*.app.vault.one
Issued by AlphaSSL CA - SHA256 - G2
About this certificate
This digital certificate with serial number 43:48:c3:bb:23:e8:26:07:6d:d5:f9:2a was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
Certificate Subject
CN=*.app.vault.one,OU=Domain Control Validated
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate has expire since
Certificate Details
Serial Number (hex): 43:48:c3:bb:23:e8:26:07:6d:d5:f9:2aSerial Number (int): 20823462630635034068915714346
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: 8f:50:36:2f:69:c8:b5:e7:22:b2:31:fb:f1:0a:44:48:c6:53:74:da
AuthorityKeyId: f5:cd:d5:3c:08:50:f9:6a:4f:3a:b7:97:da:56:83:e6:69:d2:68:f7
Fingerprint (sha1): 5f:7e:ee:47:d7:a3:69:a0:71:8f:cf:2f:35:c3:3a:2b:57:19:9a:7c
Fingerprint (sha256): 20:c5:fe:6b:d7:cc:cc:3f:28:2e:95:3c:11:3f:8f:9e:02:af:d3:bb:a8:07:0a:6e:72:fd:be:73:b7:f6:9e:1c
Issuing Certificate URL: http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt
Revocation information
OCSP Server: http://ocsp2.globalsign.com/gsalphasha2g2CRL Distribution Point: http://crl2.alphassl.com/gs/gsalphasha2g2.crl
Check the revocation status for certificate *.app.vault.one
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.app.vault.one
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.app.vault.one
app.vault.one
app.vault.one
Other certificates including the domain name vault.one
(limited to 100 certificates)
*.homolog.app.vault.one
ssl391718.cloudflaressl.com
app.vault.one
homolog.vault.one
vault.one
*.connect.vault.one
*.homolog.api.vault.one
ssl374116.cloudflaressl.com
ssl374114.cloudflaressl.com
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
*.app.vault.one
ssl374116.cloudflaressl.com
vault.one
*.app.vault.one
*.homolog.vault.one
ssl391718.cloudflaressl.com
ssl374116.cloudflaressl.com
*.vault.one
app.vault.one
*.vault.one
ssl391717.cloudflaressl.com
ssl391718.cloudflaressl.com
vault.one
ssl379498.cloudflaressl.com
app.vault.one
vault.one
homolog.vault.one
*.vault.one
*.connect.vault.one
homolog.vault.one
ssl374115.cloudflaressl.com
homolog.vault.one
*.vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
*.connect.vault.one
api.vault.one
homolog.vault.one
ssl391717.cloudflaressl.com
ssl379498.cloudflaressl.com
ssl374115.cloudflaressl.com
ssl379499.cloudflaressl.com
sni.cloudflaressl.com
ssl374116.cloudflaressl.com
app.vault.one
*.homolog.app.vault.one
connect.vault.one
*.homolog.vault.one
ssl379498.cloudflaressl.com
vault.one
ssl379500.cloudflaressl.com
ssl391717.cloudflaressl.com
cdn.vault.one
ssl374114.cloudflaressl.com
vault.one
ssl391716.cloudflaressl.com
ssl374116.cloudflaressl.com
connect.vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
app.vault.one
ssl374116.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl374115.cloudflaressl.com
app.vault.one
connect.vault.one
ssl374115.cloudflaressl.com
ssl374116.cloudflaressl.com
*.connect.vault.one
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl391716.cloudflaressl.com
ssl391718.cloudflaressl.com
app.vault.one
homolog.vault.one
vault.one
*.connect.vault.one
*.homolog.api.vault.one
ssl374116.cloudflaressl.com
