIwQY
MBaAFPXN1TwIUPlqTzq3l9pWg+Zp0mj3MIIBBQYKKwYBBAHWeQIEAgSB9gSB8wDx
AHYAVYHUwhaQNgFK6gubVzxT8MDkOHhwJQgXL6OqHQcT0wwAAAFpmj9V+wAABAMA
RzBFAiEA/BcBlPLppiulMRsmN3YblaSr5BtWarMvKDfJOEcw+YMCIA1XTw+esgfn
stwdaYx/oAYtaBXlrsq7E98bpUKjoSbVAHcAu9nfvB+KcbWTlCOXqpJ7RzhXlQqr
UugakJZkNo4e0YUAAAFpmj9ZYQAABAMASDBGAiEAzZORHkrZQ6mnfQlE3HwJorPr
YJn/TA8xa8CxIcHzS/4CIQCA34ybyttJAhORQPKbRbu9xu/nO6szJXySMsPe5XeN
jDANBgkqhkiG9w0BAQsFAAOCAQEAgnFIPMDhSpjUR5t7uVaMmZA5vEt/mRi9pjNa
698wxSG3KI0EDkxywA1MUplGzNX4Fg//ZvlzzAQ6PH0NqvEKgIumW5FPn9TMlZri
AP33XDqEP9i0ANuW650G+AwZTHNtQhvJBI8+D7aEk94gctxGYySLko+a9wnIePvq
0iNyOPQY6nsqANVnrUM825A/c54TkMyfmbi2jnPWKnrozwZZqL1wR5TUlKJcJEh7
kRNF/7O2TPplouQuicTbRCE3zhkVh62v8fsjTwEBC+Klb6g8bBxlq2oevo1ZuGk7
jdbQ43sHyj4MpXbDEjIYEEyXrCPb3O7bFmJ9nhFit4bQ2pphCw==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF9g9nJHi7DYzi86Pa/Q
WDCgBJIMKm10jZ9qsVbfBcbvHi/S43/pzYcYJfpw/90U/7bPZgi4JDXAo7D4jUE9
O9OrKmEOg2zJKRV0oCd6mwmJUoIzbw4YnDt1i5em9FJ3df9tvHETw9RU3jp9Yoqx
hBp8cm/7D6RQzJzt9dCvCC8phE2/QrMvSHo3hd76nOfefNOMbxXqwnslAgSbM0Nj
xXw3yXUhTgspt1hqsA0gLnWsIHpXoi8db1zH1JP0/LwUCJFWBfXDw1QW39RBFdXJ
/9ZQaeGug2pRpQUCUyNukBsbC8uWD1rgxB+7SUg9PIl/dMOeHF5LA10DaP+t0sHP
wwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 26860068491189964820697284071
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-03-20 08:37:12 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-05-25 03:58:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.kuliah.itb.ac.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23779834353353252266149307428065011982178519263746603371199115361176339634596780407228112232059153795183795171347214551973788786336098510158896855928791155093842446991753605085129664258675941749405570203641941178494255348704932682447873761580672261999858200428344886740929747278781728518875893578127245105748948952888098489743647323492078369686239048850144956215050891025183343952234214412530659158745480000117636546960114586899300724790146900237362247282754440452790300830570711265708958355820948416291717392212788715289271504787122353009750642491206336776102839143298244849609790940712252680210616969115941292068803
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.kuliah.itb.ac.id'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kuliah.itb.ac.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2806ab0cab74eaf2e184f5cd7fcd9d2e4e46d106
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
							00f10076005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c000001699a3f55fb0000040300473045022100fc170194f2e9a62ba5311b2637761b95a4abe41b566ab32f2837c9384730f98302200d574f0f9eb207e7b2dc1d698c7fa0062d6815e5aecabb13df1ba542a3a126d5007700bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed185000001699a3f59610000040300483046022100cd93911e4ad943a9a77d0944dc7c09a2b3eb6099ff4c0f316bc0b121c1f34bfe02210080df8c9bcadb4902139140f29b45bbbdc6efe73bab33257c9232c3dee5778d8c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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