*.recyclage.veolia.fr

- VEOLIA PROPRETE -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1c:ad:a3:86:ee:89:ef:cd:d9:bc:be:13 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

VEOLIA PROPRETE

Organization: VEOLIA PROPRETE
State / Province: Ile-de-France
Locality: Paris
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1c:ad:a3:86:ee:89:ef:cd:d9:bc:be:13
Serial Number (int): 8875496676579939521004355091
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: ca:8a:ae:78:7a:1e:22:9e:aa:1f:8a:a9:ff:53:55:5e:c4:cf:bb:8a
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 3e:91:15:c8:a2:2e:06:12:27:bf:9d:89:6a:25:20:32:48:e9:00:95
Fingerprint (sha256): 12:36:ec:95:d7:6a:42:11:9a:36:3e:8c:9e:4c:3e:5c:75:5e:ca:97:10:31:4d:d5:f9:e5:bd:ee:37:70:a9:b7

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate *.recyclage.veolia.fr

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.recyclage.veolia.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.recyclage.veolia.fr
recyclage.veolia.fr

Other certificates including the domain name veolia.fr

(limited to 100 certificates)
token.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
acquia-sites.com
www.veolia.com
*.recyclage.veolia.fr
www.veolia.com
hv360.veolia.fr
veolia.fr
sni.cloudflaressl.com
dir-mjk.veolia.fr
acquia-sites.com
www.chroneau.veolia.fr
sni.cloudflaressl.com
hv360.veolia.fr
acquia-sites.com
arcgisp.veolia.fr
sni.cloudflaressl.com
pp-compte-perseau.veolia.fr
energie.hv360.veolia.fr
veoliaeau.fr
rlv.veolia.fr
atlas.hv360.veolia.fr
www.veolia.com
parking-chrysalis.recyclage.veolia.fr
acquia-sites.com
acquia-sites.com
rec-cartocom.veolia.fr
compteurs.hv360.veolia.fr
lineo-national.m-ve.com
analytics.veolia.fr
rec-arcgiss.veolia.fr
mondiag.eau.veolia.fr
energie.hv360.veolia.fr
lettre-veoliaeau.fr
acquia-sites.com
simulateur.vedif.eau.veolia.fr
acquia-sites.com
*.recyclage.veolia.fr
rec-monappli.veolia.fr
rec-monacces.veolia.fr
experience.eau.veolia.fr
www.veolia.com
int-chroneau.veolia.fr
simulateur.eau.veolia.fr
energie.hv360.veolia.fr
analytics.veolia.fr
sni.cloudflaressl.com
*.recyclage.veolia.fr
www.veolia.com
acquia-sites.com
*.recyclage.veolia.fr
sni.cloudflaressl.com
formation.veolia.fr
sinistres-litiges.eau.veolia.fr
rec-monappli.veolia.fr
monappli.veolia.fr
bpartner.eau.veolia.fr
dir-proxy-esb.veolia.fr
experience.eau.veolia.fr
rec-monacces.veolia.fr
rec-rlv.veolia.fr
hv360.veolia.fr
vams-tst.m-ve.com
pp-mallette.veolia.fr
rec-rlv.veolia.fr
monportail.veolia.fr
mdm.recyclage.veolia.fr
rec.api.eau.veolia.fr
www.veolia.com
experience.eau.veolia.fr
sni.cloudflaressl.com
acquia-sites.com
acquia-sites.com
energie.hv360.veolia.fr
recette3-travo.veolia.fr
monbureau.eau.veolia.fr
diag-and-drop.veolia.fr
portail-commercial.veolia.fr
int-chroneau.veolia.fr
compteurs.hv360.veolia.fr
www.veolia.com
lettre-veoliaeau.fr
*.energie.veolia.fr
acquia-sites.com
www.veolia.com
simulateur.eau.veolia.fr
pp-portail-commercial.veolia.fr
acquia-sites.com
www.veolia.com
acquia-sites.com
rec-monappli.veolia.fr
simulateur.eau.veolia.fr
acquia-sites.com
sni.cloudflaressl.com
integration-mobilite.veolia.fr
www.veolia.com
www.veolia.com
acquia-sites.com
metropolerouenouest.eau.veolia.fr

