wg003045.rwe.com
- RWE AG -
Issued by GlobalSign RSA OV SSL CA 2018
About this certificate
This digital certificate with serial number 7e:72:db:f5:c6:c5:67:0b:7c:e1:9b:68 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
RWE AG
Organization:
RWE AG
State / Province:
Nordrhein-Westfalen
Locality: Essen
Country: DE
Locality: Essen
Country: DE
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7e:72:db:f5:c6:c5:67:0b:7c:e1:9b:68Serial Number (int): 39133967512960560385340054376
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 47:fc:63:7d:cc:f4:e3:fa:5e:97:d9:f0:97:37:06:8c:6a:7c:6c:16
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb
Fingerprint (sha1): be:3b:2c:9f:83:be:c0:3d:c6:a7:eb:71:c7:74:c8:be:4f:55:9a:84
Fingerprint (sha256): 0d:0f:44:b5:fd:1b:09:5e:55:45:1e:77:ad:0e:5a:56:f8:6c:86:a5:1b:90:ee:98:62:ba:d4:1b:2a:2c:98:91
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018Check the revocation status for certificate wg003045.rwe.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for wg003045.rwe.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
wg003045.rwe.com
Other certificates including the domain name rwe.com
(limited to 100 certificates)
virtuadesktest.rwe.com
sentinel.rwe.com
www.hr-fb.rwe.com
rwestra.rwe.com
gis.rwe.com
news.rwe.com
lyncweb.rwe.com
group.rwe
autodiscover.rwe.com
supplierqs.rwe.com
supplierdev.innogy.com
vdi2.stpa.rwe.com
www.rwe.com
wlanguestaccess.rwe.com
easkkw.rwe.com
autodiscover.rwe.com
virtuadesk.rwe.com
b2edev.innogy.com
a-mdmsentry.rwe.com
www.rwe.com
chefdml.rwe.com
supplierdev.innogy.com
sodra-midsjobanken.rwe.com
lyncweb.rwe.com
medaco.rwe.com
crs.rwe.com
rwestguestaccess.rwe.com
fdl.rwe.com
sentinel.rwe.com
gastro.rwe.com
mx1.rwe.com
proper.rwe.com
b2edev.innogy.com
americas.rwe.com
csab.rwe.com
osuc-mobile.rwe.com
v99-exp01p-ext.rwe.com
rweg-uk-dedcwvsr-uc902.rwe.com
mail.rwe.com
webmarket.rwe.com
themis.rwe.com
info-securelogin.rwe.com
gateway.stpa.rwe.com
pfm.rwe.com
teamwork.rwe.com
cage-d-pdn.rwe.com
maintenance.rwe.com
gbg.rwe.com
mars.rwe.com
virtuadesk.rwe.com
smartpool-portal.rwe.com
sip.innogy.com
prod.nexus.aws-eu1.rwe.com
proper.rwe.com
rsdr.rwe.com
virtuadesk.rwe.com
jira.tgb.rwe.com
wg003045.rwe.com
mx4.rwe.com
testconnect.rwe.com
survey.rwe.com
webmarket.innogy.com
gateway1.stpa.rwe.com
b2e.innogy.com
pod.rwe.com
secmail.rwe.com
crstest.rwe.com
maintenance.rwe.com
gis.rwe.com
portal.gasstorage-west.rwe.com
info-mdm.rwe.com
properbackendnonprod.rwe.com
a-mdmcore.rwe.com
rga.rwe.com
view.rwe.com
lyncweb.rwe.com
hportal.rwe.com
mail.rwe.com
vmgmail25.rwe.com
hportal.rwe.com
connect.rwe.com
essmobile.rwe.com
ukrga.rwenpower.com
info-securelogin.rwe.com
lyncweb.rwe.com
info-isp.rwe.com
login.rwe.com
mars.rwe.com
druckcockpit.rwe.com
