*.obs.jssqhlwq1.joint.cmecloud.cn

- 中移（苏州）软件技术有限公司 -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 29:0d:94:f1:1a:c7:b1:89:38:99:90:b1:14:2f:ee:3f was issued on by UniTrust.

With 6 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

中移（苏州）软件技术有限公司

Organization: 中移（苏州）软件技术有限公司
State / Province: 江苏省
Locality: 苏州市
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 29:0d:94:f1:1a:c7:b1:89:38:99:90:b1:14:2f:ee:3f
Serial Number (int): 54568868585239034816763229206861573695
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 5b:00:b1:ab:17:a2:90:5d:5b:48:1b:46:2b:e9:0a:ae:2e:93:d7:01
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): f1:b2:86:22:ff:b9:40:4b:a5:2e:be:52:c1:d0:e8:45:dd:40:47:8a
Fingerprint (sha256): 18:7b:e9:5e:e7:63:17:d0:ce:f4:cf:71:bf:be:07:35:35:b3:fd:1d:aa:b2:b0:fb:e4:59:fd:ea:2a:6c:a9:1d

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.obs.jssqhlwq1.joint.cmecloud.cn

6

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.obs.jssqhlwq1.joint.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.obs.jssqhlwq1.joint.cmecloud.cn
obs.jssqhlwq1.joint.cmecloud.cn
obs.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn
*.obs.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn
obs-website.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn
*.obs-website.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos.ecso.bjsy-1-internal.cmecloud.cn
*.eos.xian-4.cmecloud.cn
*.eos.nanning-2.cmecloud.cn
*.eos.hangzhou-zs-1.cmecloud.cn
*.hbczbthcso1.joint.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ningxia-1.cmecloud.cn
*.eos.huhehaote-11.cmecloud.cn
*.eos-suzhou-3.cmecloud.cn
smp.ecso.hnzkh-1.cmecloud.cn
console.ecso.jsha-1.cmecloud.cn
*.eos.ecso.jscz-1.cmecloud.cn
*.eos.ecso.bjsy-1.cmecloud.cn
*.cidc-rp-2159.xjaksxczwwwq1.joint.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.qhhdxczwwwq1.joint.cmecloud.cn
*.eos.ecso.sxxz-1.cmecloud.cn
console.ecs.hnzkh-1.cmecloud.cn
*.ahmashcso1.joint.cmecloud.cn
*.obs.cqdjmdyhlwq1.joint.cmecloud.cn
*.eos.ecso.bjtz2-1-internal.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
console.ecs.ahaq-1.cmecloud.cn
*.eos.ecs.hbes-1-internal.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos.ecs.hnzkh-1.cmecloud.cn
*.eos.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.sdly-1.cmecloud.cn
*.eos.ecso.jxnc-1-internal.cmecloud.cn
*.eos.anhui-3.cmecloud.cn
console.ecs.fjly2-1.cmecloud.cn
*.ecis.zs-guian-1.cmecloud.cn
*.smp.ecs.jswx-1.cmecloud.cn
*.eos.ecs.jswx-1.cmecloud.cn
*.obs.cqyczwwwq1.joint.cmecloud.cn
*.smp.ecso.jxxy-1.cmecloud.cn
console.ecso.zjtz-1.cmecloud.cn
*.cidc-rp-2076.sxtyspyhcso1.joint.cmecloud.cn
*.obs.sdytxczwwwq1.joint.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.eos.ecso.zjtz-1-internal.cmecloud.cn
console.ecs.hbqj-1.cmecloud.cn
*.eos.chongqing-4.cmecloud.cn
*.cidc-rp-2121.fjptmzzlzhcso1.joint.cmecloud.cn
*.obs.jssqhlwq1.joint.cmecloud.cn
*.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn
*.obs.qhhdxchlwq1.joint.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.eos-guiyang-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.tjbhylyhcso2.joint.cmecloud.cn
*.cidc-rp-2004.zjkjkhcso.joint.cmecloud.cn
*.jsycdthlwq1.joint.cmecloud.cn
*.xjbzzwwwq1.joint.cmecloud.cn
*.eos.ecs.fjly2-1-internal.cmecloud.cn
*.eos-huhehaote-6.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.eos.ecs.hbes-1.cmecloud.cn
*.obs.tjshnwqhcso2.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
smp.ecs.jswx-1.cmecloud.cn
*.ecis.zs-nanjing-1.cmecloud.cn
*.ecis.huabei-3.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
*.eos.ecs.fjly2-1-internal.cmecloud.cn
console.ecso.bjtz2-1.cmecloud.cn
smp.ecs.hnzkh-1.cmecloud.cn
*.gsbyspyhcso1.joint.cmecloud.cn
*.smp.ecso.jsnj2-1.cmecloud.cn
bcov.ecs.hbes-1.cmecloud.cn
*.obs.jsycdthlwq1.joint.cmecloud.cn
*.eos.nanjing-zs-1.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.ecis.zs-qingdao-1.cmecloud.cn
*.eos.ecs.hnld-1-internal.cmecloud.cn
*.eos-chengdu-6.cmecloud.cn
*.eos-guiyang-4.cmecloud.cn
*.obs.xjbzzwyzwwwq1.joint.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos.ecs.fjly2-1.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
console.ecso.bjsy-1.cmecloud.cn
*.eos.ecs.hnzkz-1.cmecloud.cn
console.ecso.bjggj-1.cmecloud.cn
*.ecis.zs-shanghai-1.cmecloud.cn
console.ecso.jsnj-3.cmecloud.cn
bcov.ecs.hbqj-1.cmecloud.cn
*.eos.ecs.ahaq-1.cmecloud.cn
*.eos.ecso.hbbd-1.cmecloud.cn
*.eos.ecso.jsxy-1.cmecloud.cn
*.cidc-rp-2167.sdytxczwwwq1.joint.cmecloud.cn
*.eos.hainan-hw-1.cmecloud.cn
*.eos.ecso.jxxy-1.cmecloud.cn

