vea.vattenfall.com

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 47:2c:4b:0b:cc:d9:dd:82:8a:7c:38:b9 was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=vea.vattenfall.com

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 47:2c:4b:0b:cc:d9:dd:82:8a:7c:38:b9
Serial Number (int): 22026982828540016403765016761
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: c5:83:86:f0:31:75:53:09:c3:1b:75:2e:2b:05:40:7a:a6:34:10:79
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 51:fd:d9:d9:ba:f5:a7:0f:ea:f6:9b:2b:c6:0f:3d:5f:c0:8a:46:71
Fingerprint (sha256): 13:4f:e9:a6:35:60:e1:3b:c7:0f:20:b9:f1:96:31:e5:14:c9:8f:3b:88:df:55:be:88:8a:3c:f4:15:ac:90:69

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate vea.vattenfall.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vea.vattenfall.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vea.vattenfall.com

Other certificates including the domain name vattenfall.com

(limited to 100 certificates)
corporate.vattenfall.com
wpmysite.vattenfall.com
mx.vattenfall.com
wifi-guest2.vattenfall.com
emobility-cloud-tst.vattenfall.com
brandtoolbox.vattenfall.com
accounts-tst.vattenfall.com
devinspectiontoolupload.vattenfall.com
demoenergysite.vattenfall.com
ssl418473.cloudflaressl.com
windapi.vattenfall.com
llp.vattenfall.com
incharge.vattenfall.com
matillion-tst.vattenfall.com
flexibility-services.vattenfall.com
corporate.vattenfall.com
sustainablecities.vattenfall.com
video-production-hub.vattenfall.com
futurestreet-devtst.vattenfall.com
market.vattenfall.com
jupiter.vattenfall.com
windapiportal.vattenfall.com
vattnet.vattenfall.com
brandtoolbox.vattenfall.com
powerplants.vattenfall.com
autodiscover.vattenfall.com
aditrosapfi.vattenfall.com
*.vtsgslb.vattenfall.com
windtech.vattenfall.com
innovation-portal.vattenfall.com
mg.vattenfall.com
elektrischvervoer.vattenfall.com
comtoolbox-internal.vattenfall.com
sni.cloudflaressl.com
ssl418475.cloudflaressl.com
accounts-acc.vattenfall.com
ssl418475.cloudflaressl.com
mijnev.vattenfall.com
sms.vattenfall.com
cep-api-acc.vattenfall.com
neptunedev.vattenfall.com
intranetjobs.vattenfall.com
NPG-prd.vattenfall.com
accounts-tst.vattenfall.com
cep-api-dev.vattenfall.com
fs-t.vattenfall.com
powerplants.vattenfall.com
techit-ccc.vattenfall.com
acc.api.vattenfall.com
statistics.vattenfall.com
flexibility-services-demo.vattenfall.com
emobility-cloud-dev.vattenfall.com
powerplants.vattenfall.com
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
sbcde01.vattenfall.com
fs.vattenfall.com
nta.vattenfall.com
emobility-cloud-tst.vattenfall.com
vea.vattenfall.com
mbstaging.vattenfall.com
inchargemaacc.vattenfall.com
jobprofiles.vattenfall.com
search.unce.achilles.com
nseniac.vattenfall.com
vfrelay.vattenfall.com
networksolutionsma.vattenfall.com
mobileintranet.vattenfall.com
sys.api.vattenfall.com
devwindapiportal.vattenfall.com
fs-t.vattenfall.com
accounts.vattenfall.com
vea.vattenfall.com
retro.vattenfall.com
accounts-tst.vattenfall.com
sni.cloudflaressl.com
as4.markets.vattenfall.com
sip.skbdev.vattenfall.com
powerplants.vattenfall.com
*.vtsgslb.vattenfall.com
intranetjobs.vattenfall.com
vea-a.vattenfall.com
flexibility-services-tst.vattenfall.com
elektrischvervoer.vattenfall.com
arm-acc.vattenfall.com
ssl418473.cloudflaressl.com
tasper-dev.vattenfall.com
Kiss-acc.vattenfall.com
vtssms.vattenfall.com
techit-sms.vattenfall.com
welcome.vattenfall.com
emob-csc.vattenfall.com
accprd.vattenfall.com
kiss-acc.vattenfall.com
networksolutionsma.vattenfall.com
accounts-acc.vattenfall.com
acc-dprwebform.vattenfall.com
as2.acc.markets.vattenfall.com
dpr.vattenfall.com
acc-dprwebform.vattenfall.com

