vpn-uk.dechra.com
Issued by GlobalSign RSA DV SSL CA 2018
About this certificate
This digital certificate with serial number 7e:2f:d1:3e:63:42:4e:b7:d4:d1:9e:e4 was issued on by GlobalSign nv-sa.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=vpn-uk.dechra.com,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 7e:2f:d1:3e:63:42:4e:b7:d4:d1:9e:e4Serial Number (int): 39052918876456784266049724132
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: e0:c1:6b:c2:3c:f2:51:03:9e:97:0b:8f:e5:31:03:2c:d8:3c:32:d4
AuthorityKeyId: 81:80:d6:28:79:35:4a:5b:79:35:89:39:8f:12:17:6e:11:7b:2c:11
Fingerprint (sha1): 26:d0:93:1a:68:50:9f:c7:55:16:c9:f5:53:e5:46:4e:9c:9a:be:b6
Fingerprint (sha256): 1f:57:12:f8:54:d2:32:9c:9e:15:d5:d5:24:50:60:73:a0:10:97:6a:4a:07:c8:7b:de:54:dc:53:0a:ad:f3:4d
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsrsadvsslca2018CRL Distribution Point: http://crl.globalsign.com/gsrsadvsslca2018.crl
Check the revocation status for certificate vpn-uk.dechra.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for vpn-uk.dechra.com
Public Key Algorithm
RSA
Key Size
4096
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
vpn-uk.dechra.com
Other certificates including the domain name dechra.com
(limited to 100 certificates)
webmail.dechra.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
USMS0006.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
dechra.com
www.highq.com
www.highq.com
www.highq.com
brand.dechra.com
www.highq.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
sip.dechra.com
www.highq.com
Projects.dechra.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ibercliente.dechra.com
www.highq.com
appletest.dechra.com
ibercliente.dechra.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
citrix.dechra.com
www.highq.com
sip.dechra.com
owncloud.dechra.com
dechra.com
www.highq.com
academy.dechra.com
www.highq.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
herd.dechra.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-us.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thrivefinancially.dechra.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
USMS0006.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
dechra.com
www.highq.com
www.highq.com
www.highq.com
brand.dechra.com
www.highq.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
sip.dechra.com
www.highq.com
Projects.dechra.com
*.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
ibercliente.dechra.com
www.highq.com
appletest.dechra.com
ibercliente.dechra.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
mail.dechra.com
www.highq.com
vpn-uk.dechra.com
www.highq.com
www.highq.com
www.highq.com
*.dechra.com
citrix.dechra.com
www.highq.com
sip.dechra.com
owncloud.dechra.com
dechra.com
www.highq.com
academy.dechra.com
www.highq.com
brand.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
herd.dechra.com
www.highq.com
www.highq.com
www.highq.com
share.dechra.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
vpn-us.dechra.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
crmdk.dechra.com
www.highq.com
www.highq.com
www.highq.com
www.highq.com
thrivefinancially.dechra.com
Certificate
The complete raw certificate details for vpn-uk.dechra.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIF8jCCBNqgAwIBAgIMfi/RPmNCTrfU0Z7kMA0GCSqGSIb3DQEBCwUAMFAxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H bG9iYWxTaWduIFJTQSBEViBTU0wgQ0EgMjAxODAeFw0xOTExMjUxMjQ2MjFaFw0y MjAxMTExODEzMDFaMD8xITAfBgNVBAsTGERvbWFpbiBDb250cm9sIFZhbGlkYXRl ZDEaMBgGA1UEAxMRdnBuLXVrLmRlY2hyYS5jb20wggIiMA0GCSqGSIb3DQEBAQUA A4ICDwAwggIKAoICAQCdSuRp0+w9TM5MkaNVbYcGYwKGhJTZ84okd5OVBioUWXzT Ysa7AdFuUZk+s64sddWi8hsT+Ll5UdzFuLhYo3TN92Z9DQs1x+XtusP7rJ+OVAAj GewyxwLmGPup14fd2y/+xiHFPX8mm7cNmTi8/Oa/7TyB+uPPKoj2MVwM/56H9Gnb C52Jk11MtoWfInR64lc39LXRuRTdbMGDD0CgQj7f5QEfv6WOrbCNnPf8Qsk3j3le wacbniPoLAKiNCqAR0L8H5XAlRYeE8aSqKcv3aoq6mYeNIO6Fpo/BgZQ+bqzM2AZ x+n+OpmQSR5VeXSP9T38cFsaVYx7NxQfbxz3bYE+V/kpFg0cKTPp3kAM85rYyVyR OGwhraxzOlf/G1BlIuRsLrSY4rJ1kcBMQrb/m4YUh1yFK+GSKYUPESRr+H8aQGwP tHmLSb2nJB3PqQd6/jLVJXPbiu+PjOW2gxky96IQNdzZhBISA4PiYz8xYl/o0pMu BCTfkgaB+eCFu8WWyyFL2NzV1ZvLdKusB2y7Ojm4FsTh3VcnBV2IPNM8f1ij/Z8+ JMBFEGwz3q4nOE6mIAs/ZDnWHnO0CKBP5CGbGxkhCDR5ZBxlKu5NnSbsGWmR7mxA oudbCS1MApeNZny2VQk95sdVEywraFkwBx6Cy+WYldGzEGxUyrhTWMGNpXslewID AQABo4IB2zCCAdcwDgYDVR0PAQH/BAQDAgWgMIGOBggrBgEFBQcBAQSBgTB/MEQG CCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2NhY2VydC9n c3JzYWR2c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29jc3AuZ2xv YmFsc2lnbi5jb20vZ3Nyc2FkdnNzbGNhMjAxODBWBgNVHSAETzBNMEEGCSsGAQQB oDIBCjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9y ZXBvc2l0b3J5LzAIBgZngQwBAgEwCQYDVR0TBAIwADA/BgNVHR8EODA2MDSgMqAw hi5odHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzcnNhZHZzc2xjYTIwMTguY3Js MBwGA1UdEQQVMBOCEXZwbi11ay5kZWNocmEuY29tMB0GA1UdJQQWMBQGCCsGAQUF BwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBSBgNYoeTVKW3k1iTmPEhduEXssETAd BgNVHQ4EFgQU4MFrwjzyUQOelwuP5TEDLNg8MtQwEwYKKwYBBAHWeQIEAwEB/wQC BQAwDQYJKoZIhvcNAQELBQADggEBAKMnK1KMGDdOeRryCVaDUBAIuIbMwKj4Q6Hh EWKbjMOjTibUfDO6uqOqdz76jcVBESa0YENsH9U5KSxPF4DsThtV4KUDkYMeajZH v1IElcv9jXuXGCSxmPI8KZ/47c9Tb68CW2kyemZxDSyAM4IhHK+AvgqzMGKbs8Id AvbQjUj7vA0CqlzxhkE6sZB7fQ5/InxeppO5Rf8F9Q0tTAhdoTBqia7qPVT7sZW1 u6lgY58XsD1nLZbW0zNeYppAmHBjSOdrq2KlEGyGqPZN4G0mtJzo6JNZbfR6/Ngw 01NRUC6nUF1WoOrUNsDfBwoqRv0GMYYLarhWgFvpLE6aoaCeDE8= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnUrkadPsPUzOTJGjVW2H BmMChoSU2fOKJHeTlQYqFFl802LGuwHRblGZPrOuLHXVovIbE/i5eVHcxbi4WKN0 zfdmfQ0LNcfl7brD+6yfjlQAIxnsMscC5hj7qdeH3dsv/sYhxT1/Jpu3DZk4vPzm v+08gfrjzyqI9jFcDP+eh/Rp2wudiZNdTLaFnyJ0euJXN/S10bkU3WzBgw9AoEI+ 3+UBH7+ljq2wjZz3/ELJN495XsGnG54j6CwCojQqgEdC/B+VwJUWHhPGkqinL92q KupmHjSDuhaaPwYGUPm6szNgGcfp/jqZkEkeVXl0j/U9/HBbGlWMezcUH28c922B Plf5KRYNHCkz6d5ADPOa2MlckThsIa2sczpX/xtQZSLkbC60mOKydZHATEK2/5uG FIdchSvhkimFDxEka/h/GkBsD7R5i0m9pyQdz6kHev4y1SVz24rvj4zltoMZMvei EDXc2YQSEgOD4mM/MWJf6NKTLgQk35IGgfnghbvFlsshS9jc1dWby3SrrAdsuzo5 uBbE4d1XJwVdiDzTPH9Yo/2fPiTARRBsM96uJzhOpiALP2Q51h5ztAigT+QhmxsZ IQg0eWQcZSruTZ0m7Blpke5sQKLnWwktTAKXjWZ8tlUJPebHVRMsK2hZMAcegsvl mJXRsxBsVMq4U1jBjaV7JXsCAwEAAQ== -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 39052918876456784266049724132 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA DV SSL CA 2018' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-11-25 12:46:21 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-01-11 18:13:01 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vpn-uk.dechra.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 641697609623921286096139135440384989095430268495553466718989131414982071898939180436665710030055320152749630641349020329300913175943089100217089027218721034843950878945782175589221501929031203713646389657524545864241652506844906405481822415446496761629905460433745473749602439514059728368155861034421615947533619913465300331946998915517520322122787677729895853402508585183795842811265041814161194596757000779556987588612931427861958670712406692660850228833823001066132644777209197576228203086143767049090556541708612773969458565909398856629561187375789384538720465998092766940555511249690404528160162982299308248981264965436846849847896833437141047742250733470624117771931346045312920393213938730339525078426947835866054638524621630668876148380512812640353367750404841746675391423075836130652554834764444616745656987623398667655724194708464395105670574976303701841864151797339909253314429960877734611369211342888556208979812397795374278895347003420267282606405683798877579432700595084492795866223766888765522970707297721271627713017530763206549868423429161173738700945276709340449407945544320850999976556478107822008811773588322698409049515096784713305695466225913952925394917268858703982001632827919297568037577567403752583344104827 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsadvsslca2018.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsadvsslca2018' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsadvsslca2018.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vpn-uk.dechra.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8180d62879354a5b793589398f12176e117b2c11 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) e0c16bc23cf251039e970b8fe531032cd83c32d4 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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