blog.portoseguro.com.br

Issued by GlobalSign GCC R3 DV TLS CA 2020

About this certificate

This digital certificate with serial number 11:9f:f7:64:2f:07:c4:2a:ca:21:33:fe was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=blog.portoseguro.com.br

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:9f:f7:64:2f:07:c4:2a:ca:21:33:fe
Serial Number (int): 5454632644866161313100936190
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 45:60:83:1e:c1:92:ab:93:c2:c8:31:c0:35:c9:bc:fb:c0:b4:a2:39
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c

Fingerprint (sha1): 58:32:a6:50:dd:5e:73:31:e9:af:56:d0:16:50:a4:ab:8e:ec:57:0f
Fingerprint (sha256): 14:14:61:ae:0f:c1:dc:19:7e:ae:e3:9f:eb:f3:8b:42:61:a4:98:c3:76:38:8e:4a:e4:18:b1:60:67:89:f0:e5

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020
CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl

Check the revocation status for certificate blog.portoseguro.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for blog.portoseguro.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

blog.portoseguro.com.br
www.blog.portoseguro.com.br

Other certificates including the domain name portoseguro.com.br

(limited to 100 certificates)
portonet.portoseguro.com.br
mkt.visitavirtual360.pt
portoapicloud-dev.portoseguro.com.br
portoapicloud-mtls.portoseguro.com.br
portalvpn.portoseguro.com.br
bank.portoseguro.com.br
imperva.com
*.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
apihml.portoseguro.com.br
hml.portoseguro.com.br
venda-stage.portoseguro.com.br
portoapicloud-mtls-hml.portoseguro.com.br
colportopar.portoseguro.com.br
sso-clientes-hml.portoseguro.com.br
mkt.portoseguro.com.br
*.psstore.portoseguro.com.br
recupera.portoseguro.com.br
portoseguro.com.br
prestador.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
alogsoma.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
visitantes4.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
nac11dc00-tlf.portoseguro.com.br
cloud.mkthub.portoseguro.com.br
portoseguro.com.br
click.novidades.portoseguro.com.br
sso.portoseguro.com.br
visitantes3.portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
blog.portoseguro.com.br
portoseguro.com.br
portoseguro.com.br
apicorporativops.portoseguro.com.br
antispam.portoseguro.com.br
dev.api.saude.portoseguro.com.br
loja.portoseguro.com.br
ecomadmin.portoseguro.com.br
wwws.portoseguro.com.br
open-api.portoseguro.com.br
cloud.novidades.portoseguro.com.br
3dsecure.portoseguro.com.br
mtls-open-api-sandbox.portoseguro.com.br
tableau.portoseguro.com.br
loja-api.portoseguro.com.br
api.portoseguro.com.br
news.multichannelmkt.com
api.portoseguro.com.br
apicorporativops.portoseguro.com.br
mkt.lukrepresentacoes.net.br
NAC11DC00-TLF.portoseguro.com.br
hml.api.saude.portoseguro.com.br
wiprod.portoseguro.com.br
apidev-portoseg.portoseguro.com.br
hml.portoseguro.com.br
bwise.portoseguro.com.br
homeoffice.portoseguro.com.br
vidacloud.portoseguro.com.br
salvados.portoseguro.com.br
dev.saude.portoseguro.com.br
auto.portoseguro.com.br
portalvisitantes.portoseguro.com.br
apihml.portoseguro.com.br
api-portoseg.portoseguro.com.br
nac12db02-tlf.portoseguro.com.br
sso-clientes.portoseguro.com.br
mkt.portoseguro.com.br
*.openinsurance-dev.portoseguro.com.br
apibank-qa.portoseguro.com.br
portoseguro.com.br
email.portoseguro.com.br
imperva.com
antispam.portoseguro.com.br
mkt.interhome.com.br
portal.meiosdepagamento.portoseguro.com.br
portoseguro.com.br
mkt.centrodepneus.pt
aluguel.portoseguro.com.br
bwise.portoseguro.com.br
mkt.descobrimentos.com.pt
garantia.portoseguro.com.br
ssohml.portoseguro.com.br
auto.portoseguro.com.br
visitantes1.portoseguro.com.br
haproxy.portoseguro.com.br
mkt.inbet.pt
click.consorcio.portoseguro.com.br
apis.portoseguro.com.br
prd.parceirosgcp.portoseguro.com.br
portoseguro.com.br
san-34-s12.tlsprovisioning.exacttarget.com
loja-auth.portoseguro.com.br
webmail.portoseguro.com.br
hub-dev.portoseguro.com.br
portal.meiosdepagamento.portoseguro.com.br
api.portoseguro.com.br
san-23-s12.tlsprovisioning.exacttarget.com
home.portoseguro.com.br

