ATT-NTCT-DGM-01.i.jasper.com

- Cisco Systems, Inc. -

Issued by HydrantID SSL ICA G2

About this certificate

This digital certificate with serial number 45:fe:89:ad:ad:be:a2:4f:74:18:e4:8e:7a:ef:1b:73:a6:d9:db:f9 was issued on by HydrantID (Avalanche Cloud Corporation).

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Cisco Systems, Inc.

Organization: Cisco Systems, Inc.
State / Province: California
Locality: San Jose
Country: US

HydrantID (Avalanche Cloud Corporation)

Organization: HydrantID (Avalanche Cloud Corporation)
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 45:fe:89:ad:ad:be:a2:4f:74:18:e4:8e:7a:ef:1b:73:a6:d9:db:f9
Serial Number (int): 399596745950240105645404814793423900204229843961
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: fe:c8:2d:fa:2a:03:73:ff:c4:28:b7:74:0b:df:d7:63:a2:84:cc:45
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7

Fingerprint (sha1): 55:ac:d9:3c:bc:e8:aa:9d:3a:f6:e4:42:36:0a:3b:19:98:60:64:d2
Fingerprint (sha256): 10:c7:4e:12:bf:5a:57:2c:ca:e1:b5:bd:23:63:f4:17:30:25:e4:1d:a7:c3:ac:68:17:58:00:4d:17:0e:a0:e6

Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl

Check the revocation status for certificate ATT-NTCT-DGM-01.i.jasper.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ATT-NTCT-DGM-01.i.jasper.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
IPSEC End System
IPSEC Tunnel
IPSEC User
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ATT-NTCT-DGM-01.i.jasper.com
ATL-NTCT-NSA-01.i.jasper.com

Other certificates including the domain name jasper.com

(limited to 100 certificates)
cc6.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com

