vcs-emea4.barclays.com

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number 7c:61:d2:93:9f:a1:7b:a0:00:00:00:00:54:ce:cc:26 was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: GTIS
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 7c:61:d2:93:9f:a1:7b:a0:00:00:00:00:54:ce:cc:26
Serial Number (int): 165332195274567440388794454778108103718
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 84:d2:d9:72:6d:fc:54:4b:c7:89:c1:c3:55:d8:fa:ae:5b:ff:5c:d0
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 09:3a:98:0e:8e:1a:05:ba:8c:6a:1d:f1:dc:eb:be:93:2a:1f:b1:d1
Fingerprint (sha256): 05:d6:05:e5:fe:7d:d9:71:e9:83:3c:19:63:01:f2:27:a7:b7:d0:2a:f1:16:8a:21:27:17:dd:12:76:f5:a5:9a

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate vcs-emea4.barclays.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vcs-emea4.barclays.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vcs-emea4.barclays.com
vcs-emea.barclays.com
GBNHT-D1-AVCGW-1004.intranet.barcapint.com
vcs-emea-uat.barclays.com

Other certificates including the domain name barclays.com

(limited to 100 certificates)
www.barclayswealth.com
mlabs-in-uk-new.barclays.com
onboardingonline.barclays.com
launch.secure.barclays.com
20210614EV.barclays.com
www.zm.secure.barclays.com
ae.employersolutions.barclays.com
imagepay-sl.iportal.barclays.com
myaccessldn.barclays.com
unauth.chat.secure.barclays.com
gloucesterpilot.extranet.barclays.com
www.barclays.co.uk
www.retailmortgages.secure.barclays.com
www.barclaycard.es.secure.barclays.com
investmentbank-uat.barclays.com
mortgageintermediaries.iaportal.barclays.com
myworkspace-hk.barclays.com
juniper.barclays.com
myaccessjhb.barclays.com
ib.mz.secure.barclays.com
token.sandbox.barclays.com
FATCAREPORTING.UK.IDES.BARCLAYS.COM
b2b-bne-imi2way-prod.barclays.com
www.ae.secure.barclays.com
www.barclaycard.pt.secure.barclays.com
www.barclaycard.pt.secure.barclays.com
supplierfinance.barclays.com
SMG-CIPE-PROD.barclays.com
bmb-lcp2.secure.barclays.com
vpn-uk-glo.barclays.com
www.nbc.secure.barclays.com
investmentbank.barclays.com
solicitar.barclaycard.es.secure.barclays.com
bpl.iportal.barclays.com
home.barclays
www.eg.secure.barclays.com
chat-uat.international.barclays.com
bmb.secure.barclays.com
www.ae.secure.barclays.com
iceUA2v3.barclays.com
bwsoa-cdi-uat2.barclays.com
imagepay-gl.iportal.barclays.com
www.ug.barclays.com
www.eg.secure.barclays.com
federate.secure.barclays.com
filegatewaytestentrust.barclays.com
adt.glo.barclays.com
newsroom.barclays.com
overseas.barclays.com
zappapi-inbound-test.barclays.com
api.barclays.com
vidyoccapi.emea-dev.barclays.com
federate.secure.barclays.com
www.ialert.barclays.com
www.barclaycard.pt.secure.barclays.com
giftportal.secure.barclays.com
solicitar.barclaycard.es.secure.barclays.com
www.investmentbank.barclays.com
www.bw.barclays.com
now.barclays.com
myaccessjhb.barclays.com
vidyoportal.emea-dev.barclays.com
www.muon.secure.barclays.com
investmentbank-uat.barclays.com
investmentbank-uat.barclays.com
m.ialert.barclays.com
ics-bir-de.uksloug11li08.barclays.com
hooks.imiconnect.barclays.com
myworkspace-slo.barclays.com
www.ae.secure.barclays.com
www.barclays.co.uk
www.bkey.secure.barclays.com
wcp.barclays.com
myaccesspilot.barclays.com
myaccessldn.barclays.com
puk-lcp.secure.barclays.com
www.ug.barclays.com
smartspend-shopping-soap.barclays.com
www.barclays.co.uk
www.gh.secure.barclays.com
developer-sandbox.barclays.com
www.gh.secure.barclays.com
GProdIPSVerizon.barclays.com
barclays.com
mss.secure.barclays.com
MYWORKSPACEONE.BARCLAYS.COM
iportal.barclays.com
buyit.secure.barclays.com
selfservice.iportal.barclays.com
login.demo.supplierfinance.barclays.com
ldnconnect.barclays.com
federate.secure.barclays.com
vpn-us-cqg-3.barclays.com
oauth-test-tiaa.secure.barclays.com
pref.iportal.barclays.com
zappapidfi-outbound-live.barclays.com
email.barclays.co.uk
auth.chat.secure.barclays.com
vcs-emea4.barclays.com
connect.barclays.com

Certificate

The complete raw certificate details for vcs-emea4.barclays.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXu8NNDeVIgvAHZwL6Fn
tVyBCaUzocP6boaZB83/x5KNUxsyBv9LSBGYhP4qOnCICvR09jF/3cuVIcwgEWRk
hpT0p76uZe23l1wwv7TNeQHg0MsbWmgTCjyzihI32Gyq/f2et/xewtq8c8+THd3F
q2D4S1MIqKZMvmBoN75CU2K5MjYO9QeudBgbzljD2v3a+0+0HRkxuimx/tKs7sLQ
AvywSZXZwqVCVjKT0zhDuGHbhVv858Utu7j5vXop98DQCMPhlgb2Ao0XEiNDmrQE
JUL/++13gklkU+YMvWbPvTP/uHvzPJxWN2Oe3cRFrSsb5Cm7bSoeq84da2gHb87j
0wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 165332195274567440388794454778108103718
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-08-03 11:15:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-08-03 11:45:56 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vcs-emea4.barclays.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24425008950255224603621078437166147353187702780832343600509645901708344885917987775352225131098357805967792925857886902252113079741032607754343796034159617161183373405451732287919594251590150610084194782004214457864649656429168240733341135515813609222871236960645384536422399528438792738290929498142443058479427561257686148420129935051207209232348822818108830203395740049907856150075808705193702304174901807328035999483771705330575243274258462825581257742022042869344377559859150411529384541557834229449742298788151791076573160663062887183740506099738830351793318187717225155319521676440794413477043971114852659684307
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcs-emea4.barclays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcs-emea.barclays.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'GBNHT-D1-AVCGW-1004.intranet.barcapint.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vcs-emea-uat.barclays.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							84d2d9726dfc544bc789c1c355d8faae5bff5cd0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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