portal.pycsd.org

- Penn Yan Central School District -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 09:9d:bb:7b:08:9f:41:f1:84:1f:06:56:3f:ad:49:a6 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:

Penn Yan Central School District

Organization: Penn Yan Central School District
Organization unit: Portal
State / Province: NY
Locality: Penn Yan
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 09:9d:bb:7b:08:9f:41:f1:84:1f:06:56:3f:ad:49:a6
Serial Number (int): 12782045127182493603592883592414185894
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: e2:1c:94:a3:6c:08:98:76:71:98:b2:26:14:e8:f1:c7:1a:c3:8c:eb
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): a5:13:6b:85:ef:4d:ad:06:e6:af:b8:71:53:c8:51:ed:db:83:7b:ca
Fingerprint (sha256): 06:c1:b5:8d:1c:d9:4a:2b:a6:6b:42:59:3a:ae:3b:6c:cd:e8:cc:75:37:94:3b:99:5e:81:1a:d4:50:e9:f9:1c

Issuing Certificate URL: http://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2009d.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2009d.crl

Check the revocation status for certificate portal.pycsd.org

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for portal.pycsd.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

portal.pycsd.org
pycsdexchange.pycsd.org
autodiscover.pycsd.org
mail.pycsd.org
pycsd.org

Other certificates including the domain name pycsd.org

(limited to 100 certificates)
www.fra.edu
academy.pycsd.org
pycsd.org
academy.pycsd.org
marvin.wisd.org
portal.pycsd.org
admin.southeast.varnett.org
www.tricityselpa.org
fhclergue.adsb.on.ca
3rcs.org
academy.pycsd.org
schooltool.pycsd.org
admin.preescolar.semperaltius.edu.mx
pycsd.org
cce.leusd.k12.ca.us
pycsd.org
mail.pycsd.org
www.tricityselpa.org
academy.pycsd.org
3rcs.org
ros.ldcsb.ca
mta-sts.pycsd.org
es.pycsd.org
gradebook.pycsd.org
admin.3rcs.org
schooltool.pycsd.org
smclassroom.pycsd.org
formit.pycsd.org
schooltool.pycsd.org
schooltool.pycsd.org
admin.bcca.bibbed.org
olson.mpusd.net
admin.shackelford.wisd.org
admin.tricityselpa.org
nhstitans.org
schooltool.pycsd.org
admin.ecacademy.scrsd.org
mail.pycsd.org
wes.bibbed.org
admin.keillerleaders.org
poecenter246.com
3rcs.org
admin.crumpton.mpusd.net
admin.ecacademy.scrsd.org
www.cairoschooldistrict1.com
pycsd.org
rsu14.org
admin.pycsd.org
es.glendaleacademy.org
3rcs.org
3rcs.org
3rcs.org
academy.pycsd.org
3rcs.org
admin.ecacademy.scrsd.org
www.hscnewhaven.org
www.boyslatinms.org
steam.erusd.org
bradleyschools.org
admin.elc.aacs.net
admin.mas.mpusd.net
academy.pycsd.org
pycsd.org
admin.ecacademy.scrsd.org
3rcs.org
admin.delreywoods.mpusd.net
jla.jubileeacademies.org
www.rebsamen.mx
www.calvaryschools.org
academy.pycsd.org
3rcs.org
admin.pennekampschool.org
kailuaintermediate.org
admin.ecacademy.scrsd.org
schooltool.pycsd.org
*.pycsd.org
admin.es.glendaleacademy.org
mail.pycsd.org
3rcs.org
pycsd.org
admin.ecacademy.scrsd.org
steam.erusd.org
admin.athletics.rsu14.org
admin.vapa.mvusd.net
admin.es.pycsd.org
academy.pycsd.org
admin.keillerleaders.org
3rcs.org
3rcs.org
admin.cchs.mpusd.net
ms.pycsd.org
admin.poecenter246.com
schooltool.pycsd.org
academy.pycsd.org
cch.ldcsb.ca
www.salisburycatholicschool.org
schooltool.pycsd.org
mail.pycsd.org
cat.ldcsb.ca
jd.jubileeacademies.org

