dsmintegrationcloud.dsm.com

- DSM Group Business Services BV -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 77:2a:70:b0:f9:7f:17:48:4a:65:d9:c7:db:7b:3c:f2 was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

DSM Group Business Services BV

Organization: DSM Group Business Services BV
Locality: Heerlen
Country: NL

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 77:2a:70:b0:f9:7f:17:48:4a:65:d9:c7:db:7b:3c:f2
Serial Number (int): 158398493617711074106123809285511789810
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: af:84:86:a2:cd:1c:19:eb:71:71:f1:07:93:9b:8c:4b:ad:a5:33:3b
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 78:0e:e3:ea:ef:32:aa:93:b5:1b:f0:3f:b1:72:a2:58:ec:8b:e1:4e
Fingerprint (sha256): 0d:f9:9c:a7:7a:e2:e0:ef:6c:0d:26:0f:43:c4:d6:f0:23:a5:c1:cc:f0:11:5d:20:a1:3f:08:cf:f3:27:0c:61

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dsmintegrationcloud.dsm.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dsmintegrationcloud.dsm.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dsmintegrationcloud.dsm.com

Other certificates including the domain name dsm.com

(limited to 100 certificates)
wcm.qa.dsm.com
www.dsm.com
www.dsm.com
nutritionportal.dsm.com
emea-access.dsm.com
test.cgi.dsm.com
dsm-wd.dsm.com
www.dsm.com
*.eightfold.ai
dsmintegrationcloudqa.dsm.com
technicaldocuments.dsm.com
dsm.CRMQA.dsm.com
wcm.test.dsm.com
newsletter.dsm.com
engineerconnect.dsm.com
www.dsm.com
amec-web-ext.dsm.com
www.rfq-dmsc.dsm.com
virtualweb.dsm.com
apac-access.dsm.com
jaedtest.dsm.com
*.eightfold.ai
technicaldocuments.dsm.com
www-qa.dsm.com
virtuadeskchina.dsm.com
testproxy.dsm.com
dsm.com
topview.dsm.com
b2b.dsm.com
technicaldocuments.dsm.com
dsmintegrationcloud.dsm.com
emea-access.dsm.com
technicaldocuments.dsm.com
virtualweb.dsm.com
tb.analytics.dsm.com
delvo-analytics.dsm.com
dsm.com
mytoolbox.dsm.com
Shanghaida.dsm.com
www.dsm.com
dsm.CRM.dsm.com
webshop.dsm.com
meerbuschda.dsm.com
dsmintegrationcloudqa.dsm.com
dsm.com
testreplace.dsm.com
webservice-qa.dsm.com
testreplace.dsm.com
virtuadesk.dsm.com
mysupport.dsm.com
testev.dsm.com
dsm.com
LWPVPN.DSM.COM
engineerconnect.dsm.com
webservice-qa.dsm.com
*.eightfold.ai
lsrp.dsm.com
ftebudgeting-test.dsm.com
demo12.dsm.com
api-onpremise.dsm.com
*.dsm.com
wcm.dsm.com
insights4.dsm.com
join.dsm.com
webconf.dsm.com
ra.dsm.com
webservice-dev.dsm.com
wcm.qa.dsm.com
ftebudgeting.dsm.com
api-onpremise.dsm.com
testdsm.dsm.com
*.eightfold.ai
dsm-wda.dsm.com
idm.dsm.com
ultracalculator.dsm.com
testSAN1.dsm.com
sonarqube.dt.foundation.snr.dsm.com
virtualweb.dsm.com
dsm.com
*.eightfold.ai
notifyiris.dsm.com
teamroom.dsm.com
sbc802.dsm.com
webshop.dsm.com
myotherhostname.dsm.com
myotherhostname.dsm.com
virtualweb.dsm.com
*.eightfold.ai
brains.dsm.com
brains.dsm.com
test.dsm.com
newsletter.dsm.com
virtualweb.dsm.com
dsm.com
delvo-analytics.dsm.com
mysupport.dsm.com
webshop.dsm.com
*.eightfold.ai
buildserver.qa.dsm.com
depmdac.dsm.com

