nifi.dl.tm.com.my

- Telekom Malaysia Berhad -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 70:d7:51:52:0e:f6:cc:ab:9d:73:42:b1 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Telekom Malaysia Berhad

Organization: Telekom Malaysia Berhad
State / Province: Kuala Lumpur
Locality: Kuala Lumpur
Country: MY

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 70:d7:51:52:0e:f6:cc:ab:9d:73:42:b1
Serial Number (int): 34922624176604193653437711025
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1b:91:60:ad:92:24:a5:11:ab:51:5a:17:d3:44:23:dc:63:2f:28:cf
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 49:90:98:a9:cc:8f:8e:02:6a:f1:e3:28:4a:d0:80:97:90:e7:7a:e6
Fingerprint (sha256): 07:eb:86:71:cd:c3:6b:77:f0:e2:bf:82:10:a9:f4:ef:a2:fe:cf:a4:8c:b1:27:43:44:8f:d8:67:6b:86:98:11

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate nifi.dl.tm.com.my

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for nifi.dl.tm.com.my

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

nifi.dl.tm.com.my

Other certificates including the domain name tm.com.my

(limited to 100 certificates)
*.tm.com.my
speedtest.tm.com.my
analytics.tm.com.my
npcsposdev.tm.com.my
osesdr.tm.com.my
www.tm.com.my
incapsula.com
owa.tm.com.my
adfsdev.tm.com.my
pagtestigrid.tm.com.my
www.tm.com.my
fylia-api.tm.com.my
iris2.tm.com.my
gems.tm.com.my
wira-pt.tm.com.my
oses.tm.com.my
speedtestklg-tmone.tm.com.my
topdashboard.tm.com.my
tmbilling.tm.com.my
ytmapps.tm.com.my
adminflow.tm.com.my
ranger.dl.tm.com.my
daniahive.tm.com.my
gems.tm.com.my
eform.tm.com.my
www.smartmap.tm.com.my
magna-octopus.tm.com.my
wiraa.tm.com.my
www.eyes.tm.com.my
adfs.tm.com.my
nifi.dl.tm.com.my
tmcbcr.tm.com.my
ytmscholar.tm.com.my
adaudit.tm.com.my
gemsq.tm.com.my
intra.tm.com.my
wira-test.tm.com.my
hc.tm.com.my
mobile1.cpams.tm.com.my
acssit.tm.com.my
tbdev.flash.tm.com.my
icareprime.tm.com.my
ecert.tm.com.my
tbdev.flash.tm.com.my
pos.tm.com.my
mercis.tm.com.my
livechat.tm.com.my
paymenttestigrid.tm.com.my
mercis.tm.com.my
securemail.tm.com.my
ipnpm2.tm.com.my
salesperformance.tm.com.my
dps.tm.com.my
fme.tm.com.my
imperva.com
rfcms.tm.com.my
tmed.intra.tm.com.my
tmlinx2005.tm.com.my
webmail2014.tm.com.my
unifi.com.my
npcscps.tm.com.my
precise.tm.com.my
webmail2014.tm.com.my
tmbizonline.tm.com.my
tmig.tm.com.my
daniaedge.tm.com.my
douit.tm.com.my
trust.tm.com.my
speedtest-northern.tm.com.my
cams.tm.com.my
archival.tm.com.my
www.sub.tm.com.my
gemselp.tm.com.my
webflow.tm.com.my
gems.tm.com.my
scms.tm.com.my
hub.tm.com.my
iot.oip.tm.com.my
wiser.tm.com.my
ebravo.tm.com.my
npcscashtest.tm.com.my
surf.tm.com.my
iiscms.tm.com.my
sentinel.tm.com.my
tmbill.tm.com.my
spartanstest.tm.com.my
looking-glass.tm.com.my
icpreseller.tm.com.my
tmcareer.tm.com.my
euct.tm.com.my
pcms1.tm.com.my
TMwebmap.tm.com.my
www.tm.com.my
spartans.tm.com.my
crms.tm.com.my
icareprime.tm.com.my
ideahub.tm.com.my
falconlogger2.tm.com.my
pcms1.tm.com.my
icpreseller.tm.com.my

