ecampus.erdf.fr

- ERDF -

Issued by CLASS 2 KEYNECTIS CA

About this certificate

This digital certificate with serial number 11:21:5f:68:62:ff:09:d1:05:4f:eb:df:4c:e5:f1:c2:ff:51 was issued on by KEYNECTIS.

With 3 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

ERDF

Organization: ERDF
Organization unit: Organization Validated SSL certificate
State / Province: PARIS
Locality: PARIS
Country: FR

KEYNECTIS

Organization: KEYNECTIS
Country: FR

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:5f:68:62:ff:09:d1:05:4f:eb:df:4c:e5:f1:c2:ff:51
Serial Number (int): 1492264997614670377571568803211189336342353
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 44:0d:b9:88:18:08:79:1e:0e:75:8d:b0:c1:b5:c3:ae:0a:6f:92:3f
AuthorityKeyId: 00:11:41:df:3b:9d:3b:cb:b8:a2:c1:33:92:a8:81:cc:e5:7d:e7:99

Fingerprint (sha1): a0:42:58:56:04:7a:d4:da:4c:05:82:b9:49:f2:b5:1e:0e:51:ce:6c
Fingerprint (sha256): 23:a2:66:8c:e5:23:ab:e4:23:44:64:71:03:2a:e0:c8:0f:42:6b:2d:e6:6e:d8:9d:b2:6a:55:3d:97:5a:17:23


Revocation information

OCSP Server: http://ocsp-ssl.certificat2.com/ssl-ocsp
CRL Distribution Point: http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl

Check the revocation status for certificate ecampus.erdf.fr

3

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ecampus.erdf.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ecampus.erdf.fr
ecampus-int.edf.fr
ecampus.edf.fr

Other certificates including the domain name erdf.fr

(limited to 100 certificates)
s02.noe.ldap.qualif.alpha.swb.enedis.fr
espace-client-collectivites.enedis.fr
espace-client-entreprises-rec-dmz.enedis.fr
espace-client-pprod.enedis.fr
sge-homologation2-b2b.erdf.fr
espace-client-connexion-pprod.erdf.fr
preiq-websso-gardian.edf.fr
zpl03748.zse.erdf.fr
api-lincs-qualif.enedis.fr
espace-client-entreprises-pprod.enedis.fr
noedmzplywdi001.intranet.edf.com
zed331b5.distribution.edf.fr
espace-client-qualif.enedis.fr
data.erdf.fr
s02.noe.ldap.qualif.alpha.swb.enedis.fr
ecampus.erdf.fr
sge.erdf.fr
fournisseursdenedis.enedis.fr
smartgrid-solenn.enedis.fr
bilan-electrique.erdf.fr
zpl03752.zse.erdf.fr
myaccess.myelectricnetwork.com
espace-client-connexion-perf.erdf.fr
api-lincs-perf.enedis.fr
pha.edf.com
data.erdf.fr
zpl03747.zse.erdf.fr
emm.erdf.fr
vpnzsa.edf.fr
fournisseursderdf-pp.erdf.fr
simm.sge-homologation.erdf.fr
zeq331ba.distribution.edf.fr
panorama.erdf.fr
enedis.fr
espace-client-pprod.enedis.fr
nomade.edf.fr
data.erdf.fr
websso-gardian.edf.fr
www.curde.enedis.fr
websso-gardian.edf.fr
espace-client-collectivites-perf.enedis.fr
espace-client-entreprises-perf.enedis.fr
collab.intranet.enedis.fr
ecampus.erdf.fr
espace-client-collectivites-pprod.enedis.fr
espace-client-entreprises.enedis.fr
vpnzsa.edf.fr
espace-client-rec-dmz.enedis.fr
ecampus.erdf.fr
preiq-websso-gardian.edf.fr
preiq-proxywebsso-gardian.edf.fr
enedis.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
api-lincs-rec-dmz.erdf.fr
s03.pcy.ldap.pprod.alpha.swb.enedis.fr
webmail.intranet.enedis.fr
websso-gardian.edf.fr
noedmzplywfe001.intranet.edf.com
espace-client-connexion-rec-dmz.erdf.fr
enedis.fr
espace-client-connexion-pprod.erdf.fr
odigo-pic.erdf.fr
data.erdf.fr
espace-client-collectivites-rec-zhb.enedis.fr
sge.erdf.fr
espace-client-pprod.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s03.pcy.ldap.qualif.alpha.swb.enedis.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
websso-gardian.edf.fr
pha.edf.com
ecampus.erdf.fr
bilan-electrique.erdf.fr
zer331b8.distribution.edf.fr
espace-client-connexion-rec-dmz.erdf.fr
simm.sge-homologation.erdf.fr
laruche.erdf.fr
s01.pcy.ldap.qualif.alpha.swb.enedis.fr
espace-client-connexion-rec-dmz.erdf.fr
camae.enedis.fr
espace-client-entreprises.enedis.fr
herakles-iq.erdfdistribution.fr
collab.intranet.edf.com
preiq-proxywebsso-gardian.edf.fr
s02.noe.ldap.pprod.alpha.swb.enedis.fr
datalake.erdf.fr
zer331ba.distribution.edf.fr
lincs-staging-pprod.enedis.fr
data.erdf.fr
webmail.intranet.edf.com
espace-client-rec-dmz.erdf.fr
espace-client-particuliers.enedis.fr
espace-client-entreprises.erdf.fr
pcydmzplywdi001.intranet.edf.com
pcydmzplywdi001.intranet.edf.com
vpnzsa2.edf.fr
nomade2020.edf.fr
zed331b4.distribution.edf.fr
panorama.erdf.fr
zer331b8.distribution.edf.fr

