*.sfr.com
- SFR -
Issued by CLASS 2 KEYNECTIS CA
About this certificate
This digital certificate with serial number 11:27:c7:f7:fd:cc:7b:a6:47:45:6e:f6:3f:64:06:70:5a:35 was issued on by KEYNECTIS.
This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
- Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)
SFR
Organization:
SFR
Country:
FR
KEYNECTIS
Organization:
KEYNECTIS
Country:
FR
This certificate has expire since
Certificate Details
Serial Number (hex): 11:27:c7:f7:fd:cc:7b:a6:47:45:6e:f6:3f:64:06:70:5a:35Serial Number (int): 1494445677165976491980055470742835062397493
Serial Number lenght: 141 bits, 18 octets
SubjectKeyId: af:59:39:55:11:d5:34:71:25:1e:8a:42:1f:ea:eb:fc:6d:0d:93:53
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99
Fingerprint (sha1): 7e:9b:9d:cf:47:97:1d:c1:b4:b8:d1:bf:00:0a:76:f9:36:cc:94:27
Fingerprint (sha256): 20:1f:25:46:35:07:af:24:78:a0:0a:33:7f:32:4a:8a:f9:39:72:bb:bb:4a:9c:92:6c:8f:21:32:1d:57:1d:e7
Revocation information
OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocspCRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl
Check the revocation status for certificate *.sfr.com
1
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.sfr.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA1 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
9 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.sfr.com
Other certificates including the domain name sfr.com
(limited to 100 certificates)
extra-prmfo.sfr.com
sso.sfr.com
zemel.sfr.com
mysfr.sfr.com
sun-admin.sfr.com
intra-zabbix-reseau.sfr.com
extra-sigma-sfrnco.sfr.com
extra-prmbo.sfr.com
extra-rcetao.sfr.com
campus.sfr.com
fgw-77251-18-c.fgw.fr.sfr.com
zepush.sfr.com
zemel.sfr.com
ipstd1ss1sm11.sfr.com
intra-sara.sfr.com
campus.sfr.com
*.pfv.private.sfr.com
sun-apps.sfr.com
fgw-910235-12-b.fgw.fr.sfr.com
zepush.sfr.com
*.pack.private.sfr.com
autodiscover.sfr.com
fgw-910235-7-a.fgw.fr.sfr.com
fgw-77251-22-b.fgw.fr.sfr.com
*.private.sfr.com
adrms.sfr.com
extra-sigma-sfrnco.sfr.com
fgw-910235-2-a.fgw.fr.sfr.com
*.private.sfr.com
intra-sfrnco.sfr.com
zemel.sfr.com
intra-sfrnco.sfr.com
campus.sfr.com
fgw-77251-22-c.fgw.fr.sfr.com
conf.sfr.com
intra-webdav.sfr.com
fgw-910235-1-b.fgw.fr.sfr.com
corporate.sfr.com
*.completel.private.sfr.com
extra-consofi.sfr.com
intra-aclserver.sfr.com
campus.sfr.com
fgw-910235-13-c.fgw.fr.sfr.com
sip.sfr.com
extra-sfrnco.sfr.com
*.sfr.com
zemel.sfr.com
fgw-77251-24-b.fgw.fr.sfr.com
wsaetv.sfr.com
wsaetv.sfr.com
fgw-910235-2-c.fgw.fr.sfr.com
fgw-910235-4-a.fgw.fr.sfr.com
apps.sfr.com
zepush.sfr.com
autodiscover.sfr.com
intra-sultan.sfr.com
sip03.sfr.com
extra-sultan.sfr.com
corporate.sfr.com
intra-sfrnco.sfr.com
autodiscover.sfr.com
autodiscover.sfr.com
fgw-910235-5-b.fgw.fr.sfr.com
extranet.sfr.com
legacy.sfr.com
intra-kara-direct.sfr.com
fgw-910235-7-b.fgw.fr.sfr.com
extra-sfosynchro.sfr.com
sun-apps.sfr.com
campus.sfr.com
www.sfr.com
campus.sfr.com
intra-sfrnco.sfr.com
actuinterne.sfr.com
corporate.sfr.com
pnp.fr.sfr.com
