spiffe.uberinternal.com
Issued by GTS CA 1D4
About this certificate
This digital certificate with serial number ca:e5:8d:a1:38:bd:16:4b:0a:00:00:00:00:f1:2f:3e was issued on by Google Trust Services LLC.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=spiffe.uberinternal.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): ca:e5:8d:a1:38:bd:16:4b:0a:00:00:00:00:f1:2f:3eSerial Number (int): 269695963722205514341782132322441703230
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: 7e:39:dd:c9:d5:12:41:50:25:62:76:b8:ab:1c:6b:88:39:df:a3:a0
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92
Fingerprint (sha1): ef:3d:d1:19:82:b5:f4:15:30:5d:93:b2:b8:9b:7d:61:0b:b0:e7:46
Fingerprint (sha256): 04:1c:74:83:71:cd:68:66:99:d6:0c:68:56:7b:78:71:bc:e2:8a:bd:3a:07:98:3d:14:c1:b9:cf:9d:e2:b1:7e
Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der
Revocation information
OCSP Server: http://ocsp.pki.goog/gts1d4CRL Distribution Point: http://crls.pki.goog/gts1d4/YZlDxvtMlVM.crl
Check the revocation status for certificate spiffe.uberinternal.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for spiffe.uberinternal.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
spiffe.uberinternal.com
Other certificates including the domain name uberinternal.com
(limited to 100 certificates)
uberhub.uberinternal.com
chatbot-uchat-integration.uberinternal.com
productops.uberinternal.com
blogadmin.uberinternal.com
metal-api-dev.uberinternal.com
productops.uberinternal.com
ubergram-api.uberinternal.com
uberhubtest.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
jmighty.uberinternal.com
*.devpod-us-va.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
uberhubtraining.uberinternal.com
devpod-eu.uberinternal.com
uview-api-staging.uberinternal.com
chef.uberinternal.com
bizconductguide.uberinternal.com
jetbrains-staging.uberinternal.com
creativeproduction.uberinternal.com
*.prod.awscorp.uberinternal.com
spiffe.uberinternal.com
bizconductguide.uberinternal.com
itelogs.uberinternal.com
lzc.uberinternal.com
corpss-test.uberinternal.com
*.vscode.devpod-nld.uberinternal.com
ktb.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
spiffe.uberinternal.com
uberhubdev.uberinternal.com
devpod-pln.uberinternal.com
ess-staging.uberinternal.com
scout.uberinternal.com
bizconductguide.uberinternal.com
uberhub.uberinternal.com
devpod-ind.uberinternal.com
creativeproduction.uberinternal.com
u4b.uberinternal.com
productops.uberinternal.com
devpod-nld.uberinternal.com
*.uberinternal.com
devpod-ind.uberinternal.com
uchat-staging.uberinternal.com
devpod-pln.uberinternal.com
lzc.uberinternal.com
u4b.uberinternal.com
jiraext.uberinternal.com
metal-api-dev.uberinternal.com
*.vscode.devpod-us-or.uberinternal.com
ess.uberinternal.com
cess.uberinternal.com
u4b.uberinternal.com
teqtivity-staging.uberinternal.com
munki.awscorp.uberinternal.com
jiraext.uberinternal.com
bizconductguide.uberinternal.com
devpod-bra.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
emearex.uberinternal.com
uberhubtest.uberinternal.com
arize-api.uberinternal.com
prod1.insightvm.uberinternal.com
scout.uberinternal.com
lzc-staging.uberinternal.com
opusimageserver-client.uberinternal.com
devpod-bra.uberinternal.com
uberhubtraining.uberinternal.com
newsroomadmin.uberinternal.com
bizconductguide.uberinternal.com
backup.uberinternal.com
lzc.uberinternal.com
stash-cdn.uberinternal.com
usearch-backend-dev.uberinternal.com