Certificate

The complete raw certificate details for portal.pycsd.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAuaUJ+DYK1R+qGZaxy1X7
ZlcPknasAl/IND2OwdXqblZ2obKDXqGeeyGa0K7Py/wPWXn0cRcVMfzzkdLZhiSZ
tmrk2npo0HdRGR5rK69c5rZtp3gM+EFp/tIWOhjt2spdC4x4B1g9Ma5f5xfhhLcH
g38ig+OvZYIbtnOKx0pTqBYO/NxGpg8qkas1hYSUcrv55k7EFyRCDapZ4fvfYSXN
lOmB90YQgQtITOI8nCuUbER//TMLws1tQZ99eNfUdSM/UzDi54GFBV957+HoulcQ
gLiBCMBMSUtFjvfDIf8q3GPq0In1ZVb5BYBO2Pn14elSeRcZqANQOtc4oK+SMZyP
O/vmSH/TVPVdb07nq99DAF9wOvw5+cFspqou4JFvxQIs5jJbW7jPdCUX5SIm4hYV
A6KwmBgN5HIzzup1hkCAEMEyub7Ca/amVWueWxx7GaXY/Af9ctcZKFr6y5IilxSM
6hwTZfaCnGDs9m/fKcZLWDiV2WtLYHoVA23Y2yc6m2D2eUabuqSW8leXLpDhkUQq
VN+pMH5Sk0FwgRHQO2NOVPCT7kttuu4W8lkeFyeFiMYWerJO0I2n0fYpvJD7pQ/y
otOyn0yLQPeX4d2G70i+dgMecsqZKHjsiPUk4ytkR/SsV5841vPaAoNX8zGj59pm
JP9KujPqK70w9vsf4MDrD10CAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 12782045127182493603592883592414185894
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2009-02-23 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-02-27 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Penn Yan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Penn Yan Central School District'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Portal'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'portal.pycsd.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 757364231284729510190372294481145006069930005221530945773613131494702334783207257176379735078791773278761314499978730043371854195446081681355587773887401330271487612142242287969503945187580272250148655309648789461805974907039087183575895057448334098304667732062062326434767716615195420499767948896653453497525813199221242265400974904608642488663700516414638894693565919976187715280331980778919441994883594073432096637597247257028212775294408636249383918628848781005980948922977131228914434202383330854432466133932229995771499352878496243058691563553296948519679905304295701893413537991875920613320220588393418472062978255975427391273159142929868878073675696117346820236252473485978308244322695794642520577243161541763511331577442274788445294385852654908941729769750780431735342040398200716751504692696529072140179219748384150040764604264524290305448471954965152889629654761589899750962210332363382490342182274527986774270124012629643547170355360537639830907822279279825769612052585301261617816236270278339018658021972493948957206460967922201381538474842285049706912358918901437990028497690244998040687377071278231173030625387099169520121361981912821883043013335568568464812322290737422930122635423560703120956856829386539306624683869
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							e21c94a36c0898767198b22614e8f1c71ac38ceb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'portal.pycsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pycsdexchange.pycsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pycsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pycsd.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'pycsd.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2009d.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2009d.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.3.0.1 (digiCertGlobalCAPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00a29c633c6bff60e4fc321870b486114cea02b3fc609900feeb73b07b45a7f81a185f003241f2814cb2543ca2598ce54c81e6e7508989afbb81a08fcc877a8e80e54d69f8f8962f786392e04b6c8c4edf47ccd5e88f7909f3a6b4e89d0a63d12bf120fe5903c5f84ff61495ef86ef2ae900d7b42644909c73542537fa145cb2d01985ea631b4ce51ac2bd0e15bf3c1a543c8398c2a26b230dd348ccfcc27abc661f09473cfa6e40e4a2a09bc86dcec436a6f60ab3526f792ef6a2a1c269c63b903f9244bafe8edd3642a2c684d46218dd12225ce977a397e3f8326f083a8cf8d7d8acbc6c84886cd8f0d4d6f405014889411ce0ff7d1ca9656cf1a54ee0d32b0a