tfeportal.eu.nissan.biz

- Nissan Motor Manufacturing -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 07:e7:4c:83:92:3e:ef:55:da:f6:0a:aa:9f:6f:94:f3 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Nissan Motor Manufacturing

Organization: Nissan Motor Manufacturing
Locality: Sunderland
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 07:e7:4c:83:92:3e:ef:55:da:f6:0a:aa:9f:6f:94:f3
Serial Number (int): 10505568432096018252170588045009982707
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 51:42:b7:4c:1d:f2:6f:ff:06:f2:4d:ea:ac:7e:46:e6:d8:5f:0f:f5
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 39:24:92:1c:da:58:73:dc:cb:1b:38:86:8c:45:98:c1:a6:86:ff:1e
Fingerprint (sha256): 0d:7b:a7:e5:ac:ac:88:47:74:db:26:9f:f6:5e:2a:64:c7:12:4c:7d:a9:c7:57:1c:19:43:89:f8:a3:45:66:7d

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate tfeportal.eu.nissan.biz

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for tfeportal.eu.nissan.biz

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

tfeportal.eu.nissan.biz
www.tfeportal.eu.nissan.biz

Other certificates including the domain name nissan.biz

(limited to 100 certificates)
JP.NISSAN.BIZ
nlife.nna.na.nissan.biz
grcdev.na.nissan.biz
eroom4.w1.nissan.biz
*.qa.s.jp.nissan.biz
api1.stage.na.nissan.biz
clm.na.nissan.biz
nna-portal.acp.na.nissan.biz
SJ022040.jp.nissan.biz
nna-uc-edgpool1.nmcorp.nissan.biz
atlassian.na.nissan.biz
gidp.eu.nissan.biz
acs.th.nissan.biz
scmpops.sp.stage.na.nissan.biz
eu.nissan.biz
qa.eu.nissan.biz
acs2.th.nissan.biz
JP-NML-SJ022736.jp.nissan.biz
clarity.qa.na.nissan.biz
wm.jp.nissan.biz
qa.jp.nissan.biz
JP-NML-SJ016654.commproxy.jp.nissan.biz
sj014493.jp.nissan.biz
dev.eu.nissan.biz
eu.nissan.biz
w1.nissan.biz
GDAUTH.JP.NISSAN.BIZ
jp.nissan.biz
gdauth.qa.jp.nissan.biz
scmmqcentral.dev.na.nissan.biz
webmail2.jp.nissan.biz
S4HDA4.na.nissan.biz
eroom4.w1.nissan.biz
eroom1.stage.w1.nissan.biz
qa.jp.nissan.biz
b2bws3.na.nissan.biz
search-collab.share.jp.nissan.biz
th.nissan.biz
jatco.nmcorp.nissan.biz
login.qa.eu.nissan.biz
dlr.eu.nissan.biz
Sipaccess.jp.nissan.biz
bo.stg.na.nissan.biz
data.qa.jp.nissan.biz
Test.eu.nissan.biz
nero2.eu.nissan.biz
tfeportal.eu.nissan.biz
bitbucket.dev.na.nissan.biz
www.portal.uat.azul.ap.na.nissan.biz
*.dealer.jp.nissan.biz
QA.JP.NISSAN.BIZ
gd.intra.jp.nissan.biz
th.nissan.biz
auth.qa.jp.nissan.biz
smart-ts.na.nissan.biz
dlrsys.na.nissan.biz
dev.vims.na.nissan.biz
tableau.stg.nnanet.com
txirv-qa-fin01.nmcorp.nissan.biz
sj014493.jp.nissan.biz
JP-NML-SJ016250.JPQA.NMCorp.Nissan.Biz
usesncvw644.nmcorp.nissan.biz
qa.dealer.eipp.na.nissan.biz
th.nissan.biz
soa.eu.nissan.biz
QA.JP.NISSAN.BIZ
nlife.v9.stage.na.nissan.biz
politemail.na.nissan.biz
lgs.na.nissan.biz
dlrsys.dev.na.nissan.biz
acs.th.nissan.biz
ishare.na.nissan.biz
intra.qa.jp.nissan.biz
dm.spin.na.nissan.biz
*.dealer.qa.jp.nissan.biz
th.nissan.biz
GDAUTH.JP.NISSAN.BIZ
JP-NML-SJ013903.ocs.jp.nissan.biz
plugins.stage.w1.nissan.biz
JP.NISSAN.BIZ
search-collab.share.qa.jp.nissan.biz
nna-uc-fepool1.nmcorp.nissan.biz
w1.nissan.biz
jp-nml-sj016255.nmcorp.nissan.biz
GD.JP.NISSAN.BIZ
www.portal.uat.azul.ap.na.nissan.biz
sj014493.jp.nissan.biz
auth365.jp.nissan.biz
auth.jp.nissan.biz
SJ015030.jp.nissan.biz
qa.jp.nissan.biz
dm.spin.na.nissan.biz
wm.jp.nissan.biz
old1.nnanet.com
p1.jp.nissan.biz
JP-NML-SJ013904.webcomm.jp.nissan.biz
eroom4.w1.nissan.biz
saml.jp.nissan.biz
hppc.dev.na.nissan.biz
eu.nissan.biz

