eportfolio.ocadu.ca

Issued by SSL.com RSA SSL subCA

About this certificate

This digital certificate with serial number 10:ae:03:e3:49:f8:a5:42:3b:48:71:a5:c0:0a:ce:73 was issued on by SSL Corporation.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=eportfolio.ocadu.ca

SSL Corporation

Organization: SSL Corporation
State / Province: Texas
Locality: Houston
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 10:ae:03:e3:49:f8:a5:42:3b:48:71:a5:c0:0a:ce:73
Serial Number (int): 22171186440858415399290314513793601139
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 31:07:ab:85:b4:dc:b2:7a:7e:a6:5a:c6:fe:9f:dd:94:ea:4e:19:5f
AuthorityKeyId: 26:14:7e:e0:dc:d7:a6:f7:e2:d4:04:27:df:61:f1:c2:ec:e7:32:ca

Fingerprint (sha1): 90:a2:76:9e:9c:38:ed:62:b9:41:98:05:57:e0:6b:89:60:df:76:2a
Fingerprint (sha256): 0a:59:1f:b2:5b:cb:a2:f8:ac:15:69:5d:ab:1b:75:ce:11:cc:0f:51:ac:b8:e2:f6:d7:72:21:5b:7c:d9:03:51

Issuing Certificate URL: http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer

Revocation information

OCSP Server: http://ocsps.ssl.com
CRL Distribution Point: http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl

Check the revocation status for certificate eportfolio.ocadu.ca

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eportfolio.ocadu.ca

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eportfolio.ocadu.ca
www.eportfolio.ocadu.ca

Other certificates including the domain name ocadu.ca

(limited to 100 certificates)
webco-its.ocadu.ca
idrc.ocadu.ca
designjam.ocadu.ca
5745189578604544-fe1.pantheonsite.io
ocad.ca
www2.ocadu.ca
wlan-login.its.ocadu.ca
designjam.ocadu.ca
snow.idrc.ocadu.ca
eportfolio.ocadu.ca
slab.ocadu.ca
www2.ocadu.ca
idrc.ocadu.ca
adfs.ocadu.ca
apply.ocadu.ca
courses.idrc.ocadu.ca
www1.ocadu.ca
snow.idrc.ocadu.ca
www2.ocadu.ca
adod.idrc.ocad.ca
www1.ocadu.ca
eportfolio.ocadu.ca
idrc.ocadu.ca
continuingstudies.ocadu.ca
5745189578604544-fe1.pantheonsite.io
achecker.ca
admissions.ocadu.ca
*.ocadu.ca
apply.ocadu.ca
opendoors.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
www2.ocadu.ca
continuingstudies-staff.ocadu.ca
snow.idrc.ocadu.ca
wireless-login.ocadu.ca
ocad.ca
snow.idrc.ocadu.ca
idrc.ocadu.ca
eportfolio.ocadu.ca
clown.idrc.ocadu.ca
achecker.ca
idrc.ocadu.ca
www2.ocadu.ca
infodrive.ocadu.ca
webco-its.ocadu.ca
webco-its.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
csa-its.ocadu.ca
snow.idrc.ocadu.ca
cnice.idrc.ocad.ca
snow.idrc.ocadu.ca
adfs.ocadu.ca
snow.idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
infodrive.ocadu.ca
webco-its.ocadu.ca
achecker.ca
*.ocadu.ca
clown.idrc.ocadu.ca
5768714657988608-fe2.pantheonsite.io
snow.idrc.ocadu.ca
ocad.ca
*.ocadu.ca
*.ocadu.ca
ocad.ca
5745189578604544-fe1.pantheonsite.io
openresearch.ocadu.ca
*.ocadu.ca
snow.idrc.ocadu.ca
webco-its.ocadu.ca
legacy.idrc.ocadu.ca
hybrid.ocadu.ca
5745189578604544-fe1.pantheonsite.io
slab.ocadu.ca
infodrive.ocadu.ca
idrc.ocadu.ca
5745189578604544-fe1.pantheonsite.io
*.ocadu.ca
slab.ocadu.ca
wlan-login.its.ocadu.ca
adfs.ocadu.ca
adod.idrc.ocad.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
*.ocadu.ca
adfs.ocadu.ca
5745189578604544-fe1.pantheonsite.io
5745189578604544-fe1.pantheonsite.io
idrc.ocadu.ca
vpn.ocadu.ca
5745189578604544-fe1.pantheonsite.io
continuingstudies-staff.ocadu.ca
www2.ocadu.ca
5768714657988608-fe2.pantheonsite.io
www2.ocadu.ca
continuingstudies.ocadu.ca
www1.ocadu.ca
clown.idrc.ocadu.ca

