rancher-staging.i.jasper.com

- Cisco Systems, Inc. -

Issued by HydrantID SSL ICA G2

About this certificate

This digital certificate with serial number 76:e2:a9:6a:18:38:17:03:64:2a:59:a7:3f:a5:28:2b:14:e3:f5:e7 was issued on by HydrantID (Avalanche Cloud Corporation).

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber Certificate: extKeyUsage values other than id-kp-serverAuth, id-kp-clientAuth, and id-kp-emailProtection SHOULD NOT be present. (BRs: 7.1.2.3)

Cisco Systems, Inc.

Organization: Cisco Systems, Inc.
State / Province: California
Locality: San Jose
Country: US

HydrantID (Avalanche Cloud Corporation)

Organization: HydrantID (Avalanche Cloud Corporation)
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 76:e2:a9:6a:18:38:17:03:64:2a:59:a7:3f:a5:28:2b:14:e3:f5:e7
Serial Number (int): 678715637450527053077679458536974063635695662567
Serial Number lenght: 159 bits, 20 octets

SubjectKeyId: 65:c1:32:f9:cc:54:5c:3b:b4:00:a8:2d:c1:86:c8:55:be:2c:6c:c2
AuthorityKeyId: 98:6a:b6:2d:2e:bf:a7:aa:9f:f6:f7:d6:09:af:d5:8b:57:f9:8a:b7

Fingerprint (sha1): ad:10:0c:9d:d6:da:ac:a6:88:91:ca:4c:ad:88:6c:37:75:6b:a6:1f
Fingerprint (sha256): 14:77:1b:08:6a:2e:9f:7c:5c:40:6f:23:8c:cd:18:66:97:4f:6b:f4:34:f9:06:16:89:ab:1b:e4:e0:ae:20:ea

Issuing Certificate URL: http://trust.quovadisglobal.com/hydsslg2.crt

Revocation information

OCSP Server: http://ocsp.quovadisglobal.com
CRL Distribution Point: http://crl.quovadisglobal.com/hydsslg2.crl

Check the revocation status for certificate rancher-staging.i.jasper.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for rancher-staging.i.jasper.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
IPSEC End System
IPSEC Tunnel
IPSEC User
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

rancher-staging.i.jasper.com
neer-staging.i.jasper.com
rancher-staging.jasper.com
neer-staging.jasper.com

Other certificates including the domain name jasper.com

(limited to 100 certificates)
cc6.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
bp890869.saagie.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc20.status.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc6.status.jasper.com
cc3.status.jasper.com
*.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc19.status.jasper.com
*.jasper.com
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
cc20.status.jasper.com
bare-metal-servers.status-ovhcloud.com
*.jasper.com
cc3.status.jasper.com
api.line-status.info
cc20.status.jasper.com
api.line-status.info
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
api.line-status.info
bb2status.mambu.com
cc20.status.jasper.com
cc6.status.jasper.com
atl-ntct-nsa-01.i.jasper.com
bp890869.saagie.com
cc6.status.jasper.com
cc7.status.jasper.com
api.line-status.info
cc19.status.jasper.com
bare-metal-servers.status-ovhcloud.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc3.status.jasper.com
cc19.status.jasper.com
api.line-status.info
cc20.status.jasper.com
cc6.status.jasper.com
cc6.status.jasper.com
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
api.line-status.info
ATT-NTCT-DGM-01.i.jasper.com
atl-ntct-dgm-01.i.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
rancher-staging.i.jasper.com
cc3.status.jasper.com
bp890869.saagie.com
bb2status.mambu.com
cc19.status.jasper.com
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
api.line-status.info
cc3.status.jasper.com
cc20.status.jasper.com
cc19.status.jasper.com
cc19.status.jasper.com
cc3.status.jasper.com
arkiv.status.geoikt.no
bare-metal-servers.status-ovhcloud.com
cc19.status.jasper.com
bp890869.saagie.com
cc19.status.jasper.com
rws-fnstaging.jasper.com
cc6.status.jasper.com
cc3.status.jasper.com
cc6.status.jasper.com
cc19.status.jasper.com
rancher-staging.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com
arkiv.status.geoikt.no
cc19.status.jasper.com

