dosis.salud.madrid.org

- CONSEJERIA DE SANIDAD DE LA COMUNIDAD DE MADRID -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 16:a5:9c:b1:ed:34:e6:06:b0:58:fe:7e:39:29:a1:9f was issued on by Entrust, Inc..

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CONSEJERIA DE SANIDAD DE LA COMUNIDAD DE MADRID

Organization: CONSEJERIA DE SANIDAD DE LA COMUNIDAD DE MADRID
Locality: Madrid
Country: ES

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 16:a5:9c:b1:ed:34:e6:06:b0:58:fe:7e:39:29:a1:9f
Serial Number (int): 30102923041621228185922629681187234207
Serial Number lenght: 125 bits, 16 octets

SubjectKeyId: 3c:97:a0:6e:39:f1:62:9a:aa:e2:af:fe:c1:d9:8c:b6:63:fe:83:f8
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): d9:43:e1:48:ca:db:90:92:d3:6f:cd:10:5b:c7:ea:f0:42:46:fb:3f
Fingerprint (sha256): 1f:b1:e4:56:4d:8e:77:dc:dd:da:42:f8:82:5e:f5:ac:18:b0:2a:51:1c:58:ed:cd:bf:f1:91:0c:e0:ff:57:e0

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate dosis.salud.madrid.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for dosis.salud.madrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

dosis.salud.madrid.org

Other certificates including the domain name madrid.org

(limited to 100 certificates)
estadisticas.madrid.org
h12oenigmapre.salud.madrid.org
formacion.madrid.org
gestionesytramites.madrid.org
HTAJCARRUSEL.salud.madrid.org
jusmadrid.madrid.org
agfaeihupacsp.salud.madrid.org
*.precompartimoss.madrid.org
pvoz-serviber.val.madrid.org


educa.madrid.org
subversion01.madrid.org
desarrollo.madrid.org

C4-CPD1-SUBSCRIBER-1.MADRID.ORG
grabadorllamadas1.madrid.org
*.educa.madrid.org
hflrrgis004.salud.madrid.org
intranet.madrid.org
raices.madrid.org
sgie.madrid.org
*.educa2.madrid.org
ar.madrid.org
sts.madrid.org
efidelius.desa.madrid.org
grabadorllamadas1.madrid.org
ar.madrid.org
nx02atlasval.madrid.org
citrix.madrid.org
*.remotos.madrid.org
nx02integrapre.madrid.org
servicioreps.madrid.org
PVOZ_INTEGRACION.VAL.MADRID.ORG
INSTRUCCIONESPREVIAS.SALUD.MADRID.ORG
gestiona.madrid.org
FINVESTIGACION.MADRID.ORG
PVOZ-INFORMES.VAL.MADRID.ORG
icmqcmsap2.madrid.org
PVOZ-SERVIBER.MADRID.ORG
pvoz-serviber.madrid.org
correoweb.madrid.org
valintranet.madrid.org
sso.sgie.madrid.org
pasarela.salud.madrid.org
*.educa.madrid.org
mail.madrid.org
sctewspruebas.madrid.org
hryciscv.salud.madrid.org

formacion.madrid.org
sedejudicial.madrid.org
SSO.SGIE.MADRID.ORG
desjusmadrid.madrid.org
c11-cpd2-sivt-sub.madrid.org
nexefpiq01.madrid.org
*.centrosdeformacion.empleo.madrid.org
network-login.madrid.org
desarrollo.madrid.org
PVOZ-INTEGRACION.VAL.MADRID.ORG
*.educa.madrid.org
certpasarela.salud.madrid.org
pvoz-informes.val.madrid.org
ctfinvestigacion.madrid.org
jusvalwebservices.madrid.org
imap.educa.madrid.org
endoviewhcsc.salud.madrid.org
dosis.salud.madrid.org
agfaeivnacsp.salud.madrid.org
c5-huph-subscriber-1.madrid.org
valraices.madrid.org
nexefpiq01.madrid.org
aulvirtual.educa.madrid.org

jusmadrid.madrid.org
C5-HUPH-SUBSCRIBER-1.MADRID.ORG
nx02integrapro.madrid.org
sts.madrid.org
aulavirtual2.educa.madrid.org
pasarela.salud.madrid.org
subversion01.madrid.org
C4-HGUGM-PUBLISHER.MADRID.ORG
hflrsaps004.salud.madrid.org
prodsanidad1.madrid.org
gdmm.madrid.org
sie.madrid.org
gdmm-consola.madrid.org
nexefahqs01.madrid.org
nexefposcvs01.madrid.org
jusmadrid.madrid.org
estadisticas.madrid.org

wowza01.madrid.org
gestionesytramites.madrid.org
faxvirtual.madrid.org
*.madrid.org
EDOCWEB.MADRID.ORG
edocweb.madrid.org
nexefahds01.madrid.org