Certificate

The complete raw certificate details for eportfolio.ocadu.ca in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIHXDCCBUSgAwIBAgIQEK4D40n4pUI7SHGlwArOczANBgkqhkiG9w0BAQsFADBp
MQswCQYDVQQGEwJVUzEOMAwGA1UECAwFVGV4YXMxEDAOBgNVBAcMB0hvdXN0b24x
GDAWBgNVBAoMD1NTTCBDb3Jwb3JhdGlvbjEeMBwGA1UEAwwVU1NMLmNvbSBSU0Eg
U1NMIHN1YkNBMB4XDTIzMDMwNzE0MjMzNFoXDTI0MDQwNjE0MjMzNFowHjEcMBoG
A1UEAwwTZXBvcnRmb2xpby5vY2FkdS5jYTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMexFnmiOGtA8ipbRHdnMuGx5nQh5gtlhTvFtD2lMLEax/hgIhWc
Pi1FpxuSgXTB+/44C71B58k0yyiXdXhbBH1vM4sE/FoETVM2qOsqBzuskwdh/LVx
batKdDAtFpxC7uEQg2Ms47rRsYJt1iZvJ7jzF0CeEa+YPVjlHH6JddZc3Grw5N5h
m/zfZabhCL88wzhbzaZNQn+8Abv8MveP1l3l2zYBHvTtlkZ8vV6NQLQrRvgtFWRI
lv98yPBbTW0dQVdQ6/MxehwP40JYd+NhwcNU48QfVffR4VFjrs+Cy+YHl2YlXmOv
tAcpDlEdM0GSPzIRrTJHlCHR33tKhdtQCQ0CAwEAAaOCA0kwggNFMAwGA1UdEwEB
/wQCMAAwHwYDVR0jBBgwFoAUJhR+4NzXpvfi1AQn32HxwuznMsowcgYIKwYBBQUH
AQEEZjBkMEAGCCsGAQUFBzAChjRodHRwOi8vY2VydC5zc2wuY29tL1NTTGNvbS1T
dWJDQS1TU0wtUlNBLTQwOTYtUjEuY2VyMCAGCCsGAQUFBzABhhRodHRwOi8vb2Nz
cHMuc3NsLmNvbTA3BgNVHREEMDAughNlcG9ydGZvbGlvLm9jYWR1LmNhghd3d3cu
ZXBvcnRmb2xpby5vY2FkdS5jYTBRBgNVHSAESjBIMAgGBmeBDAECATA8BgwrBgEE
AYKpMAEDAQEwLDAqBggrBgEFBQcCARYeaHR0cHM6Ly93d3cuc3NsLmNvbS9yZXBv
c2l0b3J5MB0GA1UdJQQWMBQGCCsGAQUFBwMCBggrBgEFBQcDATBFBgNVHR8EPjA8
MDqgOKA2hjRodHRwOi8vY3Jscy5zc2wuY29tL1NTTGNvbS1TdWJDQS1TU0wtUlNB
LTQwOTYtUjEuY3JsMB0GA1UdDgQWBBQxB6uFtNyyen6mWsb+n92U6k4ZXzAOBgNV
HQ8BAf8EBAMCBaAwggF9BgorBgEEAdZ5AgQCBIIBbQSCAWkBZwB1AHPZnokbTJZ4
oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhrx99WMAAAQDAEYwRAIgHQUyjcNf
4X8d8tAlNOAGhf63/bY2109bO0K0AdFpsVYCIG8lY/GowJRq/HvGtA3lypMg9KlQ
1VUN/acV1V6JfRBQAHcAO1N3dT4tuYBOizBbBv5AO2fYT8P0x70ADS1yb+H61BcA
AAGGvH31hAAABAMASDBGAiEAuWsKXdKQ9ZCiy1J/ltQXM9rXhXdeYv/F4atWR1f8
gDYCIQDDcnvVjS2E7vzt3DmnEYXCLN+LGZDVES7UrcFrYqrnQQB1AO7N0GTV2xrO
xVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7WbAAABhrx99ZwAAAQDAEYwRAIgRUF74BcM
zoEkrht86pr8Ks7bK5bF+7A/QtB6tSPln6ICIA3v5QIBE4RCyvof9JsuCX4x0a25
jVu9HOkmT3Mupzh/MA0GCSqGSIb3DQEBCwUAA4ICAQBR2/ocbZm+qyNoRwZQoJZX
pNr2w0SVUh/EO8KEEyWyki4EoqpKKAhwDMim8mX34Yt8u5ZVfyD9103VdhtvC5Za
tz9yS6GtsmCTQHNXGhtlBY4+Ge/Th/f4SMCDqHjnwNNUyngWQ5+mrwohCa6jJqs9
hEbuyz185Ys2fwl4ktQl0teljdbiPqXU4s7E5rJS6/pbMUudGcrewtcubpHH7q/G
yf2QjXA2RlNOVVgjOeHXF+no2NSELicVpSGFPMrAnkKcD0zEbm1WUjbVhzVHmQGN
w3E1cDCucoYepKIPXDoTwOR6rTbEX9mK2xu6gHsvesG0rdgTr2JFbiNT7EKizrjm
S0FNunwreEMIuqrAM24d3ZW1pHpkeHdXAhbhVMKlmG+45DA48P5XQqpu8KKgTUaE
WL01kwa7jrauTCaigWEdwFLO9aykzRTgwnftybHvQ65V9mQWSXGsRykDOa6uMtOQ
AdG4uXG2RFgUvs9iUfcSoq4+Bwleht+Hz8uy74qdyi8S6G4MKpRA7pM4SeenEGIz
IpAI4qaKUKurE0ayvjwiTFlegtB+nltrubhXHjW6nABMLX/IeK/Q1/UwJmMlNR5s