Certificate

The complete raw certificate details for vea.vattenfall.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIMRyxLC8zZ3YKKfDi5MA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMDcyNzA5NDYwMFoXDTI0MDgy
NzA5NDU1OVowHTEbMBkGA1UEAxMSdmVhLnZhdHRlbmZhbGwuY29tMIIBIjANBgkq
hkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5R41RWAEZn4nGpO/54yZ4/B6ozTXJk6
2zEgflUE7w9NId3GtwgGSO3LABhA4Gm0qwHjIjH2xVpuig08ARM7QJ8dicS2oVvp
kBS6Sdf2S+rSTEym+VpCyrD7ej5mIOpFvk64Lz86OHGJ26DBpYoCuFWDSpj9CGRV
+HmQltVxNKlVJ5wj7+BH+OQrW5Qn4Q0syZBX5nWyv7D7twPNzefPxXVgcJNG9hCk
Jm5QG/UwXRzB5St855qiIuEKlBLYRjEF5eUwYNPnMA3KEDBNH2P77wMpsILECOd/
mue0Hb2bpH+YnLU6KbYQL/FOJV8blHGOQgHa+I4bF8njndJCAdg03QIDAQABo4ID
UjCCA04wDgYDVR0PAQH/BAQDAgWgMIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEF
BQcwAoY6aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvYWxwaGFz
c2xjYXNoYTI1Nmc0LmNydDA5BggrBgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFs
c2lnbi5jb20vYWxwaGFzc2xjYXNoYTI1Nmc0MFcGA1UdIARQME4wCAYGZ4EMAQIB
MEIGCisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFs
c2lnbi5jb20vcmVwb3NpdG9yeS8wCQYDVR0TBAIwADBBBgNVHR8EOjA4MDagNKAy
hjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNC5j
cmwwHQYDVR0RBBYwFIISdmVhLnZhdHRlbmZhbGwuY29tMB0GA1UdJQQWMBQGCCsG
AQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRPy6yowu+r3YNva7/OmD1cWCV2
FTAdBgNVHQ4EFgQUxYOG8DF1UwnDG3UuKwVAeqY0EHkwggF/BgorBgEEAdZ5AgQC
BIIBbwSCAWsBaQB3AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAAB
iZa9zf4AAAQDAEgwRgIhALtNCNcJDOgP5M6UYK+17v2RbhvlXi87aUUPV5qDuLb7
AiEAvsvoc679cWmvYmvk/JlROFQAQbyGRpsLHMSwjYCzCMkAdwDuzdBk1dsazsVc
t520zROiModGfLzs3sNRSFlGcR+1mwAAAYmWvc0aAAAEAwBIMEYCIQCwNuqcfoA+
TmKfMmoyHu5XLOl5OdXxLm+hdHef+3+w2gIhAKrswDcYk0zu5cPt5PuxnXWlAc0/
boHpd+58aRcqSNOhAHUA2ra/az+1tiKfm8K7XGvocJFxbLtRhIU0vaQ9MEjX+6sA
AAGJlr3KSwAABAMARjBEAiBqFC7uMgsZqFBLSfD5uwE3BD3tXnaCmmHjGTYOdKaN
QgIgJa/ku8lxUypnzWJOzPkyQsWhUNVtxsdD755w66K+ClYwDQYJKoZIhvcNAQEL
BQADggEBAFEbDaI90avDnOqj8Hc8VGTLn+yW4G5xa/MhnSr0K0+yUZKFTLN7+fq/
4YIaCeQJaulCkNOPUols6VSb3ux9n4Xm9+LtNi8rlSNDVo0Fg8sj0g7BwQuZP4gs
UiIPQFMOfbBYHjeWV2HF9aEJFBjY7OFr10bjFcOYC4P2/WFS6f70EyFLAbpLl1rg
2B0f/byhdzzZ93wPJw13N0t3drZkmOk7lvDHhUw8DCblCcSj5XT3rgWwdb8c69uU
mTkDGqRB5tQMShrVk/jP3x5Dgz2Zib9NRuHcmtI6WpzaI65mKprFjtl6dLwvqtY8
uDtMuhSBdEPPJvAcIECn8uTRVEA/tcU=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt5R41RWAEZn4nGpO/54y
Z4/B6ozTXJk62zEgflUE7w9NId3GtwgGSO3LABhA4Gm0qwHjIjH2xVpuig08ARM7
QJ8dicS2oVvpkBS6Sdf2S+rSTEym+VpCyrD7ej5mIOpFvk64Lz86OHGJ26DBpYoC
uFWDSpj9CGRV+HmQltVxNKlVJ5wj7+BH+OQrW5Qn4Q0syZBX5nWyv7D7twPNzefP
xXVgcJNG9hCkJm5QG/UwXRzB5St855qiIuEKlBLYRjEF5eUwYNPnMA3KEDBNH2P7
7wMpsILECOd/mue0Hb2bpH+YnLU6KbYQL/FOJV8blHGOQgHa+I4bF8njndJCAdg0
3QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22026982828540016403765016761
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-07-27 09:46:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-08-27 09:45:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vea.vattenfall.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23174824081414145830028208442701632727935484086512018369375180635826916502734543647955702411781838335774434293666092341279368948058444289955095350944468281388475577455464423645866857710022944783625189116660918951589249404447355895084700950000081199936121827125943562118806664979364725260855653011468178936106468741130203333273605996800064136676701293706779153254334207774692404552944541063295433876195796441733235446223768806996815089557775141599577643463654402630832375134314728847790081864738889435690990374628302881345720562031814565114012541109648959644545525235092734659860298990584709397751132738774268277961949
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vea.vattenfall.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							c58386f031755309c31b752e2b05407aa6341079
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							016900770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018996bdcdfe0000040300483046022100bb4d08d7090ce80fe4ce9460afb5eefd916e1be55e2f3b69450f579a83b8b6fb022100becbe873aefd7169af626be4fc995138540041bc86469b0b1cc4b08d80b308c9007700eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018996bdcd1a0000040300483046022100b036ea9c7e803e4e629f326a321eee572ce97939d5f12e6fa174779ffb7fb0da022100aaecc03718934ceee5c3ede4fbb19d75a501cd3f6e81e977ee7c69172a48d3a1007500dab6bf6b3fb5b6229f9bc2bb5c6be87091716cbb51848534bda43d3048d7fbab0000018996bdca4b000004030046304402206a142eee320b19a8504b49f0f9bb0137043ded5e76829a61e319360e74a68d42022025afe4bbc971532a67cd624eccf93242c5a150d56dc6c743ef9e70eba2be0a56
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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