gfh-portal.rwe.com
access02.rwe.com
rdsgw.tgb.rwe.com
sup.rwe.com
bitbucket.rwe.com
inubit-test.rwe.com
acc-login.rwe.com
ecoflex.rwe.com
esourcing.rwe.com
epos-marktplatz.rwe.com
bee360.rwe.com
sentinel.rwe.com
www.hr-fb.rwe.com
rwestra.rwe.com
gis.rwe.com
news.rwe.com
lyncweb.rwe.com
group.rwe
autodiscover.rwe.com
supplierqs.rwe.com
supplierdev.innogy.com
vdi2.stpa.rwe.com
www.rwe.com
wlanguestaccess.rwe.com
easkkw.rwe.com
autodiscover.rwe.com
virtuadesk.rwe.com
b2edev.innogy.com
a-mdmsentry.rwe.com
www.rwe.com
chefdml.rwe.com
supplierdev.innogy.com
sodra-midsjobanken.rwe.com
lyncweb.rwe.com
medaco.rwe.com
crs.rwe.com
rwestguestaccess.rwe.com
fdl.rwe.com
sentinel.rwe.com
gastro.rwe.com
mx1.rwe.com
proper.rwe.com
b2edev.innogy.com
americas.rwe.com
csab.rwe.com
osuc-mobile.rwe.com
v99-exp01p-ext.rwe.com
rweg-uk-dedcwvsr-uc902.rwe.com
mail.rwe.com
webmarket.rwe.com
themis.rwe.com
info-securelogin.rwe.com
gateway.stpa.rwe.com
pfm.rwe.com
teamwork.rwe.com
cage-d-pdn.rwe.com
maintenance.rwe.com
gbg.rwe.com
mars.rwe.com
virtuadesk.rwe.com
smartpool-portal.rwe.com
sip.innogy.com
prod.nexus.aws-eu1.rwe.com
proper.rwe.com
rsdr.rwe.com
virtuadesk.rwe.com
jira.tgb.rwe.com
wg003045.rwe.com
mx4.rwe.com
testconnect.rwe.com
survey.rwe.com
webmarket.innogy.com
gateway1.stpa.rwe.com
b2e.innogy.com
pod.rwe.com
secmail.rwe.com
crstest.rwe.com
maintenance.rwe.com
gis.rwe.com
portal.gasstorage-west.rwe.com
info-mdm.rwe.com
properbackendnonprod.rwe.com
a-mdmcore.rwe.com
rga.rwe.com
view.rwe.com
lyncweb.rwe.com
hportal.rwe.com
mail.rwe.com
vmgmail25.rwe.com
hportal.rwe.com
connect.rwe.com
essmobile.rwe.com
ukrga.rwenpower.com
info-securelogin.rwe.com
lyncweb.rwe.com
info-isp.rwe.com
login.rwe.com
mars.rwe.com
druckcockpit.rwe.com
gfh-portal.rwe.com
access02.rwe.com
rdsgw.tgb.rwe.com
sup.rwe.com
bitbucket.rwe.com
inubit-test.rwe.com
acc-login.rwe.com
ecoflex.rwe.com
esourcing.rwe.com
epos-marktplatz.rwe.com
bee360.rwe.com
Certificate
The complete raw certificate details for wg003045.rwe.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE2DCCA8CgAwIBAgIMfnLb9cbFZwt84ZtoMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMjEyMTMxMzExMTFaFw0y NDAxMTQxMzExMTBaMGcxCzAJBgNVBAYTAkRFMRwwGgYDVQQIExNOb3JkcmhlaW4t V2VzdGZhbGVuMQ4wDAYDVQQHEwVFc3NlbjEPMA0GA1UEChMGUldFIEFHMRkwFwYD VQQDExB3ZzAwMzA0NS5yd2UuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIB CgKCAQEAnn3Td61g2Sjv+yZBOQgi1RvQBopKu4tqkpge/0Fkpk2vCCtXcgpq8Onl ccvxLrswieDfOiS5Ut2U9Rtwi3cPbYXTsoH96+w00Ouv2wL9NLpu5nqAIcCtV9Z8 vDFrB2wIazAmIeSlBv9Em79i5vDPLR36575TYvcKuS0ZbIPjY0i36JFIoz7PpXp0 BqrDmpzI6acrDLpxLWms5fuWdrfJA+MAxUUlzRs+PQlQMI5mpv87N91rjvAj3L9p L319iLnV5vkdKT8JfkuC2v/Yvmzd1/4ZxZlpxgq5C4JWiGV339PTHf6pq+niyC3p XL34wwt+QbxdmSzllsOyeF7g9fZY6wIDAQABo4IBmTCCAZUwDgYDVR0PAQH/BAQD