Certificate

The complete raw certificate details for ecampus.erdf.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIE9TCCA92gAwIBAgISESFfaGL/CdEFT+vfTOXxwv9RMA0GCSqGSIb3DQEBCwUA
MEAxCzAJBgNVBAYTAkZSMRIwEAYDVQQKEwlLRVlORUNUSVMxHTAbBgNVBAMTFENM
QVNTIDIgS0VZTkVDVElTIENBMB4XDTE3MDcwNDE0MjAxN1oXDTE4MDcwNTE0MjAx
N1owgYcxCzAJBgNVBAYTAkZSMQ4wDAYDVQQIDAVQQVJJUzEOMAwGA1UEBwwFUEFS
SVMxLzAtBgNVBAsMJk9yZ2FuaXphdGlvbiBWYWxpZGF0ZWQgU1NMIGNlcnRpZmlj
YXRlMQ0wCwYDVQQKDARFUkRGMRgwFgYDVQQDEw9lY2FtcHVzLmVyZGYuZnIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI7WlsWUokV06B8vWMy6HFk6O4
I2IPZrXZSd9MUPrEVE+DRLhQzUW4ExCNW7dSGRHfzYkPWen1bXqQjr9d78OJWB87
v0NmfsUj+T+oShhYCqqmlLIsXg9xID0GCeh0QjSoNHEeMLqkRjAPgm7j5uRFBi1T
bY1CyhMA2HbIBdRR1LvIXKQH6S6Ln+gcVQia4+FJONEP6V/EQdyAm4RTYLYG1dXI
9ALYQn5/3KUEcc78U8MNqCQcUVgQuNkgreai8vxvM4IPwhbbscwPrsBKwIjDxBwx
HjNrw8D7K5C036Zlm9sKU1EHbHO/Y2W7iaw5gOzl2OzPZsi5q9K0m1nTeuTtAgMB
AAGjggGfMIIBmzAMBgNVHRMBAf8EAjAAMA4GA1UdDwEB/wQEAwIFoDAdBgNVHSUE
FjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwPgYDVR0RBDcwNYIPZWNhbXB1cy5lcmRm
LmZyghJlY2FtcHVzLWludC5lZGYuZnKCDmVjYW1wdXMuZWRmLmZyME8GA1UdHwRI
MEYwRKBCoECGPmh0dHA6Ly9jcmwtc3NsLmNlcnRpZmljYXQyLmNvbS9rZXluZWN0
aXMvY2xhc3Mya2V5bmVjdGlzY2EuY3JsMEQGCCsGAQUFBwEBBDgwNjA0BggrBgEF
BQcwAYYoaHR0cDovL29jc3Atc3NsLmNlcnRpZmljYXQyLmNvbS9zc2wtb2NzcDBF
BgNVHSAEPjA8MDoGDSsGAQQBga1aAgUCBQEwKTAnBggrBgEFBQcCARYbaHR0cDov
L3d3dy5vcGVudHJ1c3QuY29tL1BDMB0GA1UdDgQWBBREDbmIGAh5Hg51jbDBtcOu
Cm+SPzAfBgNVHSMEGDAWgBQAEUHfO507y7iiwTOSqIHM5X3nmTANBgkqhkiG9w0B
AQsFAAOCAQEAUR9Pi7maZlr0XtF0MvMJSMnblQz4PndVmRNV0YvvFlOrzOfsDuMm
w5naJ36yC2KD4DpNpjUgBT1FXpMuu/zMEfw4AL9nSo4g/JlMJ9ZdjTS8DyTzM8KH
6vOQfrzmTb4hDx497Q+EezfUCHd+H2PduCkH8czGbXgU80GKJX9w3lXfP+pRvEW9
ZR75c/fbvmLZ3/AoIwHPDxwLG0VMHqamqQKCmOEX9gvuYXSchUW6Zhd7OI0hL7ZA
gjGVTWIOCChfzlSaDJ875MNtSFZhAwfDmo1sVHoXwNQ/tKbkMluEZUA5gjfyffXl
PHaRLBuw1O+Zya8yhRfuHpa+233rukGYTg==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO1pbFlKJFdOgfL1jMuh
xZOjuCNiD2a12UnfTFD6xFRPg0S4UM1FuBMQjVu3UhkR382JD1np9W16kI6/Xe/D
iVgfO79DZn7FI/k/qEoYWAqqppSyLF4PcSA9BgnodEI0qDRxHjC6pEYwD4Ju4+bk
RQYtU22NQsoTANh2yAXUUdS7yFykB+kui5/oHFUImuPhSTjRD+lfxEHcgJuEU2C2
BtXVyPQC2EJ+f9ylBHHO/FPDDagkHFFYELjZIK3movL8bzOCD8IW27HMD67ASsCI
