kara.sfr.fr
- SFR -
Issued by CLASS 2 KEYNECTIS CA
About this certificate
This digital certificate with serial number 11:27:5f:7f:8d:21:c4:92:1c:bf:1e:81:e4:f0:2b:5b:e0:a0 was issued on by KEYNECTIS.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
SFR
Organization:
SFR
Country:
FR
KEYNECTIS
Organization:
KEYNECTIS
Country:
FR
This certificate has expire since
Certificate Details
Serial Number (hex): 11:27:5f:7f:8d:21:c4:92:1c:bf:1e:81:e4:f0:2b:5b:e0:a0Serial Number (int): 1494306812093636513177415274491375500648608
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: 8c:df:29:b2:83:b5:3e:db:76:92:52:04:ef:ac:65:ac:f7:26:ca:e3
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99
Fingerprint (sha1): da:7c:1f:d0:e3:40:44:2f:3e:b9:cd:4a:b0:03:34:79:1b:6a:b7:55
Fingerprint (sha256): 04:28:79:5d:d7:32:1a:94:56:97:5d:02:ed:e4:2f:60:9c:d5:68:ab:5b:e6:26:5d:c4:1d:4d:db:31:5e:3e:5d
Revocation information
OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocspCRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl
Check the revocation status for certificate kara.sfr.fr
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for kara.sfr.fr
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
kara.sfr.fr
Other certificates including the domain name sfr.fr
(limited to 100 certificates)
osiri.sfr.fr
brandcenter.sfr.fr
sport.sfr.fr
maestro.sfr.fr
cms.ezy-distrib.sfr.fr
harmony-ws.sfr.fr
sfr-messagerie.services.sfr.fr
pontis.sfr.fr
analytics.sfr.fr
crm.sfr.fr
cms.sfr.fr
api-messagerie.sfr.fr
fsb2.sfr.fr
elr.sfr.fr
shop.ws-intmicrosites.sfr.fr
mdm-as.sfr.fr
*.services.sfr.fr
tonalites.sfr.fr
etoolonline.sfr.fr
pates-er.pprod.partenaires.sfr.fr
cms-hotspotsfr-test.sfr.fr
pates-xml.pprod.partenaires.sfr.fr
applimabox.sfr.fr
secure04.lithium.com
api.sfr.fr
contacteznous.sfr.fr
octopus-sd.sfr.fr
secure04.lithium.com
rp-test1.sso-a.sfr.fr
billing.m.sfr.fr
ulysseservices.sfr.fr
autorepair.sfr.fr
asc-ws.sfr.fr.casepp.sfr.fr
*.casepp.sfr.fr
rp-test2.sso-a.sfr.fr
was.sfr.fr
extrapart.sfr.fr
dw0c.sfr.fr
admin-scpsppr.sdp.sfr.fr
mdm-as.sfr.fr
secure.hotspot.sfr.fr
mypc.sfr.fr
secure04.lithium.com
kara.sfr.fr
mm-ds-stage2.sfr.fr
vadist-res.sfr.fr
distributeurs.sfr.fr
ezy.sfr.fr
filtrag.sfr.fr
monprofilwap.sfr.fr
secure01.stage.lithium.com
fournisseurs-pack.sfr.fr
boctc-gallery.funinfo.sfr.fr
nearlive.sfr.fr
api.mes-contenus.sfr.fr
repondeurplusentreprise-wifi-middle-ppd.sfr.fr
ctc.sfr.fr
dev-home.sfr.fr
p2s-ws.sfr.fr
appcol.sfr.fr
myprofil.sfr.fr
push.sfr.fr
8ezc.sfr.fr
www.gangstarneworleans.com
sfrbusinessteam-marketing.sfr.fr
distributeurs.sfr.fr
adminpro.sfr.fr
moncompte-neufbox.sfr.fr
campus.sfr.com
mdm.sfr.fr
docs.sfr.fr
crm.sfr.fr
extranet.funinfo.sfr.fr
pates.services.sfr.fr
play-fut.sfr.fr
pp.home.sfr.fr
mdm.sfr.fr
mdm-ds.sfr.fr
xml.sfr.fr
assistance.cms.sfr.fr
businessapps.sfr.fr