Certificate

The complete raw certificate details for ATT-NTCT-DGM-01.i.jasper.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGczCCBFugAwIBAgIURf6Jra2+ok90GOSOeu8bc6bZ2/kwDQYJKoZIhvcNAQEL
BQAwXjELMAkGA1UEBhMCVVMxMDAuBgNVBAoTJ0h5ZHJhbnRJRCAoQXZhbGFuY2hl
IENsb3VkIENvcnBvcmF0aW9uKTEdMBsGA1UEAxMUSHlkcmFudElEIFNTTCBJQ0Eg
RzIwHhcNMjAwNDEzMTg1MDQzWhcNMjIwNDEzMTkwMDAwWjB6MQswCQYDVQQGEwJV
UzETMBEGA1UECAwKQ2FsaWZvcm5pYTERMA8GA1UEBwwIU2FuIEpvc2UxHDAaBgNV
BAoME0Npc2NvIFN5c3RlbXMsIEluYy4xJTAjBgNVBAMMHEFUVC1OVENULURHTS0w
MS5pLmphc3Blci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM
8nIswweIWGsEZ46iG67/Ln/qAyEHD3Vg9Ivd7ORLB/kstBLxtDupGt1VHMEFh1Iy
eZDEGnYa4YqXKPbxokYzXPggh0ejOYvE7cMwDJw9CqqUUzSPMUJhwJYoJTRkQOdV
6kcR6vagnhS6g2m4LZfiVAxWNQr8F+/B32Bj8cHPSWWQ7I0RSNNwJocR+ff59ABW
LwuEEjtNpt9Gxa88Ii2O4D2pH4pRNle29je399TWmltqbcIvqqK69XvjCR7brlr2
UVfTOJ8ZjG19hTXNhd0KEqHSbdoq8uxXhFdVFoGwrhj8J5euBku/cDgwH9ub5H7L
Vw6GRXghmxx1pFQp8orJAgMBAAGjggILMIICBzAJBgNVHRMEAjAAMB8GA1UdIwQY
MBaAFJhqti0uv6eqn/b31gmv1YtX+Yq3MHQGCCsGAQUFBwEBBGgwZjA4BggrBgEF
BQcwAoYsaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9oeWRzc2xnMi5j
cnQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTBF
BgNVHREEPjA8ghxBVFQtTlRDVC1ER00tMDEuaS5qYXNwZXIuY29tghxBVEwtTlRD
VC1OU0EtMDEuaS5qYXNwZXIuY29tMF4GA1UdIARXMFUwCAYGZ4EMAQICMEkGDCsG
AQQBvlgAA4cEADA5MDcGCCsGAQUFBwIBFitodHRwOi8vd3d3Lmh5ZHJhbnRpZC5j
b20vc3VwcG9ydC9yZXBvc2l0b3J5MDsGA1UdJQQ0MDIGCCsGAQUFBwMCBggrBgEF
BQcDBQYIKwYBBQUHAwYGCCsGAQUFBwMHBggrBgEFBQcDATA7BgNVHR8ENDAyMDCg
LqAshipodHRwOi8vY3JsLnF1b3ZhZGlzZ2xvYmFsLmNvbS9oeWRzc2xnMi5jcmww
HQYDVR0OBBYEFP7ILfoqA3P/xCi3dAvf12OihMxFMA4GA1UdDwEB/wQEAwIFoDAT
BgorBgEEAdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAgEAnH9oYVLoSce+
4XCJfJyrrK9aRQxcOaHlnL45KbfeEA1i3sxPXxswSFfcEBd09zSNmvcvK/KU5ax+
xc+bcgbLKlat4OHwdhioyJ+91gH+zrKoa9CYU1BOd+5bLM1xpPeQ0cXsno9VEeij
xkHNZr4BUe501ajvL/1yFblbU4Y8OXri+L8RalSxpdx5+4fvtqv+ExAgO91AJQX2
QGsEE+o0q6XKMKx8EsUEspbob4EpubOR5w/SwIXlHUzsg4jO5WJQlr0HF3Gr42YV
9EGVzzC6EuReG2jE43Ulew77PLSUn4RSD3Obd2zNRafkCo4UL8bItKsPGQTOHFLl
ZoVyDoFCpSVDKK03HizY///622dLe9QWAlLrxrCSSCt5Nhbmw1FK7Nt52HMWz34i
XlI3u9N2A8YhaNtx5ZvtDW7VsXv284jZL37MuPNh9XD8zyioIp7JVtZGKiCn3d/S
Vs79PUAwStBStftaqwi+mnnKIRsvQnTcCj2CaFLryhdPkuTOKDIsQVK8XFbK0COy
WOieou9QaBan1g1TmlVwjFC5RovOytiu0Y88YRxm4YqfyMFWWSQGNE52tRlchfiK
uvqbecLy1R2NCg0shkX8P3+J8F/vhnAir67TpyxfRv2KxGAOmvDnqhy7ySZaRs1u
uqLuqvODzU2b1eFdmjMOuKyltIgeezw=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPJyLMMHiFhrBGeOohuu
/y5/6gMhBw91YPSL3ezkSwf5LLQS8bQ7qRrdVRzBBYdSMnmQxBp2GuGKlyj28aJG
M1z4IIdHozmLxO3DMAycPQqqlFM0jzFCYcCWKCU0ZEDnVepHEer2oJ4UuoNpuC2X
4lQMVjUK/Bfvwd9gY/HBz0llkOyNEUjTcCaHEfn3+fQAVi8LhBI7TabfRsWvPCIt
juA9qR+KUTZXtvY3t/fU1ppbam3CL6qiuvV74wke265a9lFX0zifGYxtfYU1zYXd
ChKh0m3aKvLsV4RXVRaBsK4Y/CeXrgZLv3A4MB/bm+R+y1cOhkV4IZscdaRUKfKK
yQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 399596745950240105645404814793423900204229843961
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-13 18:50:43 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-04-13 19:00:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cisco Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ATT-NTCT-DGM-01.i.jasper.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25872168789322697434291403483264833780215836452440173306506753251942366302876631082258252205169513150063871835451024826532112627651557584638225937672937773535668796071829617825057012135406492123096249094146269560281591763574138635043540930132938140023039526832452323367658810260344153243041579071842434864294416474429151710012977665333076522570834093394074868450870491368589347736651663091337161933888525848989227253923520387302224261231860548269388342134374709475650172933823785198574123118825621239798581132756873873818384381713862734459416673182963374088293863034006509613302946660486420454900234941426615517874889
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ATT-NTCT-DGM-01.i.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ATL-NTCT-NSA-01.i.jasper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fec82dfa2a0373ffc428b7740bdfd763a284cc45
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		009c7f686152e849c7bee170897c9cabacaf5a450c5c39a1e59cbe3929b7de100d62decc4f5f1b304857dc101774f7348d9af72f2bf294e5ac7ec5cf9b7206cb2a56ade0e1f07618a8c89fbdd601feceb2a86bd09853504e77ee5b2ccd71a4f790d1c5ec9e8f5511e8a3c641cd66be0151ee74d5a8ef2ffd7215b95b53863c397ae2f8bf116a54b1a5dc79fb87efb6abfe1310203bdd402505f6406b0413ea34aba5ca30ac7c12c504b296e86f8129b9b391e70fd2c085e51d4cec8388cee5625096bd071771abe36615f44195cf30ba12e45e1b68c4e375257b0efb3cb4949f84520f739b776ccd45a7e40a8e142fc6c8b4ab0f1904ce1c52e56685720e8142a5254328ad371e2cd8fffffadb674b7bd4160252ebc6b092482b793616e6c3514aecdb79d87316cf7e225e5237bbd37603c62168db71e59bed0d6ed5b17bf6f388d92f7eccb8f361f570fccf28a8229ec956d6462a20a7dddfd256cefd3d40304ad052b5fb5aab08be9a79ca211b2f4274dc0a3d826852ebca174f92e4ce28322c4152bc5c56cad023b258e89ea2ef506816a7d60d539a55708c50b9468bcecad8aed18f3c611c66e18a9fc8c156592406344e76b5195c85f88abafa9b79c2f2d51d8d0a0d2c8645fc3f7f89f05fef867022afaed3a72c5f46fd8ac4600e9af0e7aa1cbbc9265a46cd6ebaa2eeaaf383cd4d9bd5e15d9a330eb8aca5b4881e7b3c