www.edf.com

- EDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:be:3b:6d:b3:59:b8:c4:ce:97:58:f0:28:86:a7:02:4f was issued on by KEYNECTIS.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

EDF

Organization: EDF
Organization unit: CSP IT
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:be:3b:6d:b3:59:b8:c4:ce:97:58:f0:28:86:a7:02:4f
Serial Number (int): 1492391040838021205283284527323608861049423
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 57:f6:a7:b0:1b:de:36:ea:1a:f3:ac:41:ce:19:fe:7d:a3:4a:ab:86
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): 39:d7:26:9a:50:d9:6f:a4:de:eb:b8:a1:3b:d4:9a:8c:d6:f8:f5:50
Fingerprint (sha256): 0b:fa:02:1e:14:e6:07:07:39:84:34:9a:40:87:a7:0c:e4:4d:49:00:34:d0:96:1c:8e:1b:b1:92:04:1d:e1:00


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate www.edf.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.edf.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.edf.com

Other certificates including the domain name edf.com

(limited to 100 certificates)
entreprises.edf.com
pwa-sso-rbb.edf.fr
sso.edf.fr
pcyintplypdi001.neoprod.edf.fr
autodiscover.intranet.edf.com
entreprises.edf.com
edfenergy-pulse.edf.com
sei-raccordement.edf.fr
one-module.edf.fr
m-visibiliteconso.edf.com
api-particuliers-pp.edf.com
pcydmzplywfe001.intranet.edf.com
noeintplypfe001.neoprod.edf.fr
cws.edf.fr
projetsfondation.edf.com
collab.intranet.enedis.fr
sso-perf.edf.fr
m-particuliers-preprod.edf.com
openx.edf.com
pass-collectivites-preproduction.edf.com
edf.fr
particuliers.edf.com
noeintplypfe002.neoprod.edf.fr
pass-collectivites.edf.com
netkin.eu
pc2fy72t.pcy.edf.fr
publish-pp2-siterc.cie.edf.fr
noedmzplywdi001.intranet.edf.com
partenaires-internet-iq.edf.com
edf.fr
archives.edf.com
sso-rbb.edf.fr
www.edf.com
noeplyaccess01.edf.fr
trophees.edf.com
sei-ael-corse.edf.com
edfpro.edf.com
edf.com
one.edf.fr
edf.fr
sso-iq.edf.fr
fondation.edf.com
noedmzplywdi001.intranet.edf.com
sso-iq.edf.fr
edf.fr
www.clubactionnaires.edf.com
edf.fr
brandcenter-en.edf.com
NOEINTPLYPFE002.neoprod.edf.fr
sso-r7f.edf.fr
ghood.edf.com
about-us.edf.com
ws-affaires-pp.edf.com
pha.edf.com
fondation.edf.com
noedmzplywdi001.intranet.edf.com
pulse.edf.com
sso-r7b.edf.fr
pcyplyaccess01.edf.fr
www.edf.com
PCYINTPLYPFE001.neoprod.edf.fr
rce-partenaires-recette.edf.com
webmail.intranet.edf.com
trophees.edf.com
pcyintplypfe001.neoprod.edf.fr
photocenter.edf.com
pass-collectivites.edf.com
www.edf.com
partenaires.edf.com
edf.com
partenaires-edfetmoi-recette.edf.com
sei-pee-corse.edf.com
noedmzplywfe001.intranet.edf.com
pw1-ssor7a.edf.fr
pcydmzplywdi001.intranet.edf.com
pcyintplypfe002.neoprod.edf.fr
objective2degrees.edf.com
webmail.intranet.edf.com
sso-interne-r7b.edf.fr
api-particuliers-pp.edf.com
m-r7.entreprises.edf.com
netkin.eu
projetsfondation.edf.com
pcyintplypfe001.neoprod.edf.fr
temoignages.fondation.edf.com
m-particuliers.edf.com
noeintplypfe001.neoprod.edf.fr
bundle-20170208-01.sslpw.fr
noeplyaccess01.edf.fr
m.entreprises.edf.com
ssospex.intranet.edf.com
noeintplypfe002.neoprod.edf.fr
collab.intranet.enedis.fr
temoignages.fondation.edf.com
sso-interne-iq.edf.fr
ssospex.intranet.edf.com
temoignages.fondation.edf.com
etreactionnaire.edf.com
netkin.eu
pcyplyaccess01.edf.fr