extra-sfrnco.sfr.com
campus.sfr.com
intra-zabbix-systeme.sfr.com
actuinterne.sfr.com
wsaetv-qlf.sfr.com
fgw-77251-17-a.fgw.fr.sfr.com
fgw-910235-8-c.fgw.fr.sfr.com
fgw-910235-2-b.fgw.fr.sfr.com
intra-pdcbios-ihmrc.sfr.com
fgw-910235-9-c.fgw.fr.sfr.com
fgw-910235-7-c.fgw.fr.sfr.com
qlf-apps.sfr.com
*.sfr.com
fgw-910235-12-c.fgw.fr.sfr.com
intra-sfrnco-pack.sfr.com
wsaetv-pre.sfr.com
autodiscover.sfr.com
fgw-910235-13-b.fgw.fr.sfr.com
*.thd.sfr.com
extra-sigma-sfrnco.sfr.com
smtp1.sfr.com
mysfr.sfr.com
*.xdn.sfr.com
*.thd.sfr.com
sso.sfr.com
zemel.sfr.com
mysfr.sfr.com
sun-admin.sfr.com
intra-zabbix-reseau.sfr.com
extra-sigma-sfrnco.sfr.com
extra-prmbo.sfr.com
extra-rcetao.sfr.com
campus.sfr.com
fgw-77251-18-c.fgw.fr.sfr.com
zepush.sfr.com
zemel.sfr.com
ipstd1ss1sm11.sfr.com
intra-sara.sfr.com
campus.sfr.com
*.pfv.private.sfr.com
sun-apps.sfr.com
fgw-910235-12-b.fgw.fr.sfr.com
zepush.sfr.com
*.pack.private.sfr.com
autodiscover.sfr.com
fgw-910235-7-a.fgw.fr.sfr.com
fgw-77251-22-b.fgw.fr.sfr.com
*.private.sfr.com
adrms.sfr.com
extra-sigma-sfrnco.sfr.com
fgw-910235-2-a.fgw.fr.sfr.com
*.private.sfr.com
intra-sfrnco.sfr.com
zemel.sfr.com
intra-sfrnco.sfr.com
campus.sfr.com
fgw-77251-22-c.fgw.fr.sfr.com
conf.sfr.com
intra-webdav.sfr.com
fgw-910235-1-b.fgw.fr.sfr.com
corporate.sfr.com
*.completel.private.sfr.com
extra-consofi.sfr.com
intra-aclserver.sfr.com
campus.sfr.com
fgw-910235-13-c.fgw.fr.sfr.com
sip.sfr.com
extra-sfrnco.sfr.com
*.sfr.com
zemel.sfr.com
fgw-77251-24-b.fgw.fr.sfr.com
wsaetv.sfr.com
wsaetv.sfr.com
fgw-910235-2-c.fgw.fr.sfr.com
fgw-910235-4-a.fgw.fr.sfr.com
apps.sfr.com
zepush.sfr.com
autodiscover.sfr.com
intra-sultan.sfr.com
sip03.sfr.com
extra-sultan.sfr.com
corporate.sfr.com
intra-sfrnco.sfr.com
autodiscover.sfr.com
autodiscover.sfr.com
fgw-910235-5-b.fgw.fr.sfr.com
extranet.sfr.com
legacy.sfr.com
intra-kara-direct.sfr.com
fgw-910235-7-b.fgw.fr.sfr.com
extra-sfosynchro.sfr.com
sun-apps.sfr.com
campus.sfr.com
www.sfr.com
campus.sfr.com
intra-sfrnco.sfr.com
actuinterne.sfr.com
corporate.sfr.com
pnp.fr.sfr.com
extra-sfrnco.sfr.com
campus.sfr.com
intra-zabbix-systeme.sfr.com
actuinterne.sfr.com
wsaetv-qlf.sfr.com
fgw-77251-17-a.fgw.fr.sfr.com
fgw-910235-8-c.fgw.fr.sfr.com
fgw-910235-2-b.fgw.fr.sfr.com
intra-pdcbios-ihmrc.sfr.com
fgw-910235-9-c.fgw.fr.sfr.com
fgw-910235-7-c.fgw.fr.sfr.com
qlf-apps.sfr.com
*.sfr.com
fgw-910235-12-c.fgw.fr.sfr.com
intra-sfrnco-pack.sfr.com
wsaetv-pre.sfr.com
autodiscover.sfr.com
fgw-910235-13-b.fgw.fr.sfr.com
*.thd.sfr.com
extra-sigma-sfrnco.sfr.com
smtp1.sfr.com
mysfr.sfr.com
*.xdn.sfr.com
*.thd.sfr.com
Certificate