Certificate

The complete raw certificate details for dosis.salud.madrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgIQFqWcse005gawWP5+OSmhnzANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDAzMjExNDMwMzdaFw0yNTA0MDcxNDMwMzZaMHkxCzAJBgNVBAYTAkVTMQ8wDQYD
VQQHEwZNYWRyaWQxODA2BgNVBAoTL0NPTlNFSkVSSUEgREUgU0FOSURBRCBERSBM
QSBDT01VTklEQUQgREUgTUFEUklEMR8wHQYDVQQDExZkb3Npcy5zYWx1ZC5tYWRy
aWQub3JnMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRgJBLeM2RVB
oS0/D6zqVpxooNBINWi52HDU9YYVzX1hYTyliXosEql+1GXr0/0wkuHd5n6i38V8
MIhWfmBIybCtE4kiwEwzS8dVmMr7i7Cd5AObVyQpzBDZ2nyxBbbAGOYyfDlRg6PU
KtQnvLBHXUKPCHVsDlIrjpcwxoyWyDpCUPXOknONd/QXU6yC9FsSesNRYiQ8OWWA
5ZipF71IWIMn/g3+q1E3WqWlvkWtUJrs2bJc4UgBma9huy3vPoPM8mhb8ftOuDxS
MF7QpizL1xenrtff762y257p49QQrahuAQDYK3h7S2YvD0thx6wvlK80oz7+/xkF
jgK5P9olXQIDAQABo4IBbTCCAWkwDAYDVR0TAQH/BAIwADAdBgNVHQ4EFgQUPJeg
bjnxYpqq4q/+wdmMtmP+g/gwHwYDVR0jBBgwFoAUgqJwdN28Uz/Pe9T3zX+nYMYK
TL8waAYIKwYBBQUHAQEEXDBaMCMGCCsGAQUFBzABhhdodHRwOi8vb2NzcC5lbnRy
dXN0Lm5ldDAzBggrBgEFBQcwAoYnaHR0cDovL2FpYS5lbnRydXN0Lm5ldC9sMWst
Y2hhaW4yNTYuY2VyMDMGA1UdHwQsMCowKKAmoCSGImh0dHA6Ly9jcmwuZW50cnVz
dC5uZXQvbGV2ZWwxay5jcmwwIQYDVR0RBBowGIIWZG9zaXMuc2FsdWQubWFkcmlk
Lm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUF
BwMCMBMGA1UdIAQMMAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUAMA0G
CSqGSIb3DQEBCwUAA4IBAQBoziGSiAzOBTa86+3J4KX6DaUQR9+DrlGF7CtIyLnM
+XodB1uqBlfXxvgZyqXBB82Ja9CnfTOcUBZYH0lydL6bb+bQozwNR+R/LSDs2fBZ
3W9iEtw8zZxTmeGrXsrdjfY8i1sekziO7OnjtMEVIIJvRyL7sZBY2tbrdxgQln+p
pbH4JWM+GT02LfRsC6I4Sd8wdvvUuC2vwV5iIreTHhS88hJ7ty3o+XFzmY08iGQk
ewGGG2P+K4sSYa30u/j01OF2bVzNNYmERWapFN4/0x/cUmAHpCzsEkhsxvNwkGot
7fSCl+LRFBRJgPDGM8O2aNT7wJthzU5VQK4qEQA9orYT
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRgJBLeM2RVBoS0/D6zq
VpxooNBINWi52HDU9YYVzX1hYTyliXosEql+1GXr0/0wkuHd5n6i38V8MIhWfmBI
ybCtE4kiwEwzS8dVmMr7i7Cd5AObVyQpzBDZ2nyxBbbAGOYyfDlRg6PUKtQnvLBH
XUKPCHVsDlIrjpcwxoyWyDpCUPXOknONd/QXU6yC9FsSesNRYiQ8OWWA5ZipF71I
WIMn/g3+q1E3WqWlvkWtUJrs2bJc4UgBma9huy3vPoPM8mhb8ftOuDxSMF7QpizL
1xenrtff762y257p49QQrahuAQDYK3h7S2YvD0thx6wvlK80oz7+/xkFjgK5P9ol
XQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 30102923041621228185922629681187234207
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 14:30:37 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-07 14:30:36 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONSEJERIA DE SANIDAD DE LA COMUNIDAD DE MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'dosis.salud.madrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24880798291089611512835819156552422511649560851534412370509811936106667607287318744482974208667383629953091318647965511000309136884768720330331761871697693296216110823330428625851785284640181295021315201659677958045839872296903408496756026157151484171401703489084429094331112527562949696402632660519335392051318477003083800872073042824628960662869081438028880054086335488133574633825433723675418811118139177860258521458874415298688504490027146186007613436881117169965951371257399955923391765293217658880451025539481646273992245044474365071383976988200998386215171057543537331860650651926667926350731227256501697127773
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3c97a06e39f1629aaae2affec1d98cb663fe83f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'dosis.salud.madrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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