AgWgMIGOBggrBgEFBQcBAQSBgTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJl Lmdsb2JhbHNpZ24uY29tL2NhY2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3Bggr BgEFBQcwAYYraHR0cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNh MjAxODBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRw czovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYD VR0TBAIwADAbBgNVHREEFDASghB3ZzAwMzA0NS5yd2UuY29tMB0GA1UdJQQWMBQG CCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGH AwKz6zAdBgNVHQ4EFgQUR/xjfcz04/pel9nwlzcGjGp8bBYwEwYKKwYBBAHWeQIE AwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAIooSkPb1GXNhcHgmroEbcDiRnO0 4zqljYBynJhkrWRYoFvmD/T30neuFpQfENynsgnH+Ly3OY0ymc8ZavxlRkJNwmzJ 2vkGayAHq50Qtb0tEgB31p4ccmErAnZBSeT41DvRXOdo6M9M2O2BTLvOY3UW6t6w ie2WfejIU2Gj6lS+UGd8Vl1beEWS5BvT03TD1TZ8muK1kywGqr+c24myhpe2JEMw sSKw8Rxhe2ytcJSGOJ/QsC7lYzbvLEbeQLAr56nCPstUYgmE6d8KyGWdF9A304V0 Pd1F3WQUuZ1BSJmDaQuNXJazhUd6rnShHj6J07mXAJWdEYZg8Zboo1tdlUo= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnn3Td61g2Sjv+yZBOQgi 1RvQBopKu4tqkpge/0Fkpk2vCCtXcgpq8OnlccvxLrswieDfOiS5Ut2U9Rtwi3cP bYXTsoH96+w00Ouv2wL9NLpu5nqAIcCtV9Z8vDFrB2wIazAmIeSlBv9Em79i5vDP LR36575TYvcKuS0ZbIPjY0i36JFIoz7PpXp0BqrDmpzI6acrDLpxLWms5fuWdrfJ A+MAxUUlzRs+PQlQMI5mpv87N91rjvAj3L9pL319iLnV5vkdKT8JfkuC2v/Yvmzd 1/4ZxZlpxgq5C4JWiGV339PTHf6pq+niyC3pXL34wwt+QbxdmSzllsOyeF7g9fZY 6wIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 39133967512960560385340054376 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-12-13 13:11:11 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-14 13:11:10 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nordrhein-Westfalen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Essen' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RWE AG' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'wg003045.rwe.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20007699319896015781007453835164160751995126750910900083480521471562367911835755975977617381912452584053728989257570997873676047066291173870240617758381481388251733904053327480014932631409092947599727339210694001001517229433920171836934749537327457043036434790639528659117727818823124401696949188681812707052673208549859779319638783171010199560542028432707714102459403207471180124625907696297383474286616469113071731649996840735546910215753259567559646580649100111921224577804892729043286881855165350464498246673842433010986016773363010575543681430740926209969787470770402818702870666608475140677314081143465889388779 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'wg003045.rwe.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 47fc637dccf4e3fa5e97d9f09737068c6a7c6c16 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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