*.stefanini.com

- Stefanini, Inc. -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 6a:5c:98:82:27:fd:08:8e:6f:39:b9:8b was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Stefanini, Inc.

Organization: Stefanini, Inc.
State / Province: Michigan
Locality: Southfield
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 6a:5c:98:82:27:fd:08:8e:6f:39:b9:8b
Serial Number (int): 32917352417130717681645369739
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9a:cf:87:66:60:64:e5:d0:f6:0e:0c:12:fb:bb:88:0d:85:0d:30:17
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 55:45:e3:30:88:34:2d:a5:a1:95:8b:ac:9f:fe:a3:d4:47:fa:75:fd
Fingerprint (sha256): 1b:2e:fa:50:e1:ab:51:09:8b:f1:cd:08:99:79:6b:10:8e:a7:0c:58:16:40:f1:29:dd:71:97:b8:7b:e2:b5:fe

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate *.stefanini.com

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.stefanini.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.stefanini.com
stefanini.com

Other certificates including the domain name stefanini.com

(limited to 100 certificates)
aodctraining.stefanini.com
goodman-sd.stefanini.com
evoqua-sd-dev.stefanini.com
customurl.konviva.com.br
genchat.stefanini.com
essdbo.stefanini.com
lss-servicedesk.stefanini.com
essd.stefanini.com
lss-servicedesk.stefanini.com
essd.stefanini.com
chat-usapi.stefanini.com
otrs.stefanini.com
puratos-sd.stefanini.com
novaintranet.stefanini.com
nodavpn.stefanini.com
customurl.konviva.com.br
sophie-jcrew-dev.stefanini.com
goodman-reporting.stefanini.com
dl.stefanini.com
sophie-infineum.stefanini.com
sophie-devry.stefanini.com
realtime.stefanini.com
goodman-sd.stefanini.com
essd.stefanini.com
webmail.techteam.com
interno.stefanini.com
customurl.konviva.com.br
sophie-loblaw.stefanini.com
sip.stefanini.com
stefanini-acd-us.stefanini.com
go.stefanini.com
workplace.stefanini.com
customurl.konviva.com.br
eapps.stefanini.com
alex-alcoa-dev.stefanini.com
go.stefanini.com
sophie-show.stefanini.com
customurl.konviva.com.br
eapp.stefanini.com
customurl.konviva.com.br
sophie-cnhi.stefanini.com
lss-dev.stefanini.com
sophie-cnhi-dev.stefanini.com
woodward.stefanini.com
conteudos.stefanini.com
analytics.stefanini.com
epassword.stefanini.com
grc.stefanini.com
novaintranet.stefanini.com
chat-us3.stefanini.com
customurl.konviva.com.br
analytics.stefanini.com
customurl.konviva.com.br
materiais.stefanini.com
customurl.konviva.com.br
epassword.stefanini.com
nam-wlc.stefanini.com
webmail.techteam.com
evoqua-sd.stefanini.com
sophie-demo.stefanini.com
swgservicedesk.stefanini.com
news.stefanini.com
sophiedemoinsurance.app.stefanini.com
customurl.konviva.com.br
Kit-cnhi-dev.stefanini.com
essd.stefanini.com
eportal.stefanini.com
eportal.stefanini.com
swgservicedeskdev.stefanini.com
servicedesk.stefanini.com
1ssl.konviva.com.br
customurl.konviva.com.br
*.stefanini.com
servicedeskportal.stefanini.com
emkt.stefanini.com
essd.stefanini.com
customurl.konviva.com.br
infineumdev.stefanini.com
*.stefanini.com
customurl.konviva.com.br
sophie-meritor-dev.stefanini.com
lss-supportauto.stefanini.com
sophie-devry-dev.stefanini.com
edata.stefanini.com
lss-reporting.stefanini.com
next.stefanini.com
sophie-adtalem-dev.stefanini.com
customurl.konviva.com.br
lss-servicedesk-eu.stefanini.com
sophie-solvay-dev.stefanini.com
sdbot-infineum.stefanini.com
sophie-devry-dev.stefanini.com
infineumcatalog.stefanini.com
mkt.stefanini.com
marketing.stefanini.com
wwe-nam.stefanini.com
chat-eu2.stefanini.com
lss-supportauto.stefanini.com
infineum-proc-dev.stefanini.com
trace.stefanini.com