Certificate

The complete raw certificate details for *.obs.jssqhlwq1.joint.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsrQBjgXuANMJ1N0LsgQs
Qle2IIdd9bs379iFYYRFovb00DmLQupf+/gD/AGVORbVku8MF6nYVyXIMBGCmqhv
fmugB0m+kwj/CDshawkhxvtRhF8I3J13XmSJiB8IKUM/VwWDfVpJFb/2UMIcvWDK
g4KXiolhxLS96WPU2dOsXPOArmq28bhDwjZml6edslWWNEQz7V8B281i0aHjdUjy
NvzAIxQL/PDXJyUpIUrfjCqc5ceoyQtzczUxj2J3utC2cYcdCqD8/JrpVfMhquUF
H79xp+82bTleASjzU1GprdON8HnkMVqyacvMRTlVtEyd5v2k5v4edLG9sVgfsIhO
ewIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54568868585239034816763229206861573695
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-19 05:08:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-19 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '江苏省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '苏州市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中移（苏州）软件技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.obs.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22559182587018932512466451893405027920161548753174175987471858783309377198322889961025056994778219668208581233058688822625117213186164500479210952844958931405116230443653743436997290608220659701343928042546607338959670748288180323218857230980110575773836926122717664219826366750712644178766043731445489827860118430279951523909283123065136762047507761695898387227681361338906015231707735721612681274836110217712160488262413779049184217099725527665637590438329976214793964130295122393135739541269777227018438150897779699310085718154777606119974142751930501239022939729535170804210113023378279856723103280100827315326587
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							5b00b1ab17a2905d5b481b462be90aae2e93d701
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (276 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'obs-website.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.obs-website.cidc-rp-2172.jssqhlwq1.joint.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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