mdm-ds.sfr.fr
analytics.sfr.fr
paws.partenaires.sfr.fr
pates.pprod.pdct.sfr.fr
secure01.stage.lithium.com
tv.sfr.fr
test-int-admin-ctc.funinfo.sfr.fr
secure01.stage.lithium.com
prev-hotspot.sfr.fr
questions-reponses.sfr.fr
jeux-mobile.sfr.fr
video-qlf.wapsvp.sfr.fr
mdm-as.sfr.fr
id.sfr.fr
campus.sfr.com
adminpatesng.pprod.sfr.fr
jg0c.sfr.fr
espace-client.sfr.fr
m.red.sfr.fr
brandcenter.sfr.fr
sport.sfr.fr
maestro.sfr.fr
cms.ezy-distrib.sfr.fr
harmony-ws.sfr.fr
sfr-messagerie.services.sfr.fr
pontis.sfr.fr
analytics.sfr.fr
crm.sfr.fr
cms.sfr.fr
api-messagerie.sfr.fr
fsb2.sfr.fr
elr.sfr.fr
shop.ws-intmicrosites.sfr.fr
mdm-as.sfr.fr
*.services.sfr.fr
tonalites.sfr.fr
etoolonline.sfr.fr
pates-er.pprod.partenaires.sfr.fr
cms-hotspotsfr-test.sfr.fr
pates-xml.pprod.partenaires.sfr.fr
applimabox.sfr.fr
secure04.lithium.com
api.sfr.fr
contacteznous.sfr.fr
octopus-sd.sfr.fr
secure04.lithium.com
rp-test1.sso-a.sfr.fr
billing.m.sfr.fr
ulysseservices.sfr.fr
autorepair.sfr.fr
asc-ws.sfr.fr.casepp.sfr.fr
*.casepp.sfr.fr
rp-test2.sso-a.sfr.fr
was.sfr.fr
extrapart.sfr.fr
dw0c.sfr.fr
admin-scpsppr.sdp.sfr.fr
mdm-as.sfr.fr
secure.hotspot.sfr.fr
mypc.sfr.fr
secure04.lithium.com
kara.sfr.fr
mm-ds-stage2.sfr.fr
vadist-res.sfr.fr
distributeurs.sfr.fr
ezy.sfr.fr
filtrag.sfr.fr
monprofilwap.sfr.fr
secure01.stage.lithium.com
fournisseurs-pack.sfr.fr
boctc-gallery.funinfo.sfr.fr
nearlive.sfr.fr
api.mes-contenus.sfr.fr
repondeurplusentreprise-wifi-middle-ppd.sfr.fr
ctc.sfr.fr
dev-home.sfr.fr
p2s-ws.sfr.fr
appcol.sfr.fr
myprofil.sfr.fr
push.sfr.fr
8ezc.sfr.fr
www.gangstarneworleans.com
sfrbusinessteam-marketing.sfr.fr
distributeurs.sfr.fr
adminpro.sfr.fr
moncompte-neufbox.sfr.fr
campus.sfr.com
mdm.sfr.fr
docs.sfr.fr
crm.sfr.fr
extranet.funinfo.sfr.fr
pates.services.sfr.fr
play-fut.sfr.fr
pp.home.sfr.fr
mdm.sfr.fr
mdm-ds.sfr.fr
xml.sfr.fr
assistance.cms.sfr.fr
businessapps.sfr.fr
mdm-ds.sfr.fr
analytics.sfr.fr
paws.partenaires.sfr.fr
pates.pprod.pdct.sfr.fr
secure01.stage.lithium.com
tv.sfr.fr
test-int-admin-ctc.funinfo.sfr.fr
secure01.stage.lithium.com
prev-hotspot.sfr.fr
questions-reponses.sfr.fr
jeux-mobile.sfr.fr
video-qlf.wapsvp.sfr.fr
mdm-as.sfr.fr
id.sfr.fr
campus.sfr.com
adminpatesng.pprod.sfr.fr
jg0c.sfr.fr
espace-client.sfr.fr
m.red.sfr.fr
Certificate
The complete raw certificate details for kara.sfr.fr in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEczCCA1ugAwIBAgISESdff40hxJIcvx6B5PArW+CgMA0GCSqGSIb3DQEBBQUA MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM QVNTIDIgS0VZTkVDVElTIENBMB4XDTE0MDQyMjEzNTYzMloXDTE2MDQyMjEzNTYz MlowMTELMAkGA1UEBhMCRlIxDDAKBgNVBAoUA1NGUjEUMBIGA1UEAxMLa2FyYS5z ZnIuZnIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCRJzk/Tu8iba8/ 0/YMAMTtlPv+H7KJMW+CkOr6bG2RB6xbGLppf1AqDH20ge8YDuGMY7fFk0pxdfmG y2XNZiZy1PQUavBgMwg6lOw37pk/3mQWgv8mKBDH1ky8jmc+b/2a8iPa/maB4Hrx