www.cambridgeshireinsight.org.uk
Issued by GlobalSign Domain Validation CA - SHA256 - G2
About this certificate
This digital certificate with serial number 4a:e9:e4:da:9a:fd:7c:51:9d:e5:db:8c was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=www.cambridgeshireinsight.org.uk,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 4a:e9:e4:da:9a:fd:7c:51:9d:e5:db:8cSerial Number (int): 23184651174866265372063292300
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 87:64:ad:e9:41:5c:34:2b:fd:b8:46:28:8c:cb:5e:7e:0f:d9:30:ef
AuthorityKeyId: ea:4e:7c:d4:80:2d:e5:15:81:86:26:8c:82:6d:c0:98:a4:cf:97:0f
Fingerprint (sha1): 5d:93:25:8f:c1:89:23:e6:01:ba:89:e0:4c:71:24:fb:80:06:77:f1
Fingerprint (sha256): 10:da:58:46:91:5e:76:c3:50:25:a0:f8:5b:d9:df:8e:55:55:70:2f:93:04:65:02:8e:68:b6:fb:56:2b:4b:98
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g2CRL Distribution Point: http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl
Check the revocation status for certificate www.cambridgeshireinsight.org.uk
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for www.cambridgeshireinsight.org.uk
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
www.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
Other certificates including the domain name cambridgeshireinsight.org.uk
(limited to 100 certificates)
cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
opendata.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
ssl376429.cloudflaressl.com
www.cambridgeshireinsight.org.uk
www.cambridgeshireinsight.org.uk
Certificate
The complete raw certificate details for www.cambridgeshireinsight.org.uk in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIHLDCCBhSgAwIBAgIMSunk2pr9fFGd5duMMA0GCSqGSIb3DQEBCwUAMGAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzIwHhcN MTgwMjIxMTQwNTQ3WhcNMjAwMjIyMTQwNTQ3WjBOMSEwHwYDVQQLExhEb21haW4g Q29udHJvbCBWYWxpZGF0ZWQxKTAnBgNVBAMTIHd3dy5jYW1icmlkZ2VzaGlyZWlu c2lnaHQub3JnLnVrMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Dk1 I7JpnevE5nllQPb/dPQgajHZ57lLFt8pypity2/IFMgwPCc4MutDds4I8IXK1Ha/ e4v1KQUCtfy9GcxgTjzfyHVzviiGnvMMS/GnavwzGmMNxbDV2TtoDvJkRoKNx3vf aJ1tmCv1sFkbMS7EHf+FCwGB+Nq6eolFpqejTf8OYjU46cPgODRaJcVkaQVP5WRs FlcEHo97yNwGelcu5RUvbu7hKMecIOETcTWn5quwRCF8OOxEdBkRyS2/oQsixBJf iGWsnl7OJpDrDHssvrNFMey8p4ITGw7ScQAuosNrTLN1N67N4CqG9O1QwiSDiblc yS70boxAm9mMttrshQIDAQABo4ID9jCCA/IwDgYDVR0PAQH/BAQDAgWgMIGUBggr BgEFBQcBAQSBhzCBhDBHBggrBgEFBQcwAoY7aHR0cDovL3NlY3VyZS5nbG9iYWxz aWduLmNvbS9jYWNlcnQvZ3Nkb21haW52YWxzaGEyZzJyMS5jcnQwOQYIKwYBBQUH MAGGLWh0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc2RvbWFpbnZhbHNoYTJn MjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczov L3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0T BAIwADBDBgNVHR8EPDA6MDigNqA0hjJodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29t L2dzL2dzZG9tYWludmFsc2hhMmcyLmNybDBJBgNVHREEQjBAgiB3d3cuY2FtYnJp ZGdlc2hpcmVpbnNpZ2h0Lm9yZy51a4IcY2FtYnJpZGdlc2hpcmVpbnNpZ2h0Lm9y Zy51azAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHQYDVR0OBBYEFIdk relBXDQr/bhGKIzLXn4P2TDvMB8GA1UdIwQYMBaAFOpOfNSALeUVgYYmjIJtwJik