www-uat.barclayscorporate.com

- Barclays PLC -

Issued by Entrust Certification Authority - L1M

About this certificate

This digital certificate with serial number fa:f3:7d:fd:4f:04:b2:09:00:00:00:00:54:cd:b1:df was issued on by Entrust, Inc..

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Barclays PLC

Company registration number: 00048839
Organization: Barclays PLC
Organization unit: Web and Infrastructure Services EXPI-D02C2-LTMCS-01-51
State / Province: London
Locality: London
Country: GB

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2014 Entrust, Inc. - for authorized use only
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): fa:f3:7d:fd:4f:04:b2:09:00:00:00:00:54:cd:b1:df
Serial Number (int): 333571282453233496133784446658730111455
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 4d:41:62:7b:af:47:34:02:54:d9:01:06:4c:60:6d:ec:97:25:93:98
AuthorityKeyId: c3:f7:d0:b5:2a:30:ad:af:0d:91:21:70:39:54:dd:bc:89:70:c7:3a

Fingerprint (sha1): 61:60:a0:97:36:a5:e6:52:7e:0c:94:78:c2:ba:1a:71:0c:7e:d9:da
Fingerprint (sha256): 19:36:f1:36:76:bf:f1:d5:71:5b:c6:46:a9:c0:2e:42:cc:79:be:6e:09:53:fb:71:d1:44:83:81:96:3a:c0:46

Issuing Certificate URL: http://aia.entrust.net/l1m-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1m.crl

Check the revocation status for certificate www-uat.barclayscorporate.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-uat.barclayscorporate.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-uat.barclayscorporate.com
www-uat-pi.barclayscorporate.com
piwwwstage.barcorp.com
euwwwstage.barcorp.com

Other certificates including the domain name barclayscorporate.com

(limited to 100 certificates)
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
signingsoftware.barclayscorporate.com
www-qa.fxrates.uk.barclays
research.barclayscorporate.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-qa.barclayscorporate.com
www-uat.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
www-qa.barclayscorporate.com
signingsoftware.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-uat.barclayscorporate.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www.twc.barclayscorporate.com
research.barclayscorporate.com
www.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
www.barclayscorporate.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
research-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.barclayscorporate.com
www.media.barclayscorporate.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www.twc.barclayscorporate.com
international.barclays.com
www.media.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
ask.barclayscorporate.com
www.sf.barclayscorporate.com
research.barclayscorporate.com
contingency.barclayscorporate.com
www-qa.barclayscorporate.com
www.barclayscorporate.com
international.barclays.com
research-uat.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
www.sf.barclayscorporate.com
research-uat.barclayscorporate.com
international.barclays.com
investmentbank-uat.barclays.com
www.sf.barclayscorporate.com
www.barclayscorporate.com
signingsoftware.barclayscorporate.com
www-qa.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
www-uat.barclayscorporate.com
www-qa.fxrates.uk.barclays
www-uat.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.media.barclayscorporate.com
www.sf.barclayscorporate.com
international.barclays.com
www.barclayscorporate.com
www.1.barclayscorporate.com
investmentbank-uat.barclays.com
international.barclays.com
international.barclays.com
research.barclayscorporate.com
www-qa.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
investmentbank-uat.barclays.com
www.barclayscorporate.com
www.twc.barclayscorporate.com
signingsoftware.barclayscorporate.com
www.barclayscorporate.com
www.sf.barclayscorporate.com
www.twc.barclayscorporate.com
contingency.barclayscorporate.com
www.barclayscorporate.com
www-uat.barclayscorporate.com
research.barclayscorporate.com
www.twc.barclayscorporate.com
research-qa.barclayscorporate.com

Certificate

The complete raw certificate details for www-uat.barclayscorporate.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hyEL63qcXJUMzbmy68Y
7T1K82tGtvrUW2RljmOsaNDdYXsN2PxZrw0dfUebnYQwtSemw7diAX7+ldLSmDLr
rNAnmYpze/7PfBpYEqQvhFHiossENJ74c5zl9SCgNT1vugX19oO7ItgXAvK8kfRc
0gS2o55SQ6PxHKvGkYT1pmLet1jQJoj/oeB8dkvDX/j7Zcg48H9JfJaBMOYkj0ws
V5myIDI4cOUl0R0GwlJQqQZYaX7lJNI+GfbkHBq6flN3/iZvzkIHMtD3pj/yoEkN
PGLQ81UPztS0ICvXS3rdEtaFpD6IWjoZREDhOyL+Jpvj/mkHiUo7fRLv7adCTdOO
9QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 333571282453233496133784446658730111455
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2014 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1M'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-12 12:45:52 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-09-12 13:15:51 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'London'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Barclays PLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Web and Infrastructure Services EXPI-D02C2-LTMCS-01-51'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00048839'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-uat.barclayscorporate.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27534012420128554102931134090926514065438057342523169087423026961132813985741657757362692906400494804805010008256344552217319048999120856293089335050301467622111239617152380760320435181409601513259210957545115503037807537058280634871871593831153182708328064483495123329865001775995361147303435753784475776597213355521748141722163389893186518862757609494098370118535152490410406571190489856702950932894832871687059027775025920536203585996623081319579439206577849381995461878801997663186445299494586388282166453270746498376876884881439677411951336178704908767235198677095352528460922335628480901702133928641397121060597
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-uat-pi.barclayscorporate.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'piwwwstage.barcorp.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'euwwwstage.barcorp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1m-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1m.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (67 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114028.10.1.2 (Entrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.entrust.net/rpa'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName c3f7d0b52a30adaf0d9121703954ddbc8970c73a
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4d41627baf47340254d901064c606dec97259398
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		000a39a3a35e11dcb33ccfd8978e2c25b853fbf2cbe53fcda5f65fb9f0ae2a7aa61eb805fca9bb448507af2e5b0c2357f2031c49b7584b6736a7b7be2142f60e85ab51527bbc138482823efb747633a3955e48fe6586cde177d5a6b41048703c697637d9605084adf82f1b8c3bf9f59c6b3acdf523f9b7a550ba88bfc91e3bf9aafd78c448e8d61dfe41c49ce105f2ca23f443ccc5077c32a721feeb45e96b29766ec0f6a2f5e209aa43d3e6cba5144df9bbb5e8905a79686e833c02227cf499d2aec5d2dac900eb7c8d2bb3ecd12ce841d5413104017f56dac41d0deae1c70e20890237b592039c31133bad584d6c44701bc6f60ae86ba599d1199c323535b55d