ssl374114.cloudflaressl.com
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
*.app.vault.one
ssl374116.cloudflaressl.com
vault.one
*.app.vault.one
*.homolog.vault.one
ssl391718.cloudflaressl.com
ssl374116.cloudflaressl.com
*.vault.one
app.vault.one
*.vault.one
ssl391717.cloudflaressl.com
ssl391718.cloudflaressl.com
vault.one
ssl379498.cloudflaressl.com
app.vault.one
vault.one
homolog.vault.one
*.vault.one
*.connect.vault.one
homolog.vault.one
ssl374115.cloudflaressl.com
homolog.vault.one
*.vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
vault.one
ssl374114.cloudflaressl.com
*.app.vault.one
*.connect.vault.one
api.vault.one
homolog.vault.one
ssl391717.cloudflaressl.com
ssl379498.cloudflaressl.com
ssl374115.cloudflaressl.com
ssl379499.cloudflaressl.com
sni.cloudflaressl.com
ssl374116.cloudflaressl.com
app.vault.one
*.homolog.app.vault.one
connect.vault.one
*.homolog.vault.one
ssl379498.cloudflaressl.com
vault.one
ssl379500.cloudflaressl.com
ssl391717.cloudflaressl.com
cdn.vault.one
ssl374114.cloudflaressl.com
vault.one
ssl391716.cloudflaressl.com
ssl374116.cloudflaressl.com
connect.vault.one
ssl391718.cloudflaressl.com
ssl379498.cloudflaressl.com
app.vault.one
ssl374116.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl391718.cloudflaressl.com
ssl374115.cloudflaressl.com
app.vault.one
connect.vault.one
ssl374115.cloudflaressl.com
ssl374116.cloudflaressl.com
*.connect.vault.one
ssl391716.cloudflaressl.com
vault.one
ssl391718.cloudflaressl.com
ssl391716.cloudflaressl.com
Certificate
The complete raw certificate details for *.app.vault.one in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIGYDCCBUigAwIBAgIMQ0jDuyPoJgdt1fkqMA0GCSqGSIb3DQEBCwUAMEwxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEcyMB4XDTIwMDIyNzIxMjIxNFoXDTIyMDIy NzIxMjIxNFowPTEhMB8GA1UECxMYRG9tYWluIENvbnRyb2wgVmFsaWRhdGVkMRgw FgYDVQQDDA8qLmFwcC52YXVsdC5vbmUwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAw ggEKAoIBAQCjiHPsj/RIjbjvZ0HnCm3ZhSDBntNKX2FNAvt2dPZB0k1aqN0l0mC2 qOtT3Lxu522wYaQ66GzJ0QEP0eHBOMN664lbDnnUFM+BUz6zQ7YFOVXejvlf08kF 8cr6jroBQbM++0o2NgWXPYjgGT68CjzLby/jjdgM80Wu4H/yweXnWJMGdS0270TU zMUyMeEiL4o8dLnl02npTgTi1jyOqay6XoTG8hvQd8XC5r5u6GW4/s2B5CgM6GD9 OPEbda9cwcb/0G6hKPmfajLmOY+OEQNBrNootPFKnFbNWozQ38/ywK3KbHkJTvfO 4EVZ+Cfcs4LAwJm41L7NtYPFjTNlXUenAgMBAAGjggNPMIIDSzAOBgNVHQ8BAf8E BAMCBaAwgYkGCCsGAQUFBwEBBH0wezBCBggrBgEFBQcwAoY2aHR0cDovL3NlY3Vy ZTIuYWxwaGFzc2wuY29tL2NhY2VydC9nc2FscGhhc2hhMmcycjEuY3J0MDUGCCsG AQUFBzABhilodHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3NhbHBoYXNoYTJn MjBXBgNVHSAEUDBOMEIGCisGAQQBoDIBCgowNDAyBggrBgEFBQcCARYmaHR0cHM6 Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1Ud EwQCMAAwPgYDVR0fBDcwNTAzoDGgL4YtaHR0cDovL2NybDIuYWxwaGFzc2wuY29t L2dzL2dzYWxwaGFzaGEyZzIuY3JsMCkGA1UdEQQiMCCCDyouYXBwLnZhdWx0Lm9u ZYINYXBwLnZhdWx0Lm9uZTAdBgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIw HwYDVR0jBBgwFoAU9c3VPAhQ+WpPOreX2laD5mnSaPcwHQYDVR0OBBYEFI9QNi9p yLXnIrIx+/EKREjGU3TaMIIBfQYKKwYBBAHWeQIEAgSCAW0EggFpAWcAdgCkuQmQ tBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAXCIh1zBAAAEAwBHMEUCIC6e jwboZCxT9zJPJCxjgSM0W/29K5gGRa9dM+3AMm1vAiEAgoyfDyKJrGyNE460L3NK