Certificate

The complete raw certificate details for rancher-staging.i.jasper.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGpTCCBI2gAwIBAgIUduKpahg4FwNkKlmnP6UoKxTj9ecwDQYJKoZIhvcNAQEL
BQAwXjELMAkGA1UEBhMCVVMxMDAuBgNVBAoTJ0h5ZHJhbnRJRCAoQXZhbGFuY2hl
IENsb3VkIENvcnBvcmF0aW9uKTEdMBsGA1UEAxMUSHlkcmFudElEIFNTTCBJQ0Eg
RzIwHhcNMjAwMjAyMjIxMjI3WhcNMjAwMzAyMjIyMjAwWjB6MQswCQYDVQQGEwJV
UzETMBEGA1UECAwKQ2FsaWZvcm5pYTERMA8GA1UEBwwIU2FuIEpvc2UxHDAaBgNV
BAoME0Npc2NvIFN5c3RlbXMsIEluYy4xJTAjBgNVBAMMHHJhbmNoZXItc3RhZ2lu
Zy5pLmphc3Blci5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO
+IUQON6I5IVYsCw0ojVoep3AMTeoMDfytnOcV5eV4nTIITFfvXz7cl/QRv+9AOKr
uSHhQWUGe/efUlELlv2DsOrD0bV3lHeO89jPhUtH37+MAsaf9AIdLxTjsBZX54r9
lOMroyEHjAsbb3csVJf6iaug+ictmRpglWeIW+F4EKmunZrY4RvrWjiZaS3vxc5p
h7EgCzSuYX8+zIaAZ98XGjF07XtOAjyfbL4LTGTDHPkARLyaFliB45kHufpmyhaj
1Z2gJbcWVbmsA0F5HU1MOXzNWLDFRnIVeTbB7p0ol9rkm5J8pc3gSQK5eu1pLIuT
X3IjWDAgJ9me63c0rSfLAgMBAAGjggI9MIICOTAJBgNVHRMEAjAAMB8GA1UdIwQY
MBaAFJhqti0uv6eqn/b31gmv1YtX+Yq3MHQGCCsGAQUFBwEBBGgwZjA4BggrBgEF
BQcwAoYsaHR0cDovL3RydXN0LnF1b3ZhZGlzZ2xvYmFsLmNvbS9oeWRzc2xnMi5j
cnQwKgYIKwYBBQUHMAGGHmh0dHA6Ly9vY3NwLnF1b3ZhZGlzZ2xvYmFsLmNvbTB3
BgNVHREEcDBughxyYW5jaGVyLXN0YWdpbmcuaS5qYXNwZXIuY29tghluZWVyLXN0
YWdpbmcuaS5qYXNwZXIuY29tghpyYW5jaGVyLXN0YWdpbmcuamFzcGVyLmNvbYIX
bmVlci1zdGFnaW5nLmphc3Blci5jb20wXgYDVR0gBFcwVTAIBgZngQwBAgIwSQYM
KwYBBAG+WAADhwQAMDkwNwYIKwYBBQUHAgEWK2h0dHA6Ly93d3cuaHlkcmFudGlk
LmNvbS9zdXBwb3J0L3JlcG9zaXRvcnkwOwYDVR0lBDQwMgYIKwYBBQUHAwIGCCsG
AQUFBwMFBggrBgEFBQcDBgYIKwYBBQUHAwcGCCsGAQUFBwMBMDsGA1UdHwQ0MDIw
MKAuoCyGKmh0dHA6Ly9jcmwucXVvdmFkaXNnbG9iYWwuY29tL2h5ZHNzbGcyLmNy
bDAdBgNVHQ4EFgQUZcEy+cxUXDu0AKgtwYbIVb4sbMIwDgYDVR0PAQH/BAQDAgWg
MBMGCisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4ICAQBP1zJh1lDf
1R0fgMBKyNNlR7hHVd/d4VNdBvGW5P07/U+SG3sujH4p/LZGGcWSRQisg5dfXOEF
R/jv1DYTMDUTCACPVP+6CRJ9ip2Ezu6EyOOu711C+EzVm7NRa0hyeb1XTliDGvk7
1cX5ARt0OnncEE6YwGoReVYE/Sk1fPRqixGKmQ8oL2vTz0HuLMtbH/bQxwZB6O2G
hyIBplfz7iX+xc3YPGng5bgprkGBDwNc/FxUbamGSah3ym5YPeda3R6IaICGnAzx
KdRins9Vi94qrWyGLyffaW5S9pd+9BsRqORczpSTuPR/ChW7dSFScnkhYTa3s7hd
LSbj+p3lgKHhsk5wBYD8+cGImVDCnB0TETkGXBNtS/NwOMKWDVmJs7wFlyQQ8g/E
FnXurnsWDY+VXlvD5LHMRxbNEaCxmdB8Oa8Tse0KCQHCQ5feJ7/SIvS/xtG+Sn55
pTOEq5k0tqAVFe7UVEo5vk/ter2sSLvi7Ap7tk3SdXM5BH4V3aZhV1Q7ylYP3q4/
n7P66QifhxRUfJh9rVd3usq/NUhebLIIReHoQmJZl0O9Of23wJ0/m6NUmYVIn22J
x2zqB9OA/0GKbhkXjSNByEJIsdCvs9OIDTQVt2UzY2liR7hugmFB5Dc17hERbwaQ
ODsZhu9Fsljmq4PjbQ4/Ncio5qG73c6Oqg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzviFEDjeiOSFWLAsNKI1
aHqdwDE3qDA38rZznFeXleJ0yCExX718+3Jf0Eb/vQDiq7kh4UFlBnv3n1JRC5b9
g7Dqw9G1d5R3jvPYz4VLR9+/jALGn/QCHS8U47AWV+eK/ZTjK6MhB4wLG293LFSX
+omroPonLZkaYJVniFvheBCprp2a2OEb61o4mWkt78XOaYexIAs0rmF/PsyGgGff