Certificate

The complete raw certificate details for tfeportal.eu.nissan.biz in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIQB+dMg5I+71Xa9gqqn2+U8zANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAyMjIxNTA3NTRaFw0yNTAzMDExNTA3NTNaMGkxCzAJBgNVBAYTAkdCMRMwEQYD
VQQHEwpTdW5kZXJsYW5kMSMwIQYDVQQKExpOaXNzYW4gTW90b3IgTWFudWZhY3R1
cmluZzEgMB4GA1UEAxMXdGZlcG9ydGFsLmV1Lm5pc3Nhbi5iaXowggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdc1OgYQh33j2PE9rgpGWZ/sP3eg09f86
+XR6DumsVuhUKSU7YenNttpLdymCK7n1AssUY9bczHtO8uSOm0XejKuyudVg13y5
krN4ivxgqTbOrpTd3iErGPes2taHeqjQCGk6htryiBk4cwPQbVsYGHKQAGzIcXdc
3fTN6vsusus2AWoxobmd3AijHFAFQ5Lzjgb8En2k8A3HjzGdBthZ00Z+UaHPUnkL
jX1RUmwEatxaa7+p/zMv+vR3JZna8ysPeLFvrPbI9tft0Vzel1snTNu6t9KplrTg
ekhEgoQuODa6tTyS1rlwtK6kEB6dXD/hakIQ8od7lrkHUQXNrlfrAgMBAAGjggGB
MIIBfTAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBRRQrdMHfJv/wbyTeqsfkbm2F8P
9TAfBgNVHSMEGDAWgBSConB03bxTP8971PfNf6dgxgpMvzBoBggrBgEFBQcBAQRc
MFowIwYIKwYBBQUHMAGGF2h0dHA6Ly9vY3NwLmVudHJ1c3QubmV0MDMGCCsGAQUF
BzAChidodHRwOi8vYWlhLmVudHJ1c3QubmV0L2wxay1jaGFpbjI1Ni5jZXIwMwYD
VR0fBCwwKjAooCagJIYiaHR0cDovL2NybC5lbnRydXN0Lm5ldC9sZXZlbDFrLmNy
bDA/BgNVHREEODA2ghd0ZmVwb3J0YWwuZXUubmlzc2FuLmJpeoIbd3d3LnRmZXBv
cnRhbC5ldS5uaXNzYW4uYml6MA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAKBggr
BgEFBQcDATATBgNVHSAEDDAKMAgGBmeBDAECAjATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAqB/5hRkLeJgINea/0Iv/iNm6xNItgXmegIc0
LIUuuKN0Si1v1O+ymGUkSzqms+JwI8eQ6dLDGOJdjTapDnjLeqn3BtqWF5epgc+8
7LxuaPQcR+w6WknfcGrwOh4akG+zCsOjBsXT/fgM1HF0stH6kVcfRowfEI50pUyt
Yvgql0RPDRNeTkMVH0iZHzN9tg2aU0SqRiw8Hxrm7VOjXXquQoVBIuPAxMsAiDQ6
7nBhiHWS3jMVvy5lT2HnQ/TjzRRob6YW5FVc0rTBQ2Bzz/30GnJxOqs4heylfdaz
krRlRiMnMh2+sZdZQrormCLzTLw4AAhl2QL+oZhNuYscBJ2HEQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXXNToGEId949jxPa4KR
lmf7D93oNPX/Ovl0eg7prFboVCklO2HpzbbaS3cpgiu59QLLFGPW3Mx7TvLkjptF
3oyrsrnVYNd8uZKzeIr8YKk2zq6U3d4hKxj3rNrWh3qo0AhpOoba8ogZOHMD0G1b
GBhykABsyHF3XN30zer7LrLrNgFqMaG5ndwIoxxQBUOS844G/BJ9pPANx48xnQbY
WdNGflGhz1J5C419UVJsBGrcWmu/qf8zL/r0dyWZ2vMrD3ixb6z2yPbX7dFc3pdb
J0zburfSqZa04HpIRIKELjg2urU8kta5cLSupBAenVw/4WpCEPKHe5a5B1EFza5X
6wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10505568432096018252170588045009982707
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-22 15:07:54 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-01 15:07:53 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Sunderland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Nissan Motor Manufacturing'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'tfeportal.eu.nissan.biz'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24927036399290944556434968211607349361002696235657356014594217200460368769221447824462270452850060152250130396110506693100946548882604968840031546497731758556276692554452259905316832172163541382438932919575836910502733732845650174474291337493325813380324725944364607139926563922880560750719954913714311312541012671153958096815502691679654915072637067766609614365201456935013408847876595072046468843295860279771354679328663782110287671026433746036816890836855246019230846697931885761533849225829170359243141001531051753327529305134211586579311713352128365447386695191763525851789531262186195383429163565174287185631211
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5142b74c1df26fff06f24deaac7e46e6d85f0ff5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tfeportal.eu.nissan.biz'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.tfeportal.eu.nissan.biz'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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