eYlgQnEiy2FIdHFU4QOsQBEAdQBvU3asMfAxGdiZAKRRFf93FRwR2QLBACkGjbII mjfZEwAAAXCIh1mJAAAEAwBGMEQCIBaVSKgySyjkrl62mg9T0IknPcsJf9RafwAm mhxYjVJ/AiBbC1IdrhuTeC8ooq3bkzyhETr7Ls8CBbNFqNWF7gvyBgB2AFGjsPX9 AXmcVm24N3iPDKR6zBsny/eeiEKaDf7UiwXlAAABcIiHXJMAAAQDAEcwRQIgWdTl N3qCgh1sH9683R2SvHZ8MvqAsSDc1E0cFHmnkHICIQCYPmQYxwIbMZqN6Ie33Hu9 c+RWJg4Dr9Uhhi/46dEqNjANBgkqhkiG9w0BAQsFAAOCAQEAuhs+sDPfoI6wtWr7 8K9uGX4pBuLIQ6YkBmrJwiKblcsX8ZMBmCs/iAJI6tGFmy9Ra4GfDdP+zoTX2IqB 7JPw/dm9iTBmnaoLXvDzhVV2GOmXaE5iuWOYPZPHoy3sXiVRyOk6Aa+vKRYah35R jJGLwFMcGxcTLw2yeY4u3ejpwA0MK39Bv0/Vy4gX/gAKcqaQneDt/KrFtf/XefSA pzk9LtWfNuL8ooori7EyQ2mtxEb+Oy4y/J6uLK1OokYp6aIujJQ+I94Js3DIW7CB g57oxFQ6NUru5DvIEEU/WwqYPYbOS1uvSfqsiT4DfkcIrPIGpR70zDGa5CWcjAcj 0KKWFA== -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4hz7I/0SI2472dB5wpt 2YUgwZ7TSl9hTQL7dnT2QdJNWqjdJdJgtqjrU9y8budtsGGkOuhsydEBD9HhwTjD euuJWw551BTPgVM+s0O2BTlV3o75X9PJBfHK+o66AUGzPvtKNjYFlz2I4Bk+vAo8 y28v443YDPNFruB/8sHl51iTBnUtNu9E1MzFMjHhIi+KPHS55dNp6U4E4tY8jqms ul6ExvIb0HfFwua+buhluP7NgeQoDOhg/TjxG3WvXMHG/9BuoSj5n2oy5jmPjhED QazaKLTxSpxWzVqM0N/P8sCtymx5CU73zuBFWfgn3LOCwMCZuNS+zbWDxY0zZV1H pwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 20823462630635034068915714346 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G2' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-27 21:22:14 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-02-27 21:22:14 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.app.vault.one' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20644131106989493177159962752250130555974590194278777627910301917877425025040406842633609769889568294017759067195188369669473874154917093379589759124913440244976267878982664578703181841973425722450845972058229072375855453305756937359331693526054134763725501593644079180203311035932026727014114482252862514465948611919956246189405958783380048182117067034445025866308837070531559342327997011309587190695472257460803982359345575160822834385738822440493333248707779101823280378105967642194959152379669943538885227678100788494372744411194123486870424240420685818867887242232136836935652585699743425163315983032850430379943 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (125 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure2.alphassl.com/cacert/gsalphasha2g2r1.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsalphasha2g2' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10.10 (Domain Validation Certificates Policy - AlphaSSL) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl2.alphassl.com/gs/gsalphasha2g2.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.app.vault.one' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'app.vault.one' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f5cdd53c0850f96a4f3ab797da5683e669d268f7 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) 8f50362f69c8b5e722b231fbf10a4448c65374da . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes) 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 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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