operaduomo.firenze.it

- OPERA DI SANTA MARIA DEL FIORE -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 13:3f:e9:80:3a:e5:9a:2f:e9:88:2a:b9 was issued on by GlobalSign nv-sa.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

OPERA DI SANTA MARIA DEL FIORE

Company registration number: 00538420480
Organization: OPERA DI SANTA MARIA DEL FIORE
Address: Via della Canonica 1
State / Province: Toscana
Locality: Firenze
Country: IT

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 13:3f:e9:80:3a:e5:9a:2f:e9:88:2a:b9
Serial Number (int): 5957480190058995760373443257
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: aa:eb:f5:61:c6:de:65:63:a0:2b:45:44:f3:1f:b2:8c:a6:ff:f8:22
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 6a:2e:cd:3a:cc:b1:70:ab:64:5c:7f:7f:98:25:d4:42:18:45:2e:72
Fingerprint (sha256): 1b:87:9d:f1:a7:4f:65:f6:f0:e6:c4:c9:3c:c0:2d:b4:6c:e6:79:64:3b:48:cc:91:02:80:54:53:d6:6d:4c:4f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate operaduomo.firenze.it

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for operaduomo.firenze.it

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

operaduomo.firenze.it
www.ilgrandemuseodelduomo.it
www.museumflorence.com
codicicorali.operaduomo.firenze.it
www.operaduomo.firenze.it

Other certificates including the domain name operaduomo.firenze.it

(limited to 100 certificates)
codicicorali.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
preview.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
mdm.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
intranet.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
sni.cloudflaressl.com
museology.operaduomo.firenze.it
preview.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
mdm.operaduomo.firenze.it
operaduomo.firenze.it
preview.operaduomo.firenze.it
autography.operaduomo.firenze.it
preview.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
cupola600.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.codicicorali.operaduomo.firenze.it
*.operaduomo.firenze.it
preview.operaduomo.firenze.it
arnolfo.operaduomo.firenze.it
preview.operaduomo.firenze.it
museology.operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
staging.operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
autography.operaduomo.firenze.it
staging.operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
*.operaduomo.firenze.it
museology.operaduomo.firenze.it
operaduomo.firenze.it
autography.operaduomo.firenze.it
operaduomo.firenze.it
museology.operaduomo.firenze.it

Certificate

The complete raw certificate details for operaduomo.firenze.it in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5957480190058995760373443257
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-12-11 12:55:42 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-12-12 12:55:42 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '00538420480'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Toscana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Firenze'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Via della Canonica 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OPERA DI SANTA MARIA DEL FIORE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'operaduomo.firenze.it'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 857734422655151912228791743875138919844146107950126822676961956131617705388050592743462425911551385566534768032823320467837314470780504996442122532960290372621204357653071908906906474164153557174276639923045844047087512140036550264264873084923163795684760462980574761641557958304692198135055174951601902541394126906379939425833314755111224388314826624839422731514065791580765294290119008701972676958880306547274653443652037465544916329253571082931309155548986732144973331685134840350300939535979799390415863446401338834629782144872840674221495155669506751222005279349354657214907974583151409223922608457131495726482890509258112158082283915946575908873696022937008800767442681405041683489725523632052466443591144180297736065644662139875395148341782976531631147134349976056058900841581310144883057320076505867970083932168854823164441929074612738965223372939490234083918155315319391797129207315544613437906203113055177793675175855945539885255111796375038125255568794037976123153469039540450722312076837049221680982946499911497902099884468342451377185949413522377940020172976433862562188679559747114550914118844697678831166591573867997785736012511989385685689178689729047671039549045524747119497132996805199228178076629524654911161728953
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (143 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ilgrandemuseodelduomo.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.museumflorence.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'codicicorali.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.operaduomo.firenze.it'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							aaebf561c6de6563a02b4544f31fb28ca6fff822
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00075008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f000001679d566d01000004030046304402200082f6eb5bf32fd629f680d3904be82f17180c5259ab807921fcb21ad7594bc1022050a4044bda59743fde235a2676b6629c64c204c4a09e9a0f010ebe84ed1510b9007700a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc10000001679d566d430000040300483046022100e23271a8e56b38470a45d0f411dd9ac0ad3747cc8524f8bcc9dc41aadf2fa3a8022100cbe1ef8a6a224f8bc6eab5f2012cadc53b4968459fb58d8e92010d87c3402541
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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