Certificate

The complete raw certificate details for nifi.dl.tm.com.my in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIMcNdRUg72zKudc0KxMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMDAzMTMxNzQ3MjhaFw0y
MjA1MjkwOTI2MDRaMHkxCzAJBgNVBAYTAk1ZMRUwEwYDVQQIEwxLdWFsYSBMdW1w
dXIxFTATBgNVBAcTDEt1YWxhIEx1bXB1cjEgMB4GA1UEChMXVGVsZWtvbSBNYWxh
eXNpYSBCZXJoYWQxGjAYBgNVBAMTEW5pZmkuZGwudG0uY29tLm15MIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8Ioe1/sSWU3yhXnhiFBuKt2mcPf29M
Qqa8wUUIhfUZi9t/VF6IAI9TjAcFbkdOjPZfab9WWfTxdQc1jb96thxjC9M4wlXI
M/EzN7uxv86dUH/YPyMwPvJcpOoycjcmEXJG2dADQY2G+fvRsaL9aj52SCDALc4t
GSNIAoELfLH7Z41sDorUyvZ1zYhVQZ227f4EPxPH1TcwxFDxC8y6OLGSYqNxq1n8
2Be5pr1YiQRBvmQGsObKQVKnCDj/BRbYBDZ+L8wSyIV/iQrrubf+3h+OrEMtubqx
pQxCqQtvuWH6nfDF4UQflXTBFaSdaTJyU2o8jdl2HR1j2LmydaXAfwIDAQABo4IB
2zCCAdcwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUF
BzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92
c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0
MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0
b3J5LzAIBgZngQwBAgIwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAwhi5odHRw
Oi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTguY3JsMBwGA1Ud
EQQVMBOCEW5pZmkuZGwudG0uY29tLm15MB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4E
FgQUG5FgrZIkpRGrUVoX00Qj3GMvKM8wEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBAIrRK4EWdocGNxUBVmSxUk09yLKHYZCH7+tTaZZEVw+9
X+mwqQrnGMHyGO16qXoqOWGgWEz0FePpnfLbMHTHhuRyZeulhsE9IhIlt2iyr4W9
5gypyW5QEx49RLHX+dEaI/tPPiwnNx/YHm85Fr60ArVC+jXCRiy8viM+tLFZZMak
7zJgov/NJR1N/yzKSUnqteSD+KBU4vOgGWphbKMg1UfN4mUuLAB822JHQyYof3kE
cXiTWImy7ejsk6z56VwlJcmJ3ITdo0thm++hpMGmYz1YJahYZk4+20FNStIEDKwS
1/jI+vvMyei3pUNY/IO56sXirsbmmhbbK2uQ34Z1Kx4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoz8Ioe1/sSWU3yhXnhiF
BuKt2mcPf29MQqa8wUUIhfUZi9t/VF6IAI9TjAcFbkdOjPZfab9WWfTxdQc1jb96
thxjC9M4wlXIM/EzN7uxv86dUH/YPyMwPvJcpOoycjcmEXJG2dADQY2G+fvRsaL9
aj52SCDALc4tGSNIAoELfLH7Z41sDorUyvZ1zYhVQZ227f4EPxPH1TcwxFDxC8y6
OLGSYqNxq1n82Be5pr1YiQRBvmQGsObKQVKnCDj/BRbYBDZ+L8wSyIV/iQrrubf+
3h+OrEMtubqxpQxCqQtvuWH6nfDF4UQflXTBFaSdaTJyU2o8jdl2HR1j2LmydaXA
fwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 34922624176604193653437711025
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-13 17:47:28 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-05-29 09:26:04 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Kuala Lumpur'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Telekom Malaysia Berhad'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'nifi.dl.tm.com.my'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20607926795686913610861090514067513435113524208482066070936200547723242968134406406489120335491243482065875228372964605847999582269638647305508783681597732589016427584453980249161177979524745653033086636948264231390550627935167913316183911331470257592011487808325566330792176052879248938437561398962576613701035508223381494299889758047673667339472387170487762718001404521510847097170685768640887649095196699192171381685168110253141424045547168213639249466343493359522516636815810398144923943892244251860078044054452222698270645841449467548237288640414477812853236868206416269906823716846465995537313824290918617170047
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nifi.dl.tm.com.my'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1b9160ad9224a511ab515a17d34423dc632f28cf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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