Certificate

The complete raw certificate details for www.edf.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIEpDCCA4ygAwIBAgISESG+O22zWbjEzpdY8CiGpwJPMA0GCSqGSIb3DQEBCwUA
MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM
QVNTIDIgS0VZTkVDVElTIENBMB4XDTE2MDMxNjEzMzkwMloXDTE3MDMxNzEzMzkw
MlowYjELMAkGA1UEBhMCRlIxDjAMBgNVBAgUBVBBUklTMQ4wDAYDVQQHFAVQQVJJ
UzEPMA0GA1UECxQGQ1NQIElUMQwwCgYDVQQKFANFREYxFDASBgNVBAMTC3d3dy5l
ZGYuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfH/4fPvT/eE
hHXyGMPXWkfe3Znxr0LZtb7622ezT1sLhpXO3tb1ijjErB8ACw021kx/RMkd5Byf
vZKpczaW/tzFgmYyCgwRnYiL6sPEAu41N6lVJreIg/wYYvjuuVBA2JliyaoIo2df
SV+18t9xCX/qDR5Fol1GVhMyzN3sN/N8WA/I+QKS16MiLw6/67Hx4lTUb/KPCZY3
FmnhOcnQ2+i2YoL7WHjgWwAxbKh7RcX2M1ip8VT7FXeIL6n7aRvww3e3huviPyB3
rP4Kpl6aLCLieuhxRfaYT9+ZNyl4h57OCvOAbgKDZk2VKKmDH4n1+b86mxyueNuK
g6ouARj7CQIDAQABo4IBdDCCAXAwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBYGA1UdEQQPMA2CC3d3dy5l
ZGYuY29tME8GA1UdHwRIMEYwRKBCoECGPmh0dHA6Ly9jcmwtc3NsLmNlcnRpZmlj
YXQyLmNvbS9rZXluZWN0aXMvY2xhc3Mya2V5bmVjdGlzY2EuY3JsMEQGCCsGAQUF
BwEBBDgwNjA0BggrBgEFBQcwAYYoaHR0cDovL29jc3Atc3NsLmNlcnRpZmljYXQy
LmNvbS9zc2wtb2NzcDBFBgNVHSAEPjA8MDoGDSsGAQQBga1aAgUCBQEwKTAnBggr
BgEFBQcCARYbaHR0cDovL3d3dy5vcGVudHJ1c3QuY29tL1BDMB0GA1UdDgQWBBRX
9qewG9426hrzrEHOGf59o0qrhjAfBgNVHSMEGDAWgBQAEUHfO507y7iiwTOSqIHM
5X3nmTANBgkqhkiG9w0BAQsFAAOCAQEAQ9sh0ZFY/g7ulhJ8ritSqvigj0cVxrD6
HOjirJ3KJuJ5nK9ueMo06Q1PNxXmcoALOgiAS/AdZ3sQ2Bp2WxQuogTjwE2N/Iov
AnPgt8ob6WtA+WTphEMsS+Pi4D2yxUVbuJDiRBjHo9oHdaOCJ6cv9WpM8L3Bfqkb
4+skfY4fMn6+5Do8NcW8mhfpuU6h+jIYyx+zlYBmG1rn/amF/jLcHUbKZzaP14Mb
30MydtmB7aftyaDnbt7gJzIzQObDCnZjXoC+4p9KM2ooBF6617gg1dtGu3pPWSvi
cWmkUGxRi6B0BsTzanIq2m+jj+3ne0oR5VDREVSjOnPD2CFbLS1FkA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfH/4fPvT/eEhHXyGMPX
Wkfe3Znxr0LZtb7622ezT1sLhpXO3tb1ijjErB8ACw021kx/RMkd5ByfvZKpczaW
/tzFgmYyCgwRnYiL6sPEAu41N6lVJreIg/wYYvjuuVBA2JliyaoIo2dfSV+18t9x
CX/qDR5Fol1GVhMyzN3sN/N8WA/I+QKS16MiLw6/67Hx4lTUb/KPCZY3FmnhOcnQ
2+i2YoL7WHjgWwAxbKh7RcX2M1ip8VT7FXeIL6n7aRvww3e3huviPyB3rP4Kpl6a
LCLieuhxRfaYT9+ZNyl4h57OCvOAbgKDZk2VKKmDH4n1+b86mxyueNuKg6ouARj7
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492391040838021205283284527323608861049423
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-16 13:39:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-03-17 13:39:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'CSP IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'EDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.edf.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22463514400569301988846078241876273638853167086069297013577946820866997226434162697927314555349759310282637407963322842558931269204953110080372389808773742889138813077563908989331525647044878244053813270104662463500172007450331226693723697066053117827838466091140984807119843428342558172656587280501204588424506535185900659001087769559182631444490755426737724593583726398444012540035405829387001348544268635535422128868570359147514521524645132496433900321396964479301104785862080087578800132774925664781295650822918937784076177922332830997324478228273104530361493049834829823437934481091325153334230247078227124747017
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (15 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.edf.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							57f6a7b01bde36ea1af3ac41ce19fe7da34aab86
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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