lambdai-test.uberinternal.com
photo.uber.com
ess.uberinternal.com
arize-api.uberinternal.com
vpn-emea-net1.uberinternal.com
uberhub.uberinternal.com
jira-staging.uberinternal.com
arize.uberinternal.com
ess-staging.uberinternal.com
uberhubtraining.uberinternal.com
*.devpod-ind.uberinternal.com
admindevices.uberinternal.com
*.staging.awscorp.uberinternal.com
devices.uberinternal.com
newsroomadmin.uberinternal.com
coeshift-staging.uberinternal.com
*.awscorp.uberinternal.com
ktb-staging.uberinternal.com
vpn-east.uberinternal.com
vpn.awscorp.uberinternal.com
blogadmin.uberinternal.com
chatbot-uchat-integration.uberinternal.com
productops.uberinternal.com
blogadmin.uberinternal.com
metal-api-dev.uberinternal.com
productops.uberinternal.com
ubergram-api.uberinternal.com
uberhubtest.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
jmighty.uberinternal.com
*.devpod-us-va.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
devpod-us-or.uberinternal.com
ktb-staging.uberinternal.com
uberhubtraining.uberinternal.com
devpod-eu.uberinternal.com
uview-api-staging.uberinternal.com
chef.uberinternal.com
bizconductguide.uberinternal.com
jetbrains-staging.uberinternal.com
creativeproduction.uberinternal.com
*.prod.awscorp.uberinternal.com
spiffe.uberinternal.com
bizconductguide.uberinternal.com
itelogs.uberinternal.com
lzc.uberinternal.com
corpss-test.uberinternal.com
*.vscode.devpod-nld.uberinternal.com
ktb.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
spiffe.uberinternal.com
uberhubdev.uberinternal.com
devpod-pln.uberinternal.com
ess-staging.uberinternal.com
scout.uberinternal.com
bizconductguide.uberinternal.com
uberhub.uberinternal.com
devpod-ind.uberinternal.com
creativeproduction.uberinternal.com
u4b.uberinternal.com
productops.uberinternal.com
devpod-nld.uberinternal.com
*.uberinternal.com
devpod-ind.uberinternal.com
uchat-staging.uberinternal.com
devpod-pln.uberinternal.com
lzc.uberinternal.com
u4b.uberinternal.com
jiraext.uberinternal.com
metal-api-dev.uberinternal.com
*.vscode.devpod-us-or.uberinternal.com
ess.uberinternal.com
cess.uberinternal.com
u4b.uberinternal.com
teqtivity-staging.uberinternal.com
munki.awscorp.uberinternal.com
jiraext.uberinternal.com
bizconductguide.uberinternal.com
devpod-bra.uberinternal.com
uberhubdev.uberinternal.com
uberhub.uberinternal.com
emearex.uberinternal.com
uberhubtest.uberinternal.com
arize-api.uberinternal.com
prod1.insightvm.uberinternal.com
scout.uberinternal.com
lzc-staging.uberinternal.com
opusimageserver-client.uberinternal.com
devpod-bra.uberinternal.com
uberhubtraining.uberinternal.com
newsroomadmin.uberinternal.com
bizconductguide.uberinternal.com
backup.uberinternal.com
lzc.uberinternal.com
stash-cdn.uberinternal.com
usearch-backend-dev.uberinternal.com
lambdai-test.uberinternal.com
photo.uber.com
ess.uberinternal.com
arize-api.uberinternal.com
vpn-emea-net1.uberinternal.com
uberhub.uberinternal.com
jira-staging.uberinternal.com
arize.uberinternal.com
ess-staging.uberinternal.com
uberhubtraining.uberinternal.com
*.devpod-ind.uberinternal.com
admindevices.uberinternal.com
*.staging.awscorp.uberinternal.com
devices.uberinternal.com
newsroomadmin.uberinternal.com
coeshift-staging.uberinternal.com
*.awscorp.uberinternal.com
ktb-staging.uberinternal.com
vpn-east.uberinternal.com
vpn.awscorp.uberinternal.com
blogadmin.uberinternal.com
Certificate
