*.brf-br.com
- BRF S.A -
Issued by Entrust Certification Authority - L1K
About this certificate
This digital certificate with serial number 56:96:c8:7c:69:91:1c:8e:00:00:00:00:50:eb:51:b0 was issued on by Entrust, Inc..
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
BRF S.A
Organization:
BRF S.A
State / Province:
Santa Catarina
Locality: Itajai
Country: BR
Locality: Itajai
Country: BR
Entrust, Inc.
Organization:
Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country:
US
This certificate has expire since
Certificate Details
Serial Number (hex): 56:96:c8:7c:69:91:1c:8e:00:00:00:00:50:eb:51:b0Serial Number (int): 115096518505167226437654164947814011312
Serial Number lenght: 127 bits, 16 octets
SubjectKeyId: 36:04:8a:31:9e:49:40:fe:e5:dc:1e:7c:67:f6:87:d2:1b:4b:ee:77
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf
Fingerprint (sha1): 64:b3:ca:bd:68:c4:49:b5:ae:57:ff:56:5a:22:5d:51:ac:e4:93:83
Fingerprint (sha256): 14:da:b5:4d:30:fe:44:95:1a:5f:69:2f:c6:73:45:84:be:50:ee:f5:f0:03:25:34:c5:bd:6c:83:f7:6c:a6:4f
Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer
Revocation information
OCSP Server: http://ocsp.entrust.netCRL Distribution Point: http://crl.entrust.net/level1k.crl
Check the revocation status for certificate *.brf-br.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.brf-br.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.brf-br.com
Other certificates including the domain name brf-br.com
(limited to 100 certificates)
sip.brf-corp.com
brf-br.com
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
compras.brf-br.com
*.brf-br.com
ecom.brf-br.com
*.brf-br.com
brf-br.com
sip.brf-corp.com
webmail.brasilfoods.com
imperva.com
rfb.brf-br.com
vpn.brf-br.com
brf-br.com
brf-br.com
autodiscover.brf.com
mobile.brfprevidencia.com.br
sip.brf-corp.com
sip.brf-corp.com
brf-br.com
sip.brf-corp.com
brf-br.com
brf-br.com
brf-br.com
brf-br.com
paymentsystem.brf-br.com
imperva.com
kits.brf-br.com
brf-br.com
imperva.com
brf-br.com
webmail.brasilfoods.com
imperva.com
webmail.brasilfoods.com
sip.brf-corp.com
brf-br.com
brf-br.com
Sip.brf-corp.com
webmail.brasilfoods.com
paymentsystem.brf-br.com
mobile.brfprevidencia.com.br
imperva.com
webmail.brasilfoods.com
www.brf-br.com
brf-br.com
sip.brf-corp.com
compras.brf-br.com
sip.brf-corp.com
mobile.brf-br.com
brf-br.com
sip.brf-corp.com
brf-br.com
brf-br.com
imperva.com
mobile.brfprevidencia.com.br
brf-br.com
compras.brf-br.com
*.brf-br.com
ecom.brf-br.com
*.brf-br.com
brf-br.com
sip.brf-corp.com
webmail.brasilfoods.com
imperva.com
rfb.brf-br.com
vpn.brf-br.com
brf-br.com
brf-br.com
autodiscover.brf.com
mobile.brfprevidencia.com.br
sip.brf-corp.com
sip.brf-corp.com
brf-br.com
sip.brf-corp.com
brf-br.com
brf-br.com
brf-br.com
brf-br.com
paymentsystem.brf-br.com
imperva.com
kits.brf-br.com
brf-br.com
imperva.com
brf-br.com
webmail.brasilfoods.com
imperva.com
webmail.brasilfoods.com
sip.brf-corp.com
brf-br.com
brf-br.com
Sip.brf-corp.com
webmail.brasilfoods.com
paymentsystem.brf-br.com
mobile.brfprevidencia.com.br
imperva.com
webmail.brasilfoods.com
www.brf-br.com
brf-br.com
sip.brf-corp.com
compras.brf-br.com
sip.brf-corp.com
mobile.brf-br.com
brf-br.com
sip.brf-corp.com
brf-br.com
Certificate