Certificate

The complete raw certificate details for *.recyclage.veolia.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFbTCCBFWgAwIBAgIMHK2jhu6J783ZvL4TMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTkwMjA0MTg1MjAxWhcNMjEwMzEzMTYxNjM0WjBvMQswCQYDVQQGEwJG
UjEWMBQGA1UECBMNSWxlLWRlLUZyYW5jZTEOMAwGA1UEBxMFUGFyaXMxGDAWBgNV
BAoTD1ZFT0xJQSBQUk9QUkVURTEeMBwGA1UEAwwVKi5yZWN5Y2xhZ2UudmVvbGlh
LmZyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3L+n6gD3gFcTSI
bb2MfvRZZSeZjObkRtLFuogCjs97IQHkA/LifFyVhNrWcHI0QEyA7ECFk+wC6Rpy
STnnwcgWlpt6BnB/fpH0r7U9t0XbZbUJSRbNjTNFlMOWbD3zsKg7DExn+Vs4sMFC
s7IDEdR0hBjAc8i3TzO2AweQpw4laIvfrXR4343gG9zH5r+ELwFVY0eDMuyFj1j0
CrZUga/xkbK6LVh42JMPkuU7LoHRbYmOX9NMSS75VyU7ol2NneD2YC/O2C1kc9Ye
8/tjyG0GkHWGfuFJ6tTTl7aX6VP9VmyHh4oSYI+yh5shFSxUUHvcc+aAshSr3Dlh
5KHILQIDAQABo4ICEDCCAgwwDgYDVR0PAQH/BAQDAgWgMIGgBggrBgEFBQcBAQSB
kzCBkDBNBggrBgEFBQcwAoZBaHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9j
YWNlcnQvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzJyMS5jcnQwPwYIKwYBBQUHMAGG
M2h0dHA6Ly9vY3NwMi5nbG9iYWxzaWduLmNvbS9nc29yZ2FuaXphdGlvbnZhbHNo
YTJnMjBWBgNVHSAETzBNMEEGCSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRw
czovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwCQYD
VR0TBAIwADBJBgNVHR8EQjBAMD6gPKA6hjhodHRwOi8vY3JsLmdsb2JhbHNpZ24u
Y29tL2dzL2dzb3JnYW5pemF0aW9udmFsc2hhMmcyLmNybDA1BgNVHREELjAsghUq
LnJlY3ljbGFnZS52ZW9saWEuZnKCE3JlY3ljbGFnZS52ZW9saWEuZnIwHQYDVR0l
BBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBTKiq54eh4inqofiqn/
U1VexM+7ijAfBgNVHSMEGDAWgBSW3mHxvRwWKVMcwMx9O4MAQOYafDATBgorBgEE
AdZ5AgQDAQH/BAIFADANBgkqhkiG9w0BAQsFAAOCAQEACj6gUCr76bJi8cRP93Ft
fEAOUZJ6Rj1Biu6JE9fF2igoCaDSBSCrzeLapL7yoQCBuL3e2UXsJm3YEwLxfzfp
LS/RcJjupLqpnljPNoB1t+zztxtwkigeWxzEllrNJP/zgUs10RpVwv8SBwZs08IE
lr+VJ+kTdI01DYMKIesAPN1mmSxvQ1uzGll+XMRdRT3xEXYu4EIuD2OV3UfzO1fo
E8kvSVZ3/5XVACrUQSz84xp/Qn2SlvrfDbDK66VugGOoy/+7JAsI3jqR9tr29gly
JGks3eGmIl//Gxh2tbWFfO4OypLVVTIciUX2ATCi+v+Gmh/FGsPQv0mH3RxIq74D
2Q==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv/3L+n6gD3gFcTSIbb2M
fvRZZSeZjObkRtLFuogCjs97IQHkA/LifFyVhNrWcHI0QEyA7ECFk+wC6RpySTnn
wcgWlpt6BnB/fpH0r7U9t0XbZbUJSRbNjTNFlMOWbD3zsKg7DExn+Vs4sMFCs7ID
EdR0hBjAc8i3TzO2AweQpw4laIvfrXR4343gG9zH5r+ELwFVY0eDMuyFj1j0CrZU
ga/xkbK6LVh42JMPkuU7LoHRbYmOX9NMSS75VyU7ol2NneD2YC/O2C1kc9Ye8/tj
yG0GkHWGfuFJ6tTTl7aX6VP9VmyHh4oSYI+yh5shFSxUUHvcc+aAshSr3Dlh5KHI
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8875496676579939521004355091
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-02-04 18:52:01 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-13 16:16:34 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ile-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VEOLIA PROPRETE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.recyclage.veolia.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24236668110630471193642688636734747381887575919778549271248176108008121030165823265514077597462164517681799380772675307461468660764282056232344210279506879126997681096970629009521784744742828861078808898916993139524768363034810918910514253495814632468462199532805013011581037529231198122371079460601035888066855795435310967798233692983463328548599560144295476994659277049007388609443894203797218781711643128587985973118167980431397414350960890097715518626991883339016650124805899123328040526920417211366205375769749540687249744996906921663739510993171490700071351434414185349077912446149475402999647594868507716732973
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (46 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.recyclage.veolia.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'recyclage.veolia.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ca8aae787a1e229eaa1f8aa9ff53555ec4cfbb8a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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