Personalisedcard.barclays.co.uk

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 2d:8e:d4:e1:43:c9:37:a2:00:00:00:00:54:d0:8f:7f was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: Digital Banking WEB1
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 2d:8e:d4:e1:43:c9:37:a2:00:00:00:00:54:d0:8f:7f
Serial Number (int): 60556883682384452133830241397559562111
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 51:47:7a:88:e2:e9:20:b6:0d:8f:46:e3:23:7a:df:13:29:1b:28:e7
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 47:66:01:30:aa:2d:3c:ff:1f:c1:3a:18:27:ef:9c:c0:15:6c:fd:fa
Fingerprint (sha256): 04:fd:57:be:55:2d:a8:2e:81:8b:8b:9d:c1:c5:53:ff:7b:c3:fd:3a:7a:da:a8:0d:a5:88:0b:5e:a6:d8:86:89

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate Personalisedcard.barclays.co.uk

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for Personalisedcard.barclays.co.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

Personalisedcard.barclays.co.uk
www.Personalisedcard.barclays.co.uk

Other certificates including the domain name barclays.co.uk

(limited to 100 certificates)
vies.b2b-dr.barclays.co.uk
email-int.barclays.co.uk
sagt1.wload.barclays.co.uk
secure03.stage.lithium.com
leads-and-referral-salesforce-prod-outbound.barclays.co.uk
Personalisedcard.barclays.co.uk
emailvideo.barclays.co.uk
bem.barclays.co.uk
MQSQM5T0.MQSEGWD0.barclays.co.uk
aptpodsqa1.barclays.co.uk
BARXP01.barclays.co.uk
cba-commbank.barclays.co.uk
cidv-bc-sign.barclays.co.uk
www.barclaysaccelerator.com
MQIPT-MQFNYD01-NYKCSR000000509-TEST.barclays.co.uk
www.barclays.co.uk
hrportal.ple.barclays.co.uk
documents-dr.barclays.co.uk
BarclaysFNZINTFIX.extranet.barclays.co.uk
www.apply.barclays.co.uk
insights.barclays.co.uk
Personalisedcard.barclays.co.uk
pilot4.barclays.co.uk
www.compliancepassport.barclays.co.uk
cockpit-test.barclays.co.uk
bmbdss-aviva.barclays.co.uk
gateway.identity.barclays.co.uk
cop-sl.barclays.co.uk
ibank.barclays.co.uk
letmechoose.barclays.co.uk
secure.personalisedcard.barclays.co.uk
chics.barclays.co.uk
partneroffers-salesforce-dev-outbound.barclays.co.uk
bancos-api-test.barclays.co.uk
www.signup.barclays.co.uk
www.barclaysaccelerator.com
www.extractor.barclays.co.uk
secure03.stage.lithium.com
videocall.barclays.co.uk
www.barclays.co.uk
www.barclays.co.uk
insights.barclays.co.uk
cfp.bank.barclays.co.uk
bc.barclays.co.uk
BarclaysFNZMQDR.extranet.barclays.co.uk
cloudit.docusignout.barclays.co.uk
bwo.dss.barclays.co.uk
ibank.barclays.co.uk
eg3c.wload.barclays.co.uk
businessapply.barclays.co.uk
Personalisedcard.barclays.co.uk
www.barclays.co.uk
cloudit.docusignout.barclays.co.uk
email.barclays.co.uk
www.barclays.co.uk
www.stockbrokers.barclays.co.uk
cfp.bank.barclays.co.uk
www.onlineabs.barclays.co.uk
cloudit.bank.barclays.co.uk
email.barclays.co.uk
letmechoose.barclays.co.uk
email.barclays.co.uk
cloudit.bank.barclays.co.uk
ibank.barclays.co.uk
www.stockbrokers.barclays.co.uk
www.resources.barclays.co.uk
C6459PreDR.barclays.co.uk
jmp-emea-cmap-ipsec.barclays.co.uk
bl-sign.barclays.co.uk
bem.barclays.co.uk
www.secure.barclays.co.uk
featuresstore.barclays.co.uk
youniquely.barclays.co.uk
bwodss.barclays.co.uk
cidv-rsa3ds.barclays.co.uk
www.secure.barclays.co.uk
mail-assure1.barclays.co.uk
www.sharestore.barclays.co.uk
b.email.barclays.co.uk
akamai-san21.exacttarget.com
www.sharestore.barclays.co.uk
api.mastercard.barclays.co.uk
api.barclays.co.uk
www.barclays.co.uk
ibdn-enc.barclays.co.uk
search-int-dr.barclays.co.uk
bmb-pv.barclays.co.uk
www.extractor.barclays.co.uk
www.digitaldrivinglicence.barclays.co.uk
smetrics.barclays.co.uk
surv.email.barclays.co.uk
FNZPORTAL.extranet.barclays.co.uk
bank.barclays.co.uk
bank.barclays.co.uk
ibank.barclays.co.uk
cloudit.bank.barclays.co.uk
W.CUKPBCC1WEB541.barclays.co.uk
ibank.pilot.barclays.co.uk
barclaysvideobanking.video.secure.barclays.co.uk
assets.communitydrivinglicence.barclays.co.uk