z5cPMIIB9QYKKwYBBAHWeQIEAgSCAeUEggHhAd8AdQDd6x0reg1PpiCLga2BaHB+ Lo6dAdVciI09EcTNtuy+zAAAAWG4r0K3AAAEAwBGMEQCIEdLsT+kdnABCpS8rGGx 3jdZBf5obcK/2lPMe38oRDJHAiBNSEe3OGUDh3HDzKRZujRKfA0nlnBX/g/eGUgD EhHqRgB3AFYUBpov18Ls0/XhvUSyPsdGdrm8mRFcwO+UmFXWidDdAAABYbivQvIA AAQDAEgwRgIhAP9Rhl7NL6ZGJfYPkorMw7lXiT7tXkx2aUcl4c084rs1AiEAkfLb ThqclPmeEBQ2N1GJFPphfTOhTA5a5KBBTPU3AGUAdgCkuQmQtBhYFIe7E6LMZ3AK PDWYBPkb37jjd80OyA3cEAAAAWG4r0WIAAAEAwBHMEUCIEtscnpqV/eyiJTg4mqx cLOuoFKfK58NUVxkHliFE1msAiEA2yG4f1KvxtL5RcqpD1p2AD+oAtjq2k3FHDMv ruKTabQAdQDuS723dc5guuFCaR+r4Z5mow9+X7By2IMAxHuJeqj9ywAAAWG4r0h5 AAAEAwBGMEQCIDm4GdcL5nZIJ3zLA0M+C6nrLD2QiW4966YmpeLJfIK5AiAm43a1 qpVCcZyolEJxg22olSsgaiu1eNFI9F2YwybZYDANBgkqhkiG9w0BAQsFAAOCAQEA d2BiBWcFW1HLdsN2eRZZYJraAe8XTgHN9x4Bj8LZNxWYyH09BDBqyPVf657qfwTp oSFpl7JFB7cNiDUG4woVBEr3lzvVFkCC6imLS9Lvi5LgADsf69/hZXEKHvBO8I22 JyfjK3S8uZg4n6SXWUB3bE0aILsSaHGEsiahhuLreomaEWMFlxlUYSxll6vNvJU2 8lvpsRxkBCW0fOo7tdHMKH2maiEu7IeFZK0MZuVI7Op0tv9M5yhrTDJo7TzHdVyk 5/w5AFN8jpPC3tiAKlbvW1Bzn2QW/Nrbwcdx0iMvDJBMs/TSBdxB6JE6gU1/IdOj 5gjBk9Li3GmtVouezIwhCg== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Dk1I7JpnevE5nllQPb/ dPQgajHZ57lLFt8pypity2/IFMgwPCc4MutDds4I8IXK1Ha/e4v1KQUCtfy9Gcxg TjzfyHVzviiGnvMMS/GnavwzGmMNxbDV2TtoDvJkRoKNx3vfaJ1tmCv1sFkbMS7E Hf+FCwGB+Nq6eolFpqejTf8OYjU46cPgODRaJcVkaQVP5WRsFlcEHo97yNwGelcu 5RUvbu7hKMecIOETcTWn5quwRCF8OOxEdBkRyS2/oQsixBJfiGWsnl7OJpDrDHss vrNFMey8p4ITGw7ScQAuosNrTLN1N67N4CqG9O1QwiSDiblcyS70boxAm9mMttrs hQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 23184651174866265372063292300 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-02-21 14:05:47 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-22 14:05:47 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.cambridgeshireinsight.org.uk' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 31335309738684547307825413599258884287557292526707005300353561739882477998212687901655804879350806869180919799205959061522878283991437642187964968041172243067479692969471491829456389944083495412050597287542492524948361636125581145894293284140695958683021358800657697340998178496046294227994816504606841914321572006862059877675751530676165209531445666931947434838814386566896851326262399758604264357157364076058565690931510655473049938848592728959889177576735819619903350428254869868365788707641288605929933594940224691820407177587437550969185787607788313133044830298125829660150249545725458114603051273177671008971909 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsdomainvalsha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.cambridgeshireinsight.org.uk' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cambridgeshireinsight.org.uk' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8764ade9415c342bfdb846288ccb5e7e0fd930ef . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ea4e7cd4802de5158186268c826dc098a4cf970f . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (485 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (481 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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