mailercdn-teamkpn.kpnnet.org

- Koninklijke KPN N.V. -

Issued by certSIGN Web CA

About this certificate

This digital certificate with serial number 23:06:06:71:54:ce:05:73:16:e8:3e was issued on by CERTSIGN SA.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Koninklijke KPN N.V.

Organization: Koninklijke KPN N.V.
State / Province: Zuid-Holland
Locality: Rotterdam
Country: NL

CERTSIGN SA

Organization: CERTSIGN SA
Country: RO

This certificate will expire on

Certificate Details

Serial Number (hex): 23:06:06:71:54:ce:05:73:16:e8:3e
Serial Number (int): 42340856732252228373899326
Serial Number lenght: 86 bits, 11 octets

SubjectKeyId: 81:2e:14:e4:a3:1e:be:66:39:ee:cc:f6:d5:4c:ba:64:98:70:7d:40
AuthorityKeyId: 65:29:2b:19:2b:5a:41:d3:01:62:9b:7b:47:00:e2:18:08:71:c3:41

Fingerprint (sha1): 55:dd:e8:26:e6:6c:42:d9:55:b8:a0:e1:00:be:a4:f2:68:8e:5c:12
Fingerprint (sha256): 1b:40:df:1d:82:33:af:36:b8:ee:c9:d2:f4:ae:28:f1:0c:16:85:e2:9c:29:84:88:84:7a:44:72:c2:6a:9f:e5

Issuing Certificate URL: http://www.certsign.ro/certcrl/certsign-webca.crt

Revocation information

OCSP Server: http://ocsp.certsign.ro
CRL Distribution Point: http://crl.certsign.ro/certsign-webca.crl

Check the revocation status for certificate mailercdn-teamkpn.kpnnet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mailercdn-teamkpn.kpnnet.org

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mailercdn-teamkpn.kpnnet.org

Other certificates including the domain name kpnnet.org

(limited to 100 certificates)
sentrymail.acc.kpnnet.org
bi.kpnnet.org
bi4dev.kpnnet.org
extselfsvc.kpnnet.org
bi.kpnnet.org
bprchatbot-acc.kpnnet.org
teamkpn-mobile.kpnnet.org
sharekpn.kpnnet.org
get-it.kpnnet.org
teamkpn-acc.kpnnet.org
ts.kpnnet.org
kpn-internal-wireless.kpnnet.org
kitnlams73s001.kpnnet.org
uat-sharekpn.kpnnet.org
wem-comet.kpnnet.org
KPN-PS02.kpnnet.org
zipsacc.kpnnet.org
cloudmail.kpnnet.org
cloudmail.kpnnet.org
wem-live.kpnnet.org
ksp-admin-acc.kpnnet.org
sentryapp.acc.kpnnet.org
w2039.kpnnet.org
ciso-ksp.kpnnet.org
sentryapp.acc.kpnnet.org
bi4prd-web2.kpnnet.org
bi.kpnnet.org
filetrans.kpnnet.org
host-retail.kpnnet.org
TIMESHEET.KPNNET.ORG
sentrymail.kpnnet.org
FILETRANS.KPNNET.ORG
filetrans.kpnnet.org
filetrans.kpnnet.org
w2040.kpnnet.org
retailactueel-retail.kpnnet.org
iamportal.kpnnet.org
iamportaltst.kpnnet.org
password.kpnnet.org
KPN-PS02.kpnnet.org
mailercdn-teamkpn.kpnnet.org
teamkpn.kpnnet.org
teamkpn-acc.kpnnet.org
get-it.kpnnet.org
ksp-admin.kpnnet.org
zips.kpnnet.org
Extranet-uat.kpn.com
*.kpnnet.org
ksp-admin-acc.kpnnet.org
ts.kpnnet.org
Voice-of-the-Employee.kpnnet.org
*.kpnnet.org
bealert.kpnnet.org
winkeldossier-retail.kpnnet.org
bealert-acc.kpnnet.org
MAIL5.KPNNET.ORG
bodssnd.kpnnet.org
mail4.kpnnet.org
extranet-uat.kpn.com
wem-staging.kpnnet.org
filetrans.kpnnet.org
teamkpn-stats.kpnnet.org
mail1.kpnnet.org
*.kpnnet.org
teamkpn-chat.kpnnet.org
bisnd2.kpnnet.org
OAPILOT.KPNNET.ORG
portal117.kpnnet.org
KPN-PS02.kpnnet.org
PPScan.kpnnet.org
core.kpnnet.org
bisnd2.kpnnet.org
ksp-admin.kpnnet.org
sharekpn.kpnnet.org
ksp-admin.kpnnet.org
KPN-PS01.kpnnet.org
mail7.kpnnet.org
match.uat.kpnnet.org
teamkpn-mobile.kpnnet.org
extranet.kpn.com
ideedock.kpnnet.org
teamkpn-static.kpnnet.org
W2040.kpnnet.org
vpn.kpnnet.org
bealert.kpnnet.org
PROFINDER-UAT.KPNNET.ORG
bods4uat.kpnnet.org
bisnd2.kpnnet.org
mail2.kpnnet.org
extselfsvc.kpnnet.org
SENTRYAPP.KPNNET.ORG
ksp-admin-acc.kpnnet.org
test-paperlessshop-retail.kpnnet.org
adfs.kpnnet.org
topdesk-innovatie.kpnnet.org
bodsdev.kpnnet.org
uat-sharekpn.kpnnet.org
ws-mijnwerkplek.kpnnet.org
extselfsvc.kpnnet.org
*.kpnnet.org

