www.american.edu

- American University -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 75:e7:56:ed:cc:d5:40:31:63:32:e6:46 was issued on by GlobalSign nv-sa.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

American University

Company registration number: not an incorportation agency
Organization: American University
Organization unit: Office of Information Technology
Address: 4620 Wisconsin Ave NW
State / Province: District of Columbia
Locality: Washington
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 75:e7:56:ed:cc:d5:40:31:63:32:e6:46
Serial Number (int): 36489418523583998573447145030
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 33:97:31:fa:a7:7c:8b:38:9e:ad:fe:22:ee:6f:3c:aa:a7:17:ac:ab
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): 3c:ba:d1:a6:7d:1f:70:3d:0f:9d:b8:80:42:80:a5:87:dd:c5:76:8e
Fingerprint (sha256): 10:d9:3b:5f:38:ce:fc:1c:c9:c2:62:3a:31:64:46:cd:33:b3:f8:d0:1a:19:d9:76:4b:b3:25:d1:2a:1e:f8:04

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate www.american.edu

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.american.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.american.edu
datatelweb.american.edu
webui.american.edu
mail.american.edu
giving.american.edu
american.edu

Other certificates including the domain name american.edu

(limited to 100 certificates)
titaniumcc.american.edu
2factor.american.edu
dra.american.edu
digitalcommons.wcl.american.edu
dra.american.edu
statcrunch.american.edu
biapp-qa.american.edu
mobileapp.american.edu
landing.online.american.edu
biapp-qa.american.edu
research.american.edu
intern.blogs.american.edu
dra.american.edu
wwwredirects.american.edu
au.blogs.american.edu
domino.american.edu
jobs.american.edu
programs.online.american.edu
papercut-test.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
subversion.american.edu
alumni.blogs.american.edu
goed.american.edu
offcampushousing.fau.edu
recfit.blogs.american.edu
spdev-sivakumar.american.edu
onlinebusiness.american.edu
wipar.blogs.american.edu
apply.soeonline.american.edu
recruiterprodapp.american.edu
listserv.american.edu
n002.offcampuspartners.com
www.american.edu
americanmag.blogs.american.edu
auinfra.american.edu
offcampushousing.fau.edu
clockwork.american.edu
vcsandbox.american.edu
spam.american.edu
offcampushousing.fau.edu
webwork.american.edu
calendar.library.american.edu
*.american.edu
openbooks.american.edu
fsmigrateorch.american.edu
privacybasics.american.edu
online-orientation.american.edu
niwaplibrary.wcl.american.edu
aumail7.american.edu
informer.american.edu
us-east-1-san3.blackboard.com
socdeansintern.blogs.american.edu
keysystems.american.edu
informerbidev.american.edu
aumail3.american.edu
blogs.american.edu
*.ironline.american.edu
library.wcl.american.edu
n002.offcampuspartners.com
n002.offcampuspartners.com
www.american.edu
auaccess.american.edu
desigoems.american.edu
bbts.american.edu
*.ironline.american.edu
spweb201.american.edu
vpn.american.edu
careeradvisor.blogs.american.edu
soeonline.american.edu
rctugtst19sqlag.american.edu
incircle.alumni.american.edu
ems.cas.american.edu
webnow.american.edu
cloudfront.american.edu
sccmwks.american.edu
landing.online.american.edu
mediaspace.american.edu
ufund.american.edu
n002.offcampuspartners.com
sccmwksdp1.american.edu
aumail6.american.edu
ironline.american.edu
offcampushousing.fau.edu
digitalcommons.wcl.american.edu
jamfproxy.american.edu
iisredir.american.edu
digitalcommons.wcl.american.edu
colprdapi.american.edu
*.onlinelaw.wcl.american.edu
iisredir.american.edu
2factor.american.edu
intern.blogs.american.edu
offcampushousing.fau.edu
online.american.edu
auadfs.american.edu
colprdssweb1.american.edu
offcampushousing.fau.edu
splunkprdjs.american.edu
*.ironline.american.edu

Certificate

The complete raw certificate details for www.american.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljD7aR/hM1DUsMQ6mmqG
i8WGkSh1GW6+Dng2t6VkanSdQA1lpjFAgbLRFfrqKF8teJ9sm1mUQID7AO7eNOKv
OEKVXAfe73DE+GrKuS40DEzxdgqki88chsUlebh9dYJk+pEhD6ZeVItAqvFe1GDU
8B+3O/YJfzIHXvGvM6c0cd0CP+ssXuFkAXxvvmwqq9UsycQy6XhOMN9+aQ/hI4U1
GTr4Ls426it/uA8TzwCwSrSlKsRIwOzBaxCAvB10+HPyM2sA91H/OnXarvwlZpuQ
9MwA5vKCq1M+p4NyyVImxzGrwXSogRE7Dw9Pe9sj1Vh7/x/AGBshvUEtPB/qc7Xu
RwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 36489418523583998573447145030
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-10-21 17:24:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-22 04:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'not an incorportation agency'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.1 (jurisdictionOfIncorporationL)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'District of Columbia'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '4620 Wisconsin Ave NW'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Office of Information Technology'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'American University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.american.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18959899705248259127877419851334735491196923070167163044665567878024509445791765700030098153227931412570304349041333706678742088584766590299255432311885880044913932143652954312362750217871803611169120349011658835016872761981983153188819282258111159275850220179887437544972002461525754169742927804387819830549473892337398516654231217310555005604004756144409644433778796837702519873332804629982764661849116844464583008220320586722752009321083607002412767448070233180823029232961253598792736747477811448566127876723711568791364689970369393291855191704681850259661267598955823888530765650606579878129465489997820010556999
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (119 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'datatelweb.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'webui.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'giving.american.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'american.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							339731faa77c8b389eadfe22ee6f3caaa717acab
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (604 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (600 bytes)
							02560075005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd00000157e845663f000004030046304402200ae8c4a2174d08d1619d8a74e11184fe6c648737620f559798a300f6cc06d4ed0220635e0b90a360ac9bd131a588173d93ddda6261ea8056276e17fa7847ee7c5f0500760068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc400000157e845667f0000040300473045022100f7927767075864af1ba4061f3deb83f5ae96e9e1fb0127e53b1ce45397d2bcc302200e85475f859f3e0fb63b1408005688fdc4e44fffa6973485fc5efe03c771407a007600ddeb1d2b7a0d4fa6208b81ad8168707e2e8e9d01d55c888d3d11c4cdb6ecbecc00000157e845676e000004030047304502202126477758fc794b8ef02a966772bbef46640f86b8e90ff634aeadf20fd73134022100db164205b50f4d80d7516a01808e2eaf0d951f3ec5db9fd55d8d0ad6d53c1250007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc1000000157e84566c00000040300463044022046231d1db2334f73a66d6f2ef56d99a945f561b404c01b32a108997c8f46d5ed022017e3579487fc8a23350fe719c634aeac147ad6b93f4a271964f98a6fdf1926c4007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb00000157e8456ae30000040300473045022058fa74c5ec8ffb57b25ec442d583fd0d52233d81272aca7a4f12eb13c6876be6022100b0c2145b45a6e57bde6b204a3c823521b5c682d1426bebfaa2361fff31505ef6
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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