The complete raw certificate details for *.brf-br.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFPzCCBCegAwIBAgIQVpbIfGmRHI4AAAAAUOtRsDANBgkqhkiG9w0BAQsFADCB ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0x ODEyMTcxMDMzMjFaFw0yMTAzMTYxMTAzMjBaMGAxCzAJBgNVBAYTAkJSMRcwFQYD VQQIEw5TYW50YSBDYXRhcmluYTEPMA0GA1UEBxMGSXRhamFpMRAwDgYDVQQKEwdC UkYgUy5BMRUwEwYDVQQDDAwqLmJyZi1ici5jb20wggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCxOAWQOfCPvBpmoIpWV9XRQNJ1z/Nfbz3IBVVUU7TH/faS icVbUdmyh7+7AUukmoXXGP/FgdK3XSAgaK7TzSkenXU1ScKWZWtlIB7BOHWdWKiJ sZjYOvFh1jrG2Tcnv0NeSk7qo+MEiyWPnnsj+DrnLYTEJWY4Hj+Grb43ZJZhVWXQ uvNRgnPlcaKFV6xvWKI3TnHGXwd9IQVv5uIy1e0dKEVWhx8Cnu7M6T8fOrcB8iI7 XvRmdWyqoat/aRFRfqIwiMhWHvacuPQEyiaR3C/ahRfLE/872GctZ0FMuK467ZEo 9grSXmfbnT22fz4A/9x58wzh0sYFl1tYobgDAzmNAgMBAAGjggGYMIIBlDATBgor BgEEAdZ5AgQDAQH/BAIFADAXBgNVHREEEDAOggwqLmJyZi1ici5jb20wDgYDVR0P AQH/BAQDAgWgMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAzBgNVHR8E LDAqMCigJqAkhiJodHRwOi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEsG A1UdIAREMEIwNgYKYIZIAYb6bAoBBTAoMCYGCCsGAQUFBwIBFhpodHRwOi8vd3d3 LmVudHJ1c3QubmV0L3JwYTAIBgZngQwBAgIwaAYIKwYBBQUHAQEEXDBaMCMGCCsG AQUFBzABhhdodHRwOi8vb2NzcC5lbnRydXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0 cDovL2FpYS5lbnRydXN0Lm5ldC9sMWstY2hhaW4yNTYuY2VyMB8GA1UdIwQYMBaA FIKicHTdvFM/z3vU981/p2DGCky/MB0GA1UdDgQWBBQ2BIoxnklA/uXcHnxn9ofS G0vudzAJBgNVHRMEAjAAMA0GCSqGSIb3DQEBCwUAA4IBAQCjeT/8FK08NrmN5yH8 z4Zh8JYJR7soOd51zUcSltl/o+P2/xdCJXwZoviKocyIQMc1JWm5i8uywMqPqaw/ 1Jf3DXk2NBnPBIk5ilAxCf4BagiuIfUvpybLq5lW/M3NcOzfwEJozjMvVIPuWO1K RFhHyb8+lpOWssmvT4NYkOAKyr4xDFfiOAxClAJ0xVic5ullzO2iwgaRaFb+MGXh /o2Il+zN9Mx6y6X3bkf5v5PEUSqPk/tVctL3mMwLLpZrGFHn/TjZw16OB9yfS9B3 ZQYxZ8eu6FiUZ8IvXA1IE82ktdBMhisOSywABBLjjIzVvBzNvL2KtEzV93Le9xkC vNDN -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsTgFkDnwj7waZqCKVlfV 0UDSdc/zX289yAVVVFO0x/32konFW1HZsoe/uwFLpJqF1xj/xYHSt10gIGiu080p Hp11NUnClmVrZSAewTh1nVioibGY2DrxYdY6xtk3J79DXkpO6qPjBIslj557I/g6 5y2ExCVmOB4/hq2+N2SWYVVl0LrzUYJz5XGihVesb1iiN05xxl8HfSEFb+biMtXt HShFVocfAp7uzOk/Hzq3AfIiO170ZnVsqqGrf2kRUX6iMIjIVh72nLj0BMomkdwv 2oUXyxP/O9hnLWdBTLiuOu2RKPYK0l5n2509tn8+AP/cefMM4dLGBZdbWKG4AwM5 jQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 115096518505167226437654164947814011312 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-17 10:33:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-03-16 11:03:20 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Santa Catarina' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Itajai' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BRF S.A' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.brf-br.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22371805324637071534045131617825623212747508465670853062925207747713089376997410456046287133943852357555505646448713563059580695837600407381453895133873655019108971046876379654476987591103358692212851127715231071891499991929345292154597045873739900800501651244252271932862759410968701193214521478225256589369803050015580822065834464821169590361324743886411731498284939004233803510963009174852435465916991970510714852796289709321248300302700238076153428894333477374861704371263849279525532273933527355422737436157730711948160395010042481089227584707923914108887736793878725553406676781113334299652018295813678915860877 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (16 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.brf-br.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (68 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.5 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 36048a319e4940fee5dc1e7c67f687d21b4bee77 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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