Certificate

The complete raw certificate details for dsmintegrationcloud.dsm.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFJzCCBA+gAwIBAgIQdypwsPl/F0hKZdnH23s88jANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDA0MjYwNDQ0MTNaFw0yNTA0MjYwNDQ0MTJaMG4xCzAJBgNVBAYTAk5MMRAwDgYD
VQQHEwdIZWVybGVuMScwJQYDVQQKEx5EU00gR3JvdXAgQnVzaW5lc3MgU2Vydmlj
ZXMgQlYxJDAiBgNVBAMTG2RzbWludGVncmF0aW9uY2xvdWQuZHNtLmNvbTCCASIw
DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALZ2wCV82Oemz3Qsdxp6wIb7kka7
5n+PcTGXEk8YjVpMgmxIzmD9yYuXQ7/Q8V7rT2CKWnZfEGa9vIrR81swAbUi/f7G
ZWAfLk1Efwf9PznSaoSqfuVE/nV6cSJVPUP8Eq4cgdDlbRAxKQFim+ka8MvXdsxa
EFWyJLB1gcWRtanu4hoG2QsLtVAG531tiRJVmIJb1wEAhYlaEQHuPO9WYf0mVP2Q
6xK+SaFDTDgkcGbS+baya0QO9tUmov9vT5HYW7N8LGOeSQHxpZLo//IdSU9TmKLP
1BNV7GwS6FrTWHF8BVBg9n2dx6ba/tRloIOYxB/9mJ8mWSNysr0mEYo1+TUCAwEA
AaOCAXIwggFuMAwGA1UdEwEB/wQCMAAwHQYDVR0OBBYEFK+EhqLNHBnrcXHxB5Ob
jEutpTM7MB8GA1UdIwQYMBaAFIKicHTdvFM/z3vU981/p2DGCky/MGgGCCsGAQUF
BwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0cDovL29jc3AuZW50cnVzdC5uZXQwMwYI
KwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNl
cjAzBgNVHR8ELDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVs
MWsuY3JsMCYGA1UdEQQfMB2CG2RzbWludGVncmF0aW9uY2xvdWQuZHNtLmNvbTAO
BgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBMG
A1UdIAQMMAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3
DQEBCwUAA4IBAQC1raKOfZaIfD6l2xGqMalvP4RLwcN/3Vpsrq3tk8disQyfNEl3
0sfJ+YQJC/qZQ/ApIPzZvnen/x08mpN+yWzCCah63AgJcgavmj+qoFRRwA7/5X4Q
/ph+WKUtrKmAYVP7oFrm/W65xnP/e2I6V+YA1OoDYvVT/K81Bvxlb/seUal79pii
m4caQZSxphg4b4X5meD0WKAm1RCWSn1CCdLVYAo3iSiKYC+NMH5F0HVaaRZOSNvA
Ede81DJsmLsofH1+o7svPc+4AE95jTVp3UFZtWr/GhVrBzjLuSrEDQHEWWK8SZV4
jLK0FilMYp6T4MHuAGdQlAvt6QovE/UKBv8v
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtnbAJXzY56bPdCx3GnrA
hvuSRrvmf49xMZcSTxiNWkyCbEjOYP3Ji5dDv9DxXutPYIpadl8QZr28itHzWzAB
tSL9/sZlYB8uTUR/B/0/OdJqhKp+5UT+dXpxIlU9Q/wSrhyB0OVtEDEpAWKb6Rrw
y9d2zFoQVbIksHWBxZG1qe7iGgbZCwu1UAbnfW2JElWYglvXAQCFiVoRAe4871Zh
/SZU/ZDrEr5JoUNMOCRwZtL5trJrRA721Sai/29Pkdhbs3wsY55JAfGlkuj/8h1J
T1OYos/UE1XsbBLoWtNYcXwFUGD2fZ3Hptr+1GWgg5jEH/2YnyZZI3KyvSYRijX5
NQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 158398493617711074106123809285511789810
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-26 04:44:13 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-26 04:44:12 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Heerlen'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DSM Group Business Services BV'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dsmintegrationcloud.dsm.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23033929593373976752438580562300208671447367009131539639047715808207850385621704372768994969080262463278795927507260660888825517325103598059222338963661078197627229791224305426929641715108909120064759350101031036278649880486626563160546346075293938481771497489681404904510709097619217491635931006858119747420049234572116594132962855077172313694360379700709193331168467434253751563248559779672221745891979780843305273656857431156525665062192030134886821032324297383118003370337045565089058392899335159551529244219255424975938635779376599405124232500199712751454205168831422393503831027928473738632368756239813446072629
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							af8486a2cd1c19eb7171f107939b8c4bada5333b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (31 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dsmintegrationcloud.dsm.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00b5ada28e7d96887c3ea5db11aa31a96f3f844bc1c37fdd5a6caeaded93c762b10c9f344977d2c7c9f984090bfa9943f02920fcd9be77a7ff1d3c9a937ec96cc209a87adc08097206af9a3faaa05451c00effe57e10fe987e58a52daca9806153fba05ae6fd6eb9c673ff7b623a57e600d4ea0362f553fcaf3506fc656ffb1e51a97bf698a29b871a4194b1a618386f85f999e0f458a026d510964a7d4209d2d5600a3789288a602f8d307e45d0755a69164e48dbc011d7bcd4326c98bb287c7d7ea3bb2f3dcfb8004f798d3569dd4159b56aff1a156b0738cbb92ac40d01c45962bc4995788cb2b416294c629e93e0c1ee006750940bede90a2f13f50a06ff2f