admin.digital.mosreg.ru
Issued by AlphaSSL CA - SHA256 - G4
About this certificate
This digital certificate with serial number 3c:5b:8d:6e:46:6b:e5:c4:47:1d:4b:1d was issued on by GlobalSign nv-sa.
This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=admin.digital.mosreg.ru
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 3c:5b:8d:6e:46:6b:e5:c4:47:1d:4b:1dSerial Number (int): 18679780726755970142743382813
Serial Number lenght: 94 bits, 12 octets
SubjectKeyId: 9a:42:f5:b0:e4:c1:8b:1b:ae:1a:72:a4:67:be:b5:43:6a:9e:0f:f9
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15
Fingerprint (sha1): 22:2e:17:c6:52:74:ad:df:64:3a:83:dc:8a:51:73:76:c5:e0:06:c3
Fingerprint (sha256): 0a:c7:00:26:76:ef:2f:47:c0:f7:e0:99:52:78:9e:de:40:58:db:6b:ca:4a:40:f9:e8:db:75:89:14:5f:f1:33
Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl
Check the revocation status for certificate admin.digital.mosreg.ru
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for admin.digital.mosreg.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
admin.digital.mosreg.ru
Other certificates including the domain name mosreg.ru
(limited to 100 certificates)
docs.mosreg.ru
guv.mosreg.ru
help.dnevnik.ru
sdc.platform.mosreg.ru
klh.mosreg.ru
*.reb.mosreg.ru
pdks.mosreg.ru
mf.reb.mosreg.ru
msh.mosreg.ru
www.atk.mosreg.ru
*.mef.mosreg.ru
isogd.mosreg.ru
ugd.mosreg.ru
socuslugi.mosreg.ru
ud.mosreg.ru
*.sport.mosreg.ru
mosreg.ru
www.zags.mosreg.ru
isogd.mosreg.ru
monitoring.mosreg.ru
mio.mosreg.ru
*.budget.mosreg.ru
lytkarino.mosreg.ru
tasks.mosreg.ru
www.mef.mosreg.ru
pushchino.mosreg.ru
kadry.mosreg.ru
mail.omsu.mosreg.ru
volokolamsk.mosreg.ru
pass.mosreg.ru
help.pik.mosreg.ru
auth.elib.mosreg.ru
www.guip.mosreg.ru
mz.mosreg.ru
bal.msr.mosreg.ru
kt.reb.mosreg.ru
www.mo.mosreg.ru
docs.mosreg.ru
www.gatn.mosreg.ru
gorskoe.mosreg.ru
tasks.mosreg.ru
news.mosreg.ru
www.klh.mosreg.ru
remote.mosreg.ru
mf.mosreg.ru
msh.mosreg.ru
dzks.mosreg.ru
gs.mosreg.ru
*.dev.dk.mosreg.ru
www.mz.mosreg.ru
upss.mosreg.ru
guv.mosreg.ru
ank.mosreg.ru
dolgoletie.mosreg.ru
dobrodel.mosreg.ru
news.mosreg.ru
dolgoletie.mosreg.ru
upsh.mosreg.ru
zags.mosreg.ru
beta.uslugi.mosreg.ru
uzpp.mosreg.ru
lms.gossluzhba.mosreg.ru
mo.mosreg.ru
mst.mosreg.ru
dop.mosreg.ru
invest.mosreg.ru
www.mio.mosreg.ru
certificate.cogu.mosreg.ru
klim.msr.mosreg.ru
*.mp.mosreg.ru
vpn.mosreg.ru
isogd.mosreg.ru
roshal.mosreg.ru
subbotnik.mosreg.ru
dolgoletie.mosreg.ru
admin.digital.mosreg.ru
isoik.mosreg.ru
minenergo.mosreg.ru
ugd.mosreg.ru
pik.mosreg.ru
docs.mosreg.ru
ktc.mosreg.ru
web.mail.mosreg.ru
remote.mosreg.ru
*.msr.mosreg.ru
roshal.mosreg.ru
www.ktc.mosreg.ru
www.mst.mosreg.ru
