sso.taylor.edu

- Taylor University, Inc. -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 1a:75:39:96:86:25:44:e8:08:d6:9b:22 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Taylor University, Inc.

Organization: Taylor University, Inc.
State / Province: Indiana
Locality: Upland
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 1a:75:39:96:86:25:44:e8:08:d6:9b:22
Serial Number (int): 8188326527817225965086874402
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 59:ea:3f:96:94:bf:58:05:94:ac:07:85:69:03:b0:b6:58:cc:eb:3e
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 55:70:76:10:66:16:a3:34:43:ef:d8:fb:6b:8f:a7:24:f4:36:50:13
Fingerprint (sha256): 1c:a5:29:62:8c:0e:c0:fa:63:ba:cd:c2:5b:a7:e1:03:cf:87:11:96:26:69:7e:13:5d:99:20:a6:a2:bb:00:f1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl

Check the revocation status for certificate sso.taylor.edu

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sso.taylor.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sso.taylor.edu
ssopre.taylor.edu

Other certificates including the domain name taylor.edu

(limited to 100 certificates)
tucse.taylor.edu
pillars.taylor.edu
aec.taylor.edu
repo.cse.taylor.edu
tls.automattic.com
gamejam.cse.taylor.edu
moodle.cse.taylor.edu
pillars.taylor.edu
helpdesk.taylor.edu
tls.automattic.com
courses.taylor.edu
ezproxy.taylor.edu
taylor.edu
cse.taylor.edu
pillars.taylor.edu
us-east-1-san2.blackboard.com
forms.taylor.edu
sec.taylor.edu
www2.taylor.edu
secfarm2023.cse.taylor.edu
go.taylor.edu
scalefunder.net
scalefunder.net
canvas.cse.taylor.edu
gamejam.cse.taylor.edu
gamejam.cse.taylor.edu
cse.taylor.edu
cse.taylor.edu
courses.taylor.edu
www.taylor.edu
hg.cse.taylor.edu
services.taylor.edu
moodle.cse.taylor.edu
pillars.taylor.edu
scalefunder.net
scalefunder.net
moodle.cse.taylor.edu
scalefunder.net
status.taylor.edu
moodle.cse.taylor.edu
repo.cse.taylor.edu
sso.taylor.edu
courseval.taylor.edu
prtg.taylor.edu
int.taylor.edu
authform.taylor.edu
4040remote.taylor.edu
svn.cse.taylor.edu
owncloud.cse.taylor.edu
phy.cse.taylor.edu
www.taylor.edu
sec.taylor.edu
bxeproxy17a.taylor.edu
reports7.taylor.edu
library.taylor.edu
www2.taylor.edu
cse.taylor.edu
scalefunder.net
admissions.taylor.edu
owncloud.cse.taylor.edu
us-east-1-san2.blackboard.com
www2.taylor.edu
secfarm2023.cse.taylor.edu
Barracuda.Taylor.edu
4040remote.taylor.edu
us-east-1-san2.blackboard.com
moodle.cse.taylor.edu
thi.cse.taylor.edu
myfa.taylor.edu
scalefunder.net
scalefunder.net
moodle.cse.taylor.edu
bxeproxy17a.taylor.edu
scalefunder.net
www2.taylor.edu
passwords.taylor.edu
mail1.taylor.edu
sso.taylor.edu
www.cse.taylor.edu
fw.taylor.edu
reports.taylor.edu
cse.taylor.edu
us-east-1-san2.blackboard.com
cmc.taylor.edu
mail.taylor.edu
gfx.cse.taylor.edu
sec.taylor.edu
cse.taylor.edu
moodle.cse.taylor.edu
cse.taylor.edu
thi.cse.taylor.edu
Barracuda.Taylor.edu
repo.cse.taylor.edu
us-east-1-san2.blackboard.com
courseval.taylor.edu
admissions.taylor.edu
canvasrceapi.cse.taylor.edu
pillars.taylor.edu
tls.automattic.com
services.taylor.edu