Certificate

The complete raw certificate details for Personalisedcard.barclays.co.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvX5Erh7XaeHlP+O4BYsS
6sBmBo8FFrd2cvHD5o9URZPKwP2RZzVUFIClsy1JKgCDXtevIvexyVoSgOGPlR1Z
Z5t+plc4VWyJkimvc9LqHAjmXSg3kiSKnhBQ5/QRamTrvPJpSOZURUa9XB5OnYNV
G/UFuPcHE9vZ29i/4lDOOL9gUgzj96klgkv4QMaWkz26P8tMOcUms7PlGjvuAiDs
vJR6cOtMnzRllYUUoIXcnSx8k0qR4xNbHN3ym+HEDGmPxd7NeuUTfX/SMTKGmQzu
kHAz0B3eK506F3swaTPmOJN3DO83z3+3/RYUtiVlz1bR2dmDPUrYFk3J5CQgjOtC
6QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 60556883682384452133830241397559562111
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-22 18:00:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-22 18:30:10 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Digital Banking WEB1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Personalisedcard.barclays.co.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23921304849030162484593891068589068621626459243533565452377293344954558099389508313336781812097423536750109443853996748705957748781947687058830933168780614034798685918574993877262672358238326188006340521625814073671760364705756278823254254568471709319478992827862327065182280937500181435401847950136287243426817061415668337972382292515242009198333572189171081046583863735571925276264739357815082786536008214606146850792875929214506168527973294280420940128424575407427472094409517141243368254553476914831133108861095562057726433037821405711946513593408616013243814050521103126442829493381892750205026771463902484710121
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'Personalisedcard.barclays.co.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.Personalisedcard.barclays.co.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							51477a88e2e920b60d8f46e3237adf13291b28e7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0002ab2facd72da9652581bd8d538898045204c50fd962f3375d9abbab9ad04f8fff9be6ffecaf5e02bf2515b2ab121a379da4170d412850787cd94e599b23d32cdf4069b3c14f0f1d8000615d62eb3132e2e88b82a79e06eec85e7285f83c9271fc877368d96ab519b281da39149fe6d2406abc80a7a62c0994e72892e8bf0a6fb32af2f89d529ee8d28282dc6bdd18316d7cb876fdd81498be04a555dd9391ac4855724ede1b1355ab680652a73b2c8da0f97f04bb099fada49bf95a592712616e3224974e3034dbb531778f295aa2c2544564722f05c77479238a2830ab33e108c301b32b3bc90f516831780b5ddfb28c1ea72a257c8d112c3a63039a37de7e