Certificate

The complete raw certificate details for *.stefanini.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIMalyYgif9CI5vObmLMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzEyMDQwODExMDhaFw0y
NTAxMDQwODExMDdaMGkxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhNaWNoaWdhbjET
MBEGA1UEBxMKU291dGhmaWVsZDEYMBYGA1UEChMPU3RlZmFuaW5pLCBJbmMuMRgw
FgYDVQQDDA8qLnN0ZWZhbmluaS5jb20wggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw
ggEKAoIBAQDRlnwH5oLg+U5RQb22wEVifjad4lEi3eibMezgKwm6d7Hzpfx30xd3
cW/b9bsa70cGaPxlb2MV9ek2rhMEz2/xYEDggn0yhc88d3u50n/nDz/aXAnPJpom
CqD9Q52RManDn+7KmcvErikiuNtwO06WTSn487Tx4etq5+OWRyIbBAILZ9mbPiEJ
90AUtznUxTtO4WzgAro63kl/lKWbb4O5NXvKlsXlw7oZHyWLxMo05nytwQU0OlOY
QECYKQlGC/S5V3sIzTVgCXV1+6oJR4jn7Gh5XZ+FhKOl6z3FYGSZaYGRB2XJwnmo
3iu6IrblnFdDNtkY5kU+K8OZy/QniHIJAgMBAAGjggHrMIIB5zAOBgNVHQ8BAf8E
BAMCBaAwDAYDVR0TAQH/BAIwADCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcw
AoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNz
bGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24u
Y29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAy
BggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9y
eS8wCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6Ly9jcmwuZ2xvYmFs
c2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwKQYDVR0RBCIwIIIPKi5zdGVm
YW5pbmkuY29tgg1zdGVmYW5pbmkuY29tMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggr
BgEFBQcDAjAfBgNVHSMEGDAWgBT473/yzXhnqN5vjySNiPGHAwKz6zAdBgNVHQ4E
FgQUms+HZmBk5dD2DgwS+7uIDYUNMBcwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJ
KoZIhvcNAQELBQADggEBACAmMlskN1pqW5jh3J6ZvCCoPORjWBc0Tgdyy8scu/6F
UGgPN1pDs5hhxMIVJ7tGG+pzwTsumtLAqdbeYxCV6oQm4GURuKg/xUoU31KIyrUT
xe2iBz525GS4b/zAW4HYbMZ0ETGTHJs8posKcp7DdKTgUxCv7H+txe8u8MXJt0M8
bzbCIDJVwYbCahUpy9kPKxZga/huPgam92gL5L2H8qAKrh4Vuepo9c0EurET8SSE
FCQIQqsmK4LI9H8teNwwX/l7jLj4Z8wVfCi0fKoKT4jz58w7gdixCFGsgqGU7HSC
pmSyYLRaDyeLIyJFAbaXREqOwCUQFLjdiRVL82X71Ho=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ZZ8B+aC4PlOUUG9tsBF
Yn42neJRIt3omzHs4CsJunex86X8d9MXd3Fv2/W7Gu9HBmj8ZW9jFfXpNq4TBM9v
8WBA4IJ9MoXPPHd7udJ/5w8/2lwJzyaaJgqg/UOdkTGpw5/uypnLxK4pIrjbcDtO
lk0p+PO08eHraufjlkciGwQCC2fZmz4hCfdAFLc51MU7TuFs4AK6Ot5Jf5Slm2+D
uTV7ypbF5cO6GR8li8TKNOZ8rcEFNDpTmEBAmCkJRgv0uVd7CM01YAl1dfuqCUeI
5+xoeV2fhYSjpes9xWBkmWmBkQdlycJ5qN4ruiK25ZxXQzbZGOZFPivDmcv0J4hy
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 32917352417130717681645369739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-04 08:11:08 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-04 08:11:07 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Southfield'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Stefanini, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.stefanini.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26458012408382965925648161178258930273539523152215934663262665895785877675522266765580135341735233068886665511497366853787016700469670871949166565583334841868947852084340846520590772180277812363831892325664264330562018050028939701215941063620051498264058898166140785342091780112070172468669384760680636941385199086985089162171297928315964705255200821176666578919726067886889657255597333537124129400532891791939432996957637671259520459125617505628041964664440883604204111808862149286472654567992192909627070734489684984367338906359115952018290868077422066356261774956209371808614650708663128525181137570831451392864777
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.stefanini.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'stefanini.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9acf87666064e5d0f60e0c12fbbb880d850d3017
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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