qpSwPCOU3tm0jJFPPTwmqL5p48fhu2vh769Gz+KMWvelkc1t36WCH1A0tb9bh4pO
Ew+gbCxK3Ykc4Y6i8DEcTg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx7EWeaI4a0DyKltEd2cy
4bHmdCHmC2WFO8W0PaUwsRrH+GAiFZw+LUWnG5KBdMH7/jgLvUHnyTTLKJd1eFsE
fW8ziwT8WgRNUzao6yoHO6yTB2H8tXFtq0p0MC0WnELu4RCDYyzjutGxgm3WJm8n
uPMXQJ4Rr5g9WOUcfol11lzcavDk3mGb/N9lpuEIvzzDOFvNpk1Cf7wBu/wy94/W
XeXbNgEe9O2WRny9Xo1AtCtG+C0VZEiW/3zI8FtNbR1BV1Dr8zF6HA/jQlh342HB
w1TjxB9V99HhUWOuz4LL5geXZiVeY6+0BykOUR0zQZI/MhGtMkeUIdHfe0qF21AJ
DQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22171186440858415399290314513793601139
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Houston'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL Corporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL.com RSA SSL subCA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-07 14:23:34 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-06 14:23:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'eportfolio.ocadu.ca'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25208747933868394186543453507324661384095657411369950764308298041769918820034738454840247928709289478946062711300392129781042122366947194433190982303636304299318670899331687842563438605795020117730823458838735265921118852396394921826736142025395014445833765248596660635070305481514233890179514292724553072470701828659952884783755510067709000994628824271168534002613514422888066688599361906944707618189946366134632337229535645811554671182657279945519738882546185342777036604544789489098626836742313540876329973630150629271121602002787039650742596622699445406781740950829659541466793973253921077904802994525094905121037
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 26147ee0dcd7a6f7e2d40427df61f1c2ece732ca
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cert.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.cer'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsps.ssl.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (48 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eportfolio.ocadu.ca'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.eportfolio.ocadu.ca'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (74 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.38064.1.3.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.ssl.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.ssl.com/SSLcom-SubCA-SSL-RSA-4096-R1.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3107ab85b4dcb27a7ea65ac6fe9fdd94ea4e195f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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