The complete raw certificate details for spiffe.uberinternal.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEcjCCA1qgAwIBAgIRAMrljaE4vRZLCgAAAADxLz4wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxRDQwHhcNMjEwNzA4MjEzNDA4WhcNMjExMDA2 MjIzNDA4WjAiMSAwHgYDVQQDExdzcGlmZmUudWJlcmludGVybmFsLmNvbTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOx4NgzB6/f04K3yTaym6vmatQv4 t+Tl+cvtk/eNkrJK5a+9px2j1PqwwIPcHd0N4Q550RHRS2T26AqA/YPVWbdl+HX9 LwMWz21uVSsrB3XaugbXjpj2s2WctyX+cRV6KFXqoKBXhoAYvh8rSDty3BtLMBSK 47tmzvZIaz3gfiunW9eOpVE6fZ3bZw+ssvj5WXh+6EKkQKCU6+Nfrtq/Xhu18ruz hYzalA6szSp8L9buWaRNXkn4XrKH6dCvu32dqBNMwffVjr+C4LVDR51jIFwxRX27 3AQ9gm3DMbZyvOPH6YDaxIdJksIyRCqA3JfV4f/8BcInaNP6rdRP0Aeh7gsCAwEA AaOCAX0wggF5MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggrBgEFBQcDATAM BgNVHRMBAf8EAjAAMB0GA1UdDgQWBBR+Od3J1RJBUCVidrirHGuIOd+joDAfBgNV HSMEGDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjBqBggrBgEFBQcBAQReMFwwJwYI KwYBBQUHMAGGG2h0dHA6Ly9vY3NwLnBraS5nb29nL2d0czFkNDAxBggrBgEFBQcw AoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMWQ0LmRlcjAiBgNVHREE GzAZghdzcGlmZmUudWJlcmludGVybmFsLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAEC ATAMBgorBgEEAdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBr aS5nb29nL2d0czFkNC9ZWmxEeHZ0TWxWTS5jcmwwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBACqTr/n+T5Hq94banjUY+0+L0+ymVkP2cEvZ O1fMMtVJ94zRa76g1JyJbWJb29fdlAkzfiwwbmp8voOpDh5fXJWOWfhNdAVtXjE8 MiBsgZbOKSQ7R0bAiv7cLLtFwuWLoUNGQ4PDvrP7hP886B+DnJqn0TW1cSd6BMZq 0EFpkhQXfOd1y7rtZO6Rk/sS+Xw720F/sGILSwXEoQkQhw0ggBLPpU/iauceR0id qmrpf6c1DbfAnIQcOcxcmTiKdUWz2OuPtdoS2rXQoVwOi6RiW78+1IetmUcV7lyG 4UiArmrS6tJZzVWGDHzVcsD0fUqqBVKedpuhR/SmxIcNrcAlY6A= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Hg2DMHr9/TgrfJNrKbq +Zq1C/i35OX5y+2T942Sskrlr72nHaPU+rDAg9wd3Q3hDnnREdFLZPboCoD9g9VZ t2X4df0vAxbPbW5VKysHddq6BteOmPazZZy3Jf5xFXooVeqgoFeGgBi+HytIO3Lc G0swFIrju2bO9khrPeB+K6db146lUTp9ndtnD6yy+PlZeH7oQqRAoJTr41+u2r9e G7Xyu7OFjNqUDqzNKnwv1u5ZpE1eSfhesofp0K+7fZ2oE0zB99WOv4LgtUNHnWMg XDFFfbvcBD2CbcMxtnK848fpgNrEh0mSwjJEKoDcl9Xh//wFwido0/qt1E/QB6Hu CwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 269695963722205514341782132322441703230 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-07-08 21:34:08 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-10-06 22:34:08 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'spiffe.uberinternal.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 29851518290593145715628773324437441251538792975791770341541138859617422847919810524373894007439581878243256706723973390004222842519701119812573451257513828212103056867599868443042907733812435521089022362821286413044974740452091013688784395144930648000303793882200446425364828892513640952041607740768751130221160583656274456014198530050054945094500747178159728456840862144698920555105068415533875770935935964696228519151715539657320995087276878270598062477513209323235975617384858073970071165601024116993954398710806804805847922100414659253330295502855721128119283407487924414451996257786534922746771804960433570442763 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 7e39ddc9d5124150256276b8ab1c6b8839dfa3a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/gts1d4' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spiffe.uberinternal.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/YZlDxvtMlVM.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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