conf.sfr.com

- SFR -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:7c:ef:0d:a1:84:b9:13:6f:5f:0b:3b:6d:c9:8a:e7:be was issued on by KEYNECTIS.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • SAN DNSName contains duplicate values (awslabs certlint)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

SFR

Organization: SFR
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:7c:ef:0d:a1:84:b9:13:6f:5f:0b:3b:6d:c9:8a:e7:be
Serial Number (int): 1492304244455209816455561664971450973087678
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 71:c8:a8:c4:8b:93:e8:8a:a0:b7:62:36:ab:77:6a:cc:e9:71:ff:5e
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): e2:5d:b5:67:17:3f:f6:1a:8a:ae:b9:75:8c:5d:0a:20:98:1f:76:79
Fingerprint (sha256): 18:7c:61:01:1f:47:29:74:0c:a3:77:6d:d3:bc:7c:b8:c3:dd:e8:9b:a2:e1:f3:20:f5:63:55:6d:ee:8f:30:1e


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate conf.sfr.com

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for conf.sfr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

conf.sfr.com
conf.sfr.com
lyncdiscover.sfr.com
lyncdiscover.sfrserviceclient.fr
web-02.sfr.com
owapps-02.sfr.com
web-03.sfr.com
owapps-03.sfr.com
web-01.sfr.com

Other certificates including the domain name sfr.com

(limited to 100 certificates)
extra-prmfo.sfr.com
sso.sfr.com
zemel.sfr.com
mysfr.sfr.com
sun-admin.sfr.com
intra-zabbix-reseau.sfr.com
extra-sigma-sfrnco.sfr.com
extra-prmbo.sfr.com
extra-rcetao.sfr.com
campus.sfr.com
fgw-77251-18-c.fgw.fr.sfr.com
zepush.sfr.com
zemel.sfr.com
ipstd1ss1sm11.sfr.com
intra-sara.sfr.com
campus.sfr.com
*.pfv.private.sfr.com
sun-apps.sfr.com
fgw-910235-12-b.fgw.fr.sfr.com
zepush.sfr.com
*.pack.private.sfr.com
autodiscover.sfr.com
fgw-910235-7-a.fgw.fr.sfr.com
fgw-77251-22-b.fgw.fr.sfr.com
*.private.sfr.com
adrms.sfr.com
extra-sigma-sfrnco.sfr.com
fgw-910235-2-a.fgw.fr.sfr.com
*.private.sfr.com
intra-sfrnco.sfr.com
zemel.sfr.com
intra-sfrnco.sfr.com
campus.sfr.com
fgw-77251-22-c.fgw.fr.sfr.com
conf.sfr.com
intra-webdav.sfr.com
fgw-910235-1-b.fgw.fr.sfr.com
corporate.sfr.com
*.completel.private.sfr.com
extra-consofi.sfr.com
intra-aclserver.sfr.com
campus.sfr.com
fgw-910235-13-c.fgw.fr.sfr.com
sip.sfr.com
extra-sfrnco.sfr.com
*.sfr.com
zemel.sfr.com
fgw-77251-24-b.fgw.fr.sfr.com
wsaetv.sfr.com
wsaetv.sfr.com
fgw-910235-2-c.fgw.fr.sfr.com
fgw-910235-4-a.fgw.fr.sfr.com
apps.sfr.com
zepush.sfr.com
autodiscover.sfr.com
intra-sultan.sfr.com
sip03.sfr.com
extra-sultan.sfr.com
corporate.sfr.com
intra-sfrnco.sfr.com
autodiscover.sfr.com
autodiscover.sfr.com
fgw-910235-5-b.fgw.fr.sfr.com
extranet.sfr.com
legacy.sfr.com
intra-kara-direct.sfr.com
fgw-910235-7-b.fgw.fr.sfr.com
extra-sfosynchro.sfr.com
sun-apps.sfr.com
campus.sfr.com
www.sfr.com
campus.sfr.com
intra-sfrnco.sfr.com
actuinterne.sfr.com
corporate.sfr.com
pnp.fr.sfr.com
extra-sfrnco.sfr.com
campus.sfr.com
intra-zabbix-systeme.sfr.com
actuinterne.sfr.com
wsaetv-qlf.sfr.com
fgw-77251-17-a.fgw.fr.sfr.com
fgw-910235-8-c.fgw.fr.sfr.com
fgw-910235-2-b.fgw.fr.sfr.com
intra-pdcbios-ihmrc.sfr.com
fgw-910235-9-c.fgw.fr.sfr.com
fgw-910235-7-c.fgw.fr.sfr.com
qlf-apps.sfr.com
*.sfr.com
fgw-910235-12-c.fgw.fr.sfr.com
intra-sfrnco-pack.sfr.com
wsaetv-pre.sfr.com
autodiscover.sfr.com
fgw-910235-13-b.fgw.fr.sfr.com
*.thd.sfr.com
extra-sigma-sfrnco.sfr.com
smtp1.sfr.com
mysfr.sfr.com
*.xdn.sfr.com
*.thd.sfr.com