w8QcMR4za8PA+yuQtN+mZZvbClNRB2xzv2Nlu4msOYDs5djsz2bIuavStJtZ03rk
7QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492264997614670377571568803211189336342353
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KEYNECTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CLASS 2 KEYNECTIS CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-07-04 14:20:17 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-07-05 14:20:17 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Organization Validated SSL certificate'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'ERDF'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ecampus.erdf.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 25364733119824587792357411028879988437394039433661889570174243210401891222351041341903795664621709244575388753096998712368024108588037605097558701337319099437818008108497582100737120216418111368991843499371150973620358735700315566413939982739849454202946100227791111675003277294807175977254583482103332983534438983841642036402070069477721460910070599846411008779467645920158051563416341986350775646288243871085584203060599750740948521165565218648008474783551890807778862280444289611902957673792630681387368488028055026176030990490891785900981424173030656964753808675097232814900948589233624569006269132684498204026093
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecampus.erdf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecampus-int.edf.fr'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecampus.edf.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (72 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl-ssl.certificat2.com/keynectis/class2keynectisca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp-ssl.certificat2.com/ssl-ocsp'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.22234.2.5.2.5.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.opentrust.com/PC'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							440db9881808791e0e758db0c1b5c3ae0a6f923f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 001141df3b9d3bcbb8a2c13392a881cce57de799
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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