bbqZPgguQdHB3L9glqetJE6gW9Xc2rN/kiszEX9NxDeRZUkgyDli/GaosS4nim5k iiMvMbawf2nFPYL2+Um9xtN08W5gPaZcF1HxdztBZKDOTKHrlfWjzE0W/pqae+b0 SRE8dxFnOA3WtmPvz7AtuMk3GnX8goeqNdJGPYDjcvgJMrc3Qaki3G7e835GqT+F ObTNdTorAgMBAAGjggF0MIIBcDAJBgNVHRMEAjAAMA4GA1UdDwEB/wQEAwIFoDAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwFgYDVR0RBA8wDYILa2FyYS5z ZnIuZnIwTwYDVR0fBEgwRjBEoEKgQIY+aHR0cDovL2NybC1zc2wuY2VydGlmaWNh dDIuY29tL2tleW5lY3Rpcy9jbGFzczJrZXluZWN0aXNjYS5jcmwwRAYIKwYBBQUH AQEEODA2MDQGCCsGAQUFBzABhihodHRwOi8vb2NzcC1zc2wuY2VydGlmaWNhdDIu Y29tL3NzbC1vY3NwMEUGA1UdIAQ+MDwwOgYNKwYBBAGBrVoCBQIFATApMCcGCCsG AQUFBwIBFhtodHRwOi8vd3d3Lm9wZW50cnVzdC5jb20vUEMwHQYDVR0OBBYEFIzf KbKDtT7bdpJSBO+sZaz3JsrjMB8GA1UdIwQYMBaAFAARQd87nTvLuKLBM5Kogczl feeZMA0GCSqGSIb3DQEBBQUAA4IBAQBZv1KMrfsMOLeZQE4/bsxkpjkY7dw6ulbJ Zy4ipJGsWyuisnj3rc3MUz7+x+WozMJuroDf8pK5/WAm7eNe/V8YW4/S5nbLBuna us1MKrNB6Bb8QlgXW5BGfWoAyQNSlLLXRjRE2XVMLCoWceaGUbUgnrKnfNuYxjeO tHhW55gHa8xq+Qq169eC4g04iyitPl6xArIsgcCvQugrDi9hZuM6hz/C+IP9IW1x yp65mUwuQAPO1hM3Uzpar8lyeQd0WKFDa9Xgk7KWz4/inuS9LM2ThmO6cZ3HGth5 JWUfy261Wb1cMvjgudMHKP2Sesnnxhrx+6TZBzStM7IjuqqA6Fd7 -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkSc5P07vIm2vP9P2DADE 7ZT7/h+yiTFvgpDq+mxtkQesWxi6aX9QKgx9tIHvGA7hjGO3xZNKcXX5hstlzWYm ctT0FGrwYDMIOpTsN+6ZP95kFoL/JigQx9ZMvI5nPm/9mvIj2v5mgeB68W26mT4I LkHRwdy/YJanrSROoFvV3Nqzf5IrMxF/TcQ3kWVJIMg5YvxmqLEuJ4puZIojLzG2 sH9pxT2C9vlJvcbTdPFuYD2mXBdR8Xc7QWSgzkyh65X1o8xNFv6amnvm9EkRPHcR ZzgN1rZj78+wLbjJNxp1/IKHqjXSRj2A43L4CTK3N0GpItxu3vN+Rqk/hTm0zXU6 KwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1494306812093636513177415274491375500648608 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-04-22 13:56:32 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-22 13:56:32 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SFR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'kara.sfr.fr' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18323896109096267629655004037803274941569622797250108188671684024542634261916188196007498158751846865921694706514182944712110569442731047647710777112503891479613413414778353315538619134812772650061942797193692222999509736609565928311187677818607636089837170649016292099326299625674633351049471229967681515227392736387119953779820133945383104631296778037252832007976286317832459298611160175461747162415865835159647817062639965335586484570002175780629541813253150166853149347569627733733303561675063759534213137940057589480715344120653162194691259927139947482356041317259231036023104243661722071284313950262300012526123 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'kara.sfr.fr' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8cdf29b283b53edb76925204efac65acf726cae3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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