Certificate

The complete raw certificate details for blog.portoseguro.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGbjCCBVagAwIBAgIMEZ/3ZC8HxCrKITP+MA0GCSqGSIb3DQEBCwUAMFMxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH
bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yMzAzMjExNjI5MjRa
Fw0yNDA0MjExNjI5MjNaMCIxIDAeBgNVBAMTF2Jsb2cucG9ydG9zZWd1cm8uY29t
LmJyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D58BXEGbzIBTcx8
Q6fJ9hQ3LkF7VQWtAARS6SbUpmallI1vDhs9iKx0kznN8JlBFos3oyf6eSkbaTqv
oZI6fRSklmv8tzik/C7Q8xzjEljp7lkWya9rj97hU6ZVeegNIh4PeOmxO7dEu2Yp
9GsjnKIDh2lEfGPgrsJJvfzuutVaS0R7flTtc/3rUhKFgx9KlpIbms/2Pwe8G2V1
d4cBNxp0dfBOGbrgTJklEFLOex6ap2jMSD0Y689ERgmTv7Yhj/6a6QBH31rN6zKN
ciMaP0hSsvLsV5tiUejbKwblPEqVMFcoEn8L8/YQbbaU3ClP+V3SeUIz4ooh4Xsa
/W3MJQIDAQABo4IDcTCCA20wDgYDVR0PAQH/BAQDAgWgMIGTBggrBgEFBQcBAQSB
hjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9j
YWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5BggrBgEFBQcwAYYtaHR0cDov
L29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2dGxzY2EyMDIwMFYGA1UdIARP
ME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2Jh
bHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATAJBgNVHRMEAjAAMEEGA1Ud
HwQ6MDgwNqA0oDKGMGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2
dGxzY2EyMDIwLmNybDA/BgNVHREEODA2ghdibG9nLnBvcnRvc2VndXJvLmNvbS5i
coIbd3d3LmJsb2cucG9ydG9zZWd1cm8uY29tLmJyMB0GA1UdJQQWMBQGCCsGAQUF
BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNmMBzf6u9vdlHS0mtCkoMrD7HfDAd
BgNVHQ4EFgQURWCDHsGSq5PCyDHANcm8+8C0ojkwggF9BgorBgEEAdZ5AgQCBIIB
bQSCAWkBZwB2AHPZnokbTJZ4oCB9R53mssYc0FFecRkqjGuAEHrBd3K1AAABhwUB
JkYAAAQDAEcwRQIgffsr6z1v3GkMgkipHzKg/0fstfdnWR3zsQvXNS1zcbcCIQDy
yf0YYV930sIClS0ZFzVVRqmlNqVLezkdczt31UkH5QB2AO7N0GTV2xrOxVy3nbTN
E6Iyh0Z8vOzew1FIWUZxH7WbAAABhwUBJpwAAAQDAEcwRQIhAJxOQugPQcrICyCD
nkXfCWl4CxyOMOE6h9Pm6kE8QrkEAiBeazZALYkI3pmN/Y1XuaGkX0EOZlUihZso
j7ekFQnbqwB1AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABhwUB
JfIAAAQDAEYwRAIgXC4jfW0aghZvBxDZxXbW3T67uIoTq7YAq085+J/ku5YCIBUg
8o3ORpEajGhL+EiguQPZ3XVeDotKqeSjen7/xhV5MA0GCSqGSIb3DQEBCwUAA4IB
AQCPIZRXhWt8CJfEh/rCPlrdLKkn34znicLdw5Ys62tCafFDq8+xk5Ov5nALIkXR
FRzuoyfuPWpgJZkrGfSBa86bLmDp4ro1MHrrx0UJRu2tyguaus9V2aCul8SU7sba
czfCSk/xmL/I4aVkJoTZBEKYH0UMZRJyCkVRAs/5Lww25O9A8EN35EemHCh0lxMW
+hjtz2oYU/xpw27DVRrRT/H6t8h+jEwLJH8nS74JZ/GV26/p7ZIsNPoVneof/rub
viy/3ZftVjUd5YwQgmlI2NXF0OFK8cqsRhR5SuQ8sutZ1RjUwu0lJAWIIyLdkskj
TmnEhHfmBunQLd15PokdkmiG
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3D58BXEGbzIBTcx8Q6fJ
9hQ3LkF7VQWtAARS6SbUpmallI1vDhs9iKx0kznN8JlBFos3oyf6eSkbaTqvoZI6
fRSklmv8tzik/C7Q8xzjEljp7lkWya9rj97hU6ZVeegNIh4PeOmxO7dEu2Yp9Gsj
nKIDh2lEfGPgrsJJvfzuutVaS0R7flTtc/3rUhKFgx9KlpIbms/2Pwe8G2V1d4cB
Nxp0dfBOGbrgTJklEFLOex6ap2jMSD0Y689ERgmTv7Yhj/6a6QBH31rN6zKNciMa
P0hSsvLsV5tiUejbKwblPEqVMFcoEn8L8/YQbbaU3ClP+V3SeUIz4ooh4Xsa/W3M
JQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5454632644866161313100936190
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-03-21 16:29:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-21 16:29:23 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'blog.portoseguro.com.br'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27803239327175580562627149988293782415465433587833835164728301602369189903508089160706872562548376009852281613027480611214208292806813631255171633745988521113788385633499045050033033585364986947355621013968157554668425978313900713684671908771148986086531243142206088716151165268235570750106163968361428942601100340632653480548659244952159143073767201908695308945522439668523116929015951846709378401114036543169061233820538465039953572374890202323147279235789826981846965315094303096009346095729962887265740921531419477941100804838683893620513535789700921404267348693830203531814583841098813681584305087470720393268261
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'blog.portoseguro.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.blog.portoseguro.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4560831ec192ab93c2c831c035c9bcfbc0b4a239
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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