clearpass.whitworth.edu

- Whitworth University -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 47:c2:9c:26:05:17:49:ae:d1:8c:8b:8b was issued on by GlobalSign nv-sa.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Whitworth University

Organization: Whitworth University
State / Province: Washington
Locality: Spokane
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 47:c2:9c:26:05:17:49:ae:d1:8c:8b:8b
Serial Number (int): 22208704696835183314811521931
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: a5:ed:3d:81:bf:68:70:38:7d:9d:1c:ec:8f:79:6f:ff:89:71:72:55
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): ff:98:41:00:43:d5:8c:c0:01:aa:f7:0c:f0:43:d3:be:4c:a7:b3:ba
Fingerprint (sha256): 20:a2:74:3d:5b:9d:c5:13:8a:a1:0f:38:9a:94:69:17:f8:d2:74:21:20:e1:bc:0c:58:2a:80:e3:d8:aa:57:1f

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate clearpass.whitworth.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for clearpass.whitworth.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

clearpass.whitworth.edu

Other certificates including the domain name whitworth.edu

(limited to 100 certificates)
cluster3.technolutions.net
cluster3.technolutions.net
blackboard.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
digitalcommons.whitworth.edu
nextcatalog.whitworth.edu
cluster3.technolutions.net
*.whitworth.edu
cluster3.technolutions.net
editcatalog.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
connect.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
nextcatalog.whitworth.edu
cluster3.technolutions.net
digitalcommons.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
connect.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
digitalcommons.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
apiprod.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
apply.whitworth.edu
cluster3.technolutions.net
clearpass.whitworth.edu
cluster3.technolutions.net
radius.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
serve.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
learn.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
*.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
us-east-1-san2.blackboard.com
us-east-1-san2.blackboard.com
cluster3.technolutions.net
connect.whitworth.edu
digitalcommons.whitworth.edu
*.whitworth.edu
cluster3.technolutions.net
us-east-1-san2.blackboard.com
cluster3.technolutions.net
ccm1-ms.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
www.whitworth.edu
serve.whitworth.edu
*.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
news.whitworth.edu
cluster3.technolutions.net
mail.whitworth.edu
libguides.whitworth.edu
cluster3.technolutions.net
libguides.whitworth.edu
apply.whitworth.edu
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net
cluster3.technolutions.net

Certificate

The complete raw certificate details for clearpass.whitworth.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIMR8KcJgUXSa7RjIuLMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yNDAxMzAyMjI0MjFaFw0y
NTAzMDIyMjI0MjBaMHUxCzAJBgNVBAYTAlVTMRMwEQYDVQQIEwpXYXNoaW5ndG9u
MRAwDgYDVQQHEwdTcG9rYW5lMR0wGwYDVQQKExRXaGl0d29ydGggVW5pdmVyc2l0
eTEgMB4GA1UEAxMXY2xlYXJwYXNzLndoaXR3b3J0aC5lZHUwggEiMA0GCSqGSIb3
DQEBAQUAA4IBDwAwggEKAoIBAQDioXohd5d3ZXuyHluiOgKB6gxdYCjRiXZXebIM
ATZsX+hA2PxFjJI1z5x5yUEXKt1ie5+VJSKN40fjcxLp3LZG7tLkpPE7SD5Y4uyB
Dr1oKId8Vp81YDlIbB7x5+1sO0i0XyIgVZ3s6eR3OZPsFmNLLfan3uxUKlDuqZeb
rtQiwE8GyZtdyfP8wkxx0/SII898Tz8I0FUYqnZs+igY+13j3ycb7TS50mDvb8x6
F1QeJyfVwIZLoBQ6jk6qvKhRjLR4GLuxnAqag/aQQ70r/EEQdaAfneQqjJKulMnY
gugBoRXhv6x3ZYttflvSHBYhGf1LAlp4TAHwlI7wcabBm4ohAgMBAAGjggHkMIIB
4DAOBgNVHQ8BAf8EBAMCBaAwDAYDVR0TAQH/BAIwADCBjgYIKwYBBQUHAQEEgYEw
fzBEBggrBgEFBQcwAoY4aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNl
cnQvZ3Nyc2FvdnNzbGNhMjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3Nw
Lmdsb2JhbHNpZ24uY29tL2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkr
BgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5j
b20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMD8GA1UdHwQ4MDYwNKAyoDCGLmh0dHA6
Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5jcmwwIgYDVR0R
BBswGYIXY2xlYXJwYXNzLndoaXR3b3J0aC5lZHUwHQYDVR0lBBYwFAYIKwYBBQUH
AwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LNeGeo3m+PJI2I8YcDArPrMB0G
A1UdDgQWBBSl7T2Bv2hwOH2dHOyPeW//iXFyVTATBgorBgEEAdZ5AgQDAQH/BAIF
ADANBgkqhkiG9w0BAQsFAAOCAQEAegJnPuUGX+QN0reO9QqcaTmsLxZroJW0g6s0
mib4NRGNPdMh4zPn2+z3xLoMTepudTd3V85iKI93L3YnOXZ/mmuUKphfc2NCPcNU
/LEXgD8sP75putLADWdKg+re8qDP6taHBo1mah6PSFo9OwerBKZdzERV4egxRvqL
AZH56k6DXpwPoY69GjHRFPfTKlNuKPCqaXXhuO/X3WDT5c+CeWDHtGfvg6IVvxob
b8LzyKNGWGHzCXgqOSeLv3+Tdme4/oAqDlsJEoYUvhWHg1lRcbsOvmzbu1i29YIo
heNYRr4A8BxtaG+wPKJ7iEe3qR77VfTz7Qyws57ZsZ3ezEqbvQ==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qF6IXeXd2V7sh5bojoC
geoMXWAo0Yl2V3myDAE2bF/oQNj8RYySNc+ceclBFyrdYnuflSUijeNH43MS6dy2
Ru7S5KTxO0g+WOLsgQ69aCiHfFafNWA5SGwe8eftbDtItF8iIFWd7OnkdzmT7BZj
Sy32p97sVCpQ7qmXm67UIsBPBsmbXcnz/MJMcdP0iCPPfE8/CNBVGKp2bPooGPtd
498nG+00udJg72/MehdUHicn1cCGS6AUOo5OqryoUYy0eBi7sZwKmoP2kEO9K/xB
EHWgH53kKoySrpTJ2ILoAaEV4b+sd2WLbX5b0hwWIRn9SwJaeEwB8JSO8HGmwZuK
IQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 22208704696835183314811521931
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-01-30 22:24:21 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-02 22:24:20 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Washington'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Spokane'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Whitworth University'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'clearpass.whitworth.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28609484234859096645149395084563898083863483203515462227368865840861800547084044096293625060714051298647236273132395018343665423164230234123432211410622471298590910071262383864181754448046006953341954282342226584908075050212354900384906784795895181679186733093535571527318039206226404409935733701814502857105917712013284100665882020627065441933197077024545613204136506898360776024874542146238044658927587955577700440627151263149824490255674989974877550516850934965494349272754593800143554544332141343652125676585924216349939727728594439426423746744830743331989423501933691008773425233392186739677297354029410392181281
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (27 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'clearpass.whitworth.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							a5ed3d81bf6870387d9d1cec8f796fff89717255
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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