Certificate

The complete raw certificate details for conf.sfr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISESF87w2hhLkTb18LO23Jiue+MA0GCSqGSIb3DQEBCwUA
MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM
QVNTIDIgS0VZTkVDVElTIENBMB4XDTE2MDMxODEwMzIwMFoXDTE4MDMxOTEwMzIw
MFowMjELMAkGA1UEBhMCRlIxDDAKBgNVBAoUA1NGUjEVMBMGA1UEAxMMY29uZi5z
ZnIuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJPOUzdZ6x5o
oCT8WmwPa6kvo8oWeI1RhomaBWFfe8Xfzf/uYH2pvbl2LmIXE3iXfiYGkTtnx57k
fW5BwoYmPV2ARLatvLwlKlnrWTrvYroj9IBLZllckft9urR+ErXIzIh+V7+RBzkI
2v1w9KoVoBtNXvWXW0XXn3ypzKroiCdifHkvDqLW1GN8+7lkxF9FJobuHqvNYvY+
CwsLcphbV0Zz9QOs7PeWuEdMcuTETFjkOkOIFB8esOs9NKqQzpaBsoYoZZcAq4X1
rhdtpll+d4qbnmUI5JTClJ2fM9945XTGb8gbHvwjd3a8Lqyt/rVSEmIkO3xdk7uS
YE9rKecauwIDAQABo4ICFDCCAhAwCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMIG1BgNVHREEga0wgaqCDGNv
bmYuc2ZyLmNvbYIMY29uZi5zZnIuY29tghRseW5jZGlzY292ZXIuc2ZyLmNvbYIg
bHluY2Rpc2NvdmVyLnNmcnNlcnZpY2VjbGllbnQuZnKCDndlYi0wMi5zZnIuY29t
ghFvd2FwcHMtMDIuc2ZyLmNvbYIOd2ViLTAzLnNmci5jb22CEW93YXBwcy0wMy5z
ZnIuY29tgg53ZWItMDEuc2ZyLmNvbTBPBgNVHR8ESDBGMESgQqBAhj5odHRwOi8v
Y3JsLXNzbC5jZXJ0aWZpY2F0Mi5jb20va2V5bmVjdGlzL2NsYXNzMmtleW5lY3Rp
c2NhLmNybDBEBggrBgEFBQcBAQQ4MDYwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3Nw
LXNzbC5jZXJ0aWZpY2F0Mi5jb20vc3NsLW9jc3AwRQYDVR0gBD4wPDA6Bg0rBgEE
AYGtWgIFAgUBMCkwJwYIKwYBBQUHAgEWG2h0dHA6Ly93d3cub3BlbnRydXN0LmNv
bS9QQzAdBgNVHQ4EFgQUccioxIuT6Iqgt2I2q3dqzOlx/14wHwYDVR0jBBgwFoAU
ABFB3zudO8u4osEzkqiBzOV955kwDQYJKoZIhvcNAQELBQADggEBAL7eeVDwIiCR
FArRLjt1wHVNUq2tv0mPytEDVi/YDqlvpu2AOfyBe0jAi/OkYAII2aUksLEeB5wb
g5Cch3kfG/nDw+3I6gRgBfFUMqQZcq4GGZBvQ74d9dvSy7/TVDt7Fimcl0Kr0Au3
5rVnjmFIzIRpCIQCobHoj7G/LD9sxXdlXQ0Ukj93VxyPsUsSC6EwmlA2hOCoTcBN
gJabV6fqoLNYZXiICjo+1TKJvDsax5VWbsWsBtoo+q/fN9x8oNu5kSm5SO1jl+/Z
esZ4VT8FrK/D/82wrzlF/Y+6VrfyyiHLybm0rehnv+rUma59kynjXhWCkbGNXexO
TsKJAA6MFw4=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJPOUzdZ6x5ooCT8WmwP
a6kvo8oWeI1RhomaBWFfe8Xfzf/uYH2pvbl2LmIXE3iXfiYGkTtnx57kfW5BwoYm
PV2ARLatvLwlKlnrWTrvYroj9IBLZllckft9urR+ErXIzIh+V7+RBzkI2v1w9KoV
oBtNXvWXW0XXn3ypzKroiCdifHkvDqLW1GN8+7lkxF9FJobuHqvNYvY+CwsLcphb
V0Zz9QOs7PeWuEdMcuTETFjkOkOIFB8esOs9NKqQzpaBsoYoZZcAq4X1rhdtpll+
d4qbnmUI5JTClJ2fM9945XTGb8gbHvwjd3a8Lqyt/rVSEmIkO3xdk7uSYE9rKeca
uwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492304244455209816455561664971450973087678
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-03-18 10:32:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-19 10:32:00 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SFR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'conf.sfr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17241295309410326805580421343171074580751826624443786527667931601511831283792309071544617395819419803343546367932882424694108383258891972095488842889960974444715706128681623954569008427778619384100527191724701791507435728393445481398361964163761660620955706692284799763951400141732121066912268035326746019093375613916033772944213083796126125167026555399617754738452424975011290846074213406690982783569615147986834645143730650908710181524269580969878738379293386444555621877428547195762547934191189812651184948094599798948920234926186723343795877425033914215462064607661558442053159346331245554262963830412468113840827
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (173 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'conf.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'lyncdiscover.sfrserviceclient.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-02.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owapps-02.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-03.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owapps-03.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'web-01.sfr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							71c8a8c48b93e88aa0b76236ab776acce971ff5e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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