FxoxdO17TgI8n2y+C0xkwxz5AES8mhZYgeOZB7n6ZsoWo9WdoCW3FlW5rANBeR1N
TDl8zViwxUZyFXk2we6dKJfa5JuSfKXN4EkCuXrtaSyLk19yI1gwICfZnut3NK0n
ywIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 678715637450527053077679458536974063635695662567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID (Avalanche Cloud Corporation)'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'HydrantID SSL ICA G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-02 22:12:27 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-02 22:22:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'San Jose'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Cisco Systems, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'rancher-staging.i.jasper.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26127640493413406987797622528715366798028916220969505691500617561516394299286410362731348479117842027044276770912518800583810593834540933115020510431326361866674445493492272618626301624593475950489294432902066359234568461351149999648698423456822778783520499106877524544162358873783613137459458545235674915534595240841841539277760877050778532603223552524732102473355726243280017173255278210380688866721711667902669878758151227816086323455422793998546837898136334595645511526365547670193471403474267345367901981554729426560925176110781220769513589620851635241336806320850572000171748031087084454957584246036027790927819
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 986ab62d2ebfa7aa9ff6f7d609afd58b57f98ab7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (104 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://trust.quovadisglobal.com/hydsslg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.quovadisglobal.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (112 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher-staging.i.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neer-staging.i.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'rancher-staging.jasper.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'neer-staging.jasper.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (87 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.8024.0.3.900.0
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.hydrantid.com/support/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.5 (ipsecEndSystem)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.6 (ipsecTunnel)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.7 (ipsecUser)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.quovadisglobal.com/hydsslg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							65c132f9cc545c3bb400a82dc186c855be2c6cc2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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