Certificate

The complete raw certificate details for sso.taylor.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgIMGnU5loYlROgI1psiMA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTcwOTExMTQwMTA2WhcNMTgxMDI2MjE1NjAyWjBrMQswCQYDVQQGEwJV
UzEQMA4GA1UECBMHSW5kaWFuYTEPMA0GA1UEBxMGVXBsYW5kMSAwHgYDVQQKExdU
YXlsb3IgVW5pdmVyc2l0eSwgSW5jLjEXMBUGA1UEAxMOc3NvLnRheWxvci5lZHUw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXCnb5zIrJlmMbHaMCSjYb
T82iREfvOokb+1KtGymHnl1MDW4eiqwsJvpPrNoX5KQ2EOp6DRYKg0+sz0y5ra6O
b6M2PuGy31Kul2d1Nf4HG490887lA7/9oODqzeEQedzb5yme0vaJEPvmuonYXVEA
pYGPoiYWQVkH5ykey/4+ozF/3cZnNV9blu2FOgiAV8nYfa0a/zgbDpMETxW7t7lt
lFQQ7/7w326OPQkSsQK2INwm+YhHyd2ttfR/iZK1GPuUtDZ8z0MFxgiI9yFR5k3V
3L4JaWKQQVtsd2ZrDAmNZH+Vq2fprdXFoJCDu+7pKG90NS3KK03tL1Vn+6oCX5sv
AgMBAAGjggHyMIIB7jAOBgNVHQ8BAf8EBAMCBaAwgaAGCCsGAQUFBwEBBIGTMIGQ
ME0GCCsGAQUFBzAChkFodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2Vy
dC9nc29yZ2FuaXphdGlvbnZhbHNoYTJnMnIxLmNydDA/BggrBgEFBQcwAYYzaHR0
cDovL29jc3AyLmdsb2JhbHNpZ24uY29tL2dzb3JnYW5pemF0aW9udmFsc2hhMmcy
MFYGA1UdIARPME0wQQYJKwYBBAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8v
d3d3Lmdsb2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRME
AjAAMEkGA1UdHwRCMEAwPqA8oDqGOGh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20v
Z3MvZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIuY3JsMCwGA1UdEQQlMCOCDnNzby50
YXlsb3IuZWR1ghFzc29wcmUudGF5bG9yLmVkdTAdBgNVHSUEFjAUBggrBgEFBQcD
AQYIKwYBBQUHAwIwHQYDVR0OBBYEFFnqP5aUv1gFlKwHhWkDsLZYzOs+MB8GA1Ud
IwQYMBaAFJbeYfG9HBYpUxzAzH07gwBA5hp8MA0GCSqGSIb3DQEBCwUAA4IBAQAy
vujq5YKgrz48VP8Nedr1oulmgqqnje+hCpPesZcl/baNTEQ2kEQThF8yDk8X0YwQ
mXIMtyYe/CI287s2eZa5D655iUDahxLFWBpSVBRi/7h8tQLQRe/xQMw8yVveWel1
enE6dLWF1WsLIO7esKOtl+iDedO6kH1RXz8qAQhipKlY+QThnUc2VosI5ptC/Mwt
2vtCnQMv866iRUaSUuII/5GyufNebLBOkiLTeoYDesGci0Oue06VkVcNh7xvUD7H
RNJE19roxeIyjiXQyVINMsRghYm4Vfp1o7XeOrEtD9pRraSlV7HvylUE2Mp/oOEY
j6bbFhUqFXuMmGBzYaQY
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1wp2+cyKyZZjGx2jAko2
G0/NokRH7zqJG/tSrRsph55dTA1uHoqsLCb6T6zaF+SkNhDqeg0WCoNPrM9Mua2u
jm+jNj7hst9SrpdndTX+BxuPdPPO5QO//aDg6s3hEHnc2+cpntL2iRD75rqJ2F1R
AKWBj6ImFkFZB+cpHsv+PqMxf93GZzVfW5bthToIgFfJ2H2tGv84Gw6TBE8Vu7e5
bZRUEO/+8N9ujj0JErECtiDcJvmIR8ndrbX0f4mStRj7lLQ2fM9DBcYIiPchUeZN
1dy+CWlikEFbbHdmawwJjWR/latn6a3VxaCQg7vu6ShvdDUtyitN7S9VZ/uqAl+b
LwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8188326527817225965086874402
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-09-11 14:01:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-26 21:56:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Indiana'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Upland'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Taylor University, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sso.taylor.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 27146395927827930608589258603575727290756050147551842791746623507557390821428195092326549702046424973722835978774824019949840681334866600201700789700618197615331821848406347087311325608518290450410324303446811450107934707040501320943997303234897733848407866213552647655061979925028097594265605318466025120482276265008494150378863632726602729740144178145305574731703716793699059804119377631344584382129247117652996380031894303986230240326907097724942592462237228344550125645684760975961864411827382679800983743338485281030462676413682190769330650352556118446206807633891458737086699911671339445783395597841060759313199
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (37 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sso.taylor.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssopre.taylor.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							59ea3f9694bf580594ac07856903b0b658cceb3e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0032bee8eae582a0af3e3c54ff0d79daf5a2e96682aaa78defa10a93deb19725fdb68d4c4436904413845f320e4f17d18c1099720cb7261efc2236f3bb367996b90fae798940da8712c5581a52541462ffb87cb502d045eff140cc3cc95bde59e9757a713a74b585d56b0b20eedeb0a3ad97e88379d3ba907d515f3f2a010862a4a958f904e19d4736568b08e69b42fccc2ddafb429d032ff3aea245469252e208ff91b2b9f35e6cb04e9222d37a86037ac19c8b43ae7b4e9591570d87bc6f503ec744d244d7dae8c5e2328e25d0c9520d32c4608589b855fa75a3b5de3ab12d0fda51ada4a557b1efca5504d8ca7fa0e1188fa6db16152a157b8c98607361a418