Certificate

The complete raw certificate details for mailercdn-teamkpn.kpnnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEA0CxUngOkleUUY5WISOWC
WU2mUmUeyBz1AGL6wBtKfoyPMWdIbQyJKbXeIvNnFdcmOytER/H1qOly497Fhjcm
yqKpshKF4/b23xGMTU1LAECZ3eBqZsxe90If3NR+scBV6lj7ham6cdV7X26ztD1N
4r4LBf0WxpSt4Ych5Hvcs/VXZ54wHH5Krf37l6mJiiwCd6pQXytkJVbeU+TVPoCi
z2aKRY5/juZ/YQkPIhzjz90BBqDbortTICFpsvRLEpBkF1tZnnKGdIKGVlWjUies
u/otDBBFqsMZ3jkPmaacCC8NTz4qNntcZCqAiiNJsus5vfBIPvGI1MHOxd7DUGgw
DLfwL1bpwWLv/Mfr2CmQtWX5fsn8BRhuUxeg/DtYts7dl8qTuvg8OmSYMspwYv+F
cfceLzDYYAcRiP+gciR/Mtf/woPQ0cVyPTRSlnzXTPcAUSmX1wQYQPyCTwGLSip1
ZBWsxc3cJF4jJybGrl/t4knZX9gZfyTP+pDqrDvCAJTZHDsXFPvz8szK3dKpyNuV
+Fy5VGMmm8G77StiXcHx3HCsgZbSoR1p/cI3Dex/ev2r3hCf/WB6rJocAbSK/q8p
klV342RneEPqAF2crh5XLDG2WzN3Ph7Smgk5qWOe+MC4MmIhbudfCsR6/bqlmYRc
SJWAfmzmbQY+vqSMvCLJ6uUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 42340856732252228373899326
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'RO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CERTSIGN SA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'certSIGN Web CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VATRO-18288250'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-05-13 14:53:25 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-05-13 14:53:25 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Zuid-Holland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Rotterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Koninklijke KPN N.V.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mailercdn-teamkpn.kpnnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 849272422431999712432314292559245435131324250763538983266002694001514163640682550347294916618160433844866398188928999237824103567232941368599940404000165766572403511508149183301811544173681573347088319278165497589636466706265354990551434998488082663135891532010471928110185266833937046391350867256658741662118017772231480910964872415781834203248481918267141450475370922520511982061201413455918494093636678953657531421900013339207835208746505200004764360579184907225130078176860493227332147541933512981174466047835739876471679582494187776308267509152343758560154413432410306186862797774665259542313220076028847546960901748589111954276991794363433687689719143414973090856672707297287521001314383950257512231815453585284362013501638703709543965070138583624815495304559054567983828681724711526794513815430013027982936974532886393700338077210092026354767391217623148940753907275076898572573357198558701588429139601536887139177067082403743152687920962563154009607781464439656109016802596431944761380818011718646528971290880619192217117510212950052150978572999275337452415996131403679838000985912668872756131523654452279471523928433901961430208689557760806733725022443223559084029903408278606464118855253383863803593046820715717510094777061
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (102 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.certsign.ro'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.certsign.ro/certcrl/certsign-webca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 65292b192b5a41d301629b7b4700e2180871c341
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							812e14e4a31ebe6639eeccf6d54cba6498707d40
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (186 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 0.4.0.2042.1.7
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.25017.3.1.4.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.certsign.ro/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (51 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certsign.ro/certsign-webca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailercdn-teamkpn.kpnnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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