gs.mosreg.ru
*.reb.mosreg.ru
webconf.mosreg.ru
www.politika.mosreg.ru
mtdi.mosreg.ru
tdn.mosreg.ru
*.reb.mosreg.ru
help.dnevnik.ru
renovation.mosreg.ru
gku.mosreg.ru
www.gzhi.mosreg.ru
guv.mosreg.ru
help.dnevnik.ru
sdc.platform.mosreg.ru
klh.mosreg.ru
*.reb.mosreg.ru
pdks.mosreg.ru
mf.reb.mosreg.ru
msh.mosreg.ru
www.atk.mosreg.ru
*.mef.mosreg.ru
isogd.mosreg.ru
ugd.mosreg.ru
socuslugi.mosreg.ru
ud.mosreg.ru
*.sport.mosreg.ru
mosreg.ru
www.zags.mosreg.ru
isogd.mosreg.ru
monitoring.mosreg.ru
mio.mosreg.ru
*.budget.mosreg.ru
lytkarino.mosreg.ru
tasks.mosreg.ru
www.mef.mosreg.ru
pushchino.mosreg.ru
kadry.mosreg.ru
mail.omsu.mosreg.ru
volokolamsk.mosreg.ru
pass.mosreg.ru
help.pik.mosreg.ru
auth.elib.mosreg.ru
www.guip.mosreg.ru
mz.mosreg.ru
bal.msr.mosreg.ru
kt.reb.mosreg.ru
www.mo.mosreg.ru
docs.mosreg.ru
www.gatn.mosreg.ru
gorskoe.mosreg.ru
tasks.mosreg.ru
news.mosreg.ru
www.klh.mosreg.ru
remote.mosreg.ru
mf.mosreg.ru
msh.mosreg.ru
dzks.mosreg.ru
gs.mosreg.ru
*.dev.dk.mosreg.ru
www.mz.mosreg.ru
upss.mosreg.ru
guv.mosreg.ru
ank.mosreg.ru
dolgoletie.mosreg.ru
dobrodel.mosreg.ru
news.mosreg.ru
dolgoletie.mosreg.ru
upsh.mosreg.ru
zags.mosreg.ru
beta.uslugi.mosreg.ru
uzpp.mosreg.ru
lms.gossluzhba.mosreg.ru
mo.mosreg.ru
mst.mosreg.ru
dop.mosreg.ru
invest.mosreg.ru
www.mio.mosreg.ru
certificate.cogu.mosreg.ru
klim.msr.mosreg.ru
*.mp.mosreg.ru
vpn.mosreg.ru
isogd.mosreg.ru
roshal.mosreg.ru
subbotnik.mosreg.ru
dolgoletie.mosreg.ru
admin.digital.mosreg.ru
isoik.mosreg.ru
minenergo.mosreg.ru
ugd.mosreg.ru
pik.mosreg.ru
docs.mosreg.ru
ktc.mosreg.ru
web.mail.mosreg.ru
remote.mosreg.ru
*.msr.mosreg.ru
roshal.mosreg.ru
www.ktc.mosreg.ru
www.mst.mosreg.ru
gs.mosreg.ru
*.reb.mosreg.ru
webconf.mosreg.ru
www.politika.mosreg.ru
mtdi.mosreg.ru
tdn.mosreg.ru
*.reb.mosreg.ru
help.dnevnik.ru
renovation.mosreg.ru
gku.mosreg.ru
www.gzhi.mosreg.ru
Certificate
The complete raw certificate details for admin.digital.mosreg.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE4jCCA8qgAwIBAgIMPFuNbkZr5cRHHUsdMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMTIyMTEwNDA1NVoXDTI1MDEy MTEwNDA1NFowIjEgMB4GA1UEAxMXYWRtaW4uZGlnaXRhbC5tb3NyZWcucnUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQdDVebjSdsptZJqQB9bHTPjeq buad0Xp4j6qjC2Kvg9VerjwXK81yjH3Z4YJTqh6WadVdh7xSKE+c0EgDe7lR/j2Z C+ug8vEvLrJdP/VYE9pmjEYXMvV1jQv5u/bt8J3kthZYe5EriGwhs+0y4LND1uKT vcdL1f8lMkdfBO2idYGKXudmAryqydsKGEkjUEi9v67ILYEhOU2d5PL7sdkLlCzU 4bTKhT/GIcbvgTSoSt5IpI3m+6i9CgAVukXdRj9cXk6+wKKQZqUmfQkm8LLenjqJ Du6woYTrWwRV4Rr17n/vxa0c8uBG9wcaEgO/XDw1ZZRR+zCF+toCKsk+BA8/AgMB AAGjggHsMIIB6DAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBkwYIKwYB BQUHAQEEgYYwgYMwRgYIKwYBBQUHMAKGOmh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2ln bi5jb20vY2FjZXJ0L2FscGhhc3NsY2FzaGEyNTZnNC5jcnQwOQYIKwYBBQUHMAGG LWh0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNDBX BgNVHSAEUDBOMAgGBmeBDAECATBCBgorBgEEAaAyCgEDMDQwMgYIKwYBBQUHAgEW Jmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMEEGA1UdHwQ6 MDgwNqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vYWxwaGFzc2xjYXNo YTI1Nmc0LmNybDAiBgNVHREEGzAZghdhZG1pbi5kaWdpdGFsLm1vc3JlZy5ydTAd BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAUT8usqMLv q92Db2u/zpg9XFgldhUwHQYDVR0OBBYEFJpC9bDkwYsbrhpypGe+tUNqng/5MBMG CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCNOAKseQn5tVXp tENnHvAEl/gK9KtxwIVnKSaSbv8J4tp8kJ0/1cCXNr5mYX6puAaiN+owye4kjjrR Fc0b6qCinOqE9Z7K5+CXoyM9amqBXGQvTTYOPDR0FXDayNdTmnc3HOb5oYSJgjQw qlEdljpq4J5BpwUeSi5IBMi3SHU3Bszf4ut5OT8ExuZaSZ16RgAhCHAV50nPWVmE jM15DX7mWDo1VCrQDi6eLeZV/rQKe8Glb/F5G3YpMxPjuFCFhRwV2L1x3uj9QNyq gzaszPLkay5DkndlGgaynwQ3RPqG4wnsTC4wweVbD483t+OnfxjiyLO/dmGLRK3b 0iA65Do/ -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HQ1Xm40nbKbWSakAfWx 0z43qm7mndF6eI+qowtir4PVXq48FyvNcox92eGCU6oelmnVXYe8UihPnNBIA3u5 Uf49mQvroPLxLy6yXT/1WBPaZoxGFzL1dY0L+bv27fCd5LYWWHuRK4hsIbPtMuCz Q9bik73HS9X/JTJHXwTtonWBil7nZgK8qsnbChhJI1BIvb+uyC2BITlNneTy+7HZ C5Qs1OG0yoU/xiHG74E0qEreSKSN5vuovQoAFbpF3UY/XF5OvsCikGalJn0JJvCy 3p46iQ7usKGE61sEVeEa9e5/78WtHPLgRvcHGhIDv1w8NWWUUfswhfraAirJPgQP PwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 18679780726755970142743382813 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 10:40:55 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-21 10:40:54 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'admin.digital.mosreg.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26314871966324067781440038906964790674206108770344979826823992146222321100180181604469026002599112471844180485126639681549476453795218486874445731400562146000212738317977454946985456418616216709608123500863399083505929890272786412763485153655429188388896367477507753537311406651929339354602115618884943602060612673935813057732008874390548705276510888369708998460537063461047896017697032197393417530696533964341668237697731069830837525689584645192116818892552849479746724927706265168252882797096014355524214380850488753731039156299176495230817324593647268725913766202054354276413085264455298589797077154324843147300671 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'admin.digital.mosreg.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 9a42f5b0e4c18b1bae1a72a467beb5436a9e0ff9 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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