The complete raw certificate details for *.sfr.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIEbzCCA1egAwIBAgISESfH9/3Me6ZHRW72P2QGcFo1MA0GCSqGSIb3DQEBBQUA MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM QVNTIDIgS0VZTkVDVElTIENBMB4XDTE0MDkwNTE2MzU0MloXDTE2MDkwNTE2MzU0 MlowLzELMAkGA1UEBhMCRlIxDDAKBgNVBAoUA1NGUjESMBAGA1UEAwwJKi5zZnIu Y29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqUqy2jwd6LJd7t qEiBzFXVYMID1Te8NEmP4oaHM1ZCEqIYFJtYVeoRGvZ4QnoxAQ7/tY3GcmvhDhl8 RTe1MCADJ4115DU4f210N/dM0rtPGKB5B50gcOA7g7v3wRpas2L/odaj4RZIUbpT cd6LBfr78jdJ5QcUZ271xll/uHKweefTMN0dS6JGJdEZknZQcCuXt7Z5r66XmOMD b9dtqbWi1zE5O+nZAvjRl6PDU6I9PdIvCYLrfGZ0EfWIk1tSrssWQIEu3QiZJal9 RC8rDd+aEAPaBDO8KpuqRyXseL45A8OTmHRroUBg8Z/nF963nGPsp9AutUtnG/LT UvNukQIDAQABo4IBcjCCAW4wCQYDVR0TBAIwADAOBgNVHQ8BAf8EBAMCBaAwHQYD VR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMBQGA1UdEQQNMAuCCSouc2ZyLmNv bTBPBgNVHR8ESDBGMESgQqBAhj5odHRwOi8vY3JsLXNzbC5jZXJ0aWZpY2F0Mi5j b20va2V5bmVjdGlzL2NsYXNzMmtleW5lY3Rpc2NhLmNybDBEBggrBgEFBQcBAQQ4 MDYwNAYIKwYBBQUHMAGGKGh0dHA6Ly9vY3NwLXNzbC5jZXJ0aWZpY2F0Mi5jb20v c3NsLW9jc3AwRQYDVR0gBD4wPDA6Bg0rBgEEAYGtWgIFAgUBMCkwJwYIKwYBBQUH AgEWG2h0dHA6Ly93d3cub3BlbnRydXN0LmNvbS9QQzAdBgNVHQ4EFgQUr1k5VRHV NHElHopCH+rr/G0Nk1MwHwYDVR0jBBgwFoAUABFB3zudO8u4osEzkqiBzOV955kw DQYJKoZIhvcNAQEFBQADggEBAHiac090AJnIQH4vEN2ZMRlHpoc5NosoFKdE3hR/ WWzItN+AYAlUb1HeG9trCB/+hrsNQJu5S1vEFlV5balGMiEuVbhHT08Lfv9AccGc tN2mIMS6yiYiANHjMLTsvFi0Z1Tph5a0BtyJbDkcsB4CaWRz57sUXGqTDMZBV2I6 cooC8XNxhnHlqSKlP96gHLVohdEQngC9nz5GOL9kyV1RLBGBxmgqBZUcZxJFTEgj VLzX30KnYDHXOAMxo449iguDqWdEDu5ZDYaG8jxG6Qw2+qN8wp7pHrFel8xXbgyv VyAHoqWhnFdmT9qMzuvixBcFp8TUVsEOODzSXiKwJZpOqE4= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dqUqy2jwd6LJd7tqEiB zFXVYMID1Te8NEmP4oaHM1ZCEqIYFJtYVeoRGvZ4QnoxAQ7/tY3GcmvhDhl8RTe1 MCADJ4115DU4f210N/dM0rtPGKB5B50gcOA7g7v3wRpas2L/odaj4RZIUbpTcd6L Bfr78jdJ5QcUZ271xll/uHKweefTMN0dS6JGJdEZknZQcCuXt7Z5r66XmOMDb9dt qbWi1zE5O+nZAvjRl6PDU6I9PdIvCYLrfGZ0EfWIk1tSrssWQIEu3QiZJal9RC8r Dd+aEAPaBDO8KpuqRyXseL45A8OTmHRroUBg8Z/nF963nGPsp9AutUtnG/LTUvNu kQIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 1494445677165976491980055470742835062397493 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-09-05 16:35:42 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-09-05 16:35:42 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'SFR' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.sfr.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26491591916553662412961237851268863593741500509322945933026493029967004436258591000021641224050595433487239320984829791996914813105185257933377745363743473900335449616873419714599349485619643805302489893307173898683458508903908411727845314360784437461274767366354335233420933833433645831472425394641268479405606880567918148787746390349595529442049869055059339070594178315837952055644762440225404353852387765064030236375684970766573126328358597425408556636713020729568025395137775423109763193219057353946037044276798152046236578262985463568387171524777697581968978834360314154806025921640612023210546988302871083314833 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (13 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.sfr.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) af59395511d53471251e8a421feaebfc6d0d9353 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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