mail.aardvarktactical.com

- Aardvark Tactical Inc -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 08:37:4e:38:e5:e5:46:d8:ab:c9:cd:2d:dd:10:e7:fe was issued on by DigiCert Inc.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: ex-05 The domain SHOULD NOT have a bare public suffix (awslabs certlint)

Aardvark Tactical Inc

Organization: Aardvark Tactical Inc
Organization unit: IT
State / Province: California
Locality: La Verne
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 08:37:4e:38:e5:e5:46:d8:ab:c9:cd:2d:dd:10:e7:fe
Serial Number (int): 10920986829374173956204549167492687870
Serial Number lenght: 124 bits, 16 octets

SubjectKeyId: 44:e9:da:76:f2:ff:0d:23:3e:32:0c:51:73:d2:72:8e:e7:ad:e9:3b
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): d6:0b:0c:e0:b1:a9:9d:4b:42:bd:b5:74:f3:70:d4:52:f6:c0:12:51
Fingerprint (sha256): 24:d0:ae:12:1b:79:db:29:7f:8a:68:13:f1:bd:87:d5:80:88:86:72:23:97:2c:1d:8c:46:0a:e9:b0:65:03:f5

Issuing Certificate URL: http://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2010d.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2010d.crl

Check the revocation status for certificate mail.aardvarktactical.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.aardvarktactical.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

mail.aardvarktactical.com
ex-05.ati.local
ex-05
autodiscover.aardvarktactical.com

Other certificates including the domain name aardvarktactical.com

(limited to 100 certificates)
ssl375421.cloudflaressl.com
ssl339069.cloudflaressl.com
nav.aardvarktactical.com
ssl375421.cloudflaressl.com
register.avantechit.com
ssl375421.cloudflaressl.com
aardvarktactical.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
staffassignments.campanytownlasvegas.org
ssl375421.cloudflaressl.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
mail.aardvarktactical.com
ssl339069.cloudflaressl.com
forms.aardvarktactical.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
form.gibsonplumbing.com
staffassignments.campanytownlasvegas.org
nav.aardvarktactical.com
ssl375421.cloudflaressl.com
ssl375421.cloudflaressl.com
aardvarktactical.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
contact.purefluent.com
mail.varkmail.com
ssl375421.cloudflaressl.com
ssl339069.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
forms.cabinrentalpros.com
ssl375419.cloudflaressl.com
forms.cabinrentalpros.com
ssl339069.cloudflaressl.com
forms.teachworthy.org
mail.varkmail.com
forms.enterpros.com
ssl339069.cloudflaressl.com
forms.propertyplanning.com.au
vault.aardvarktactical.com
forms.data2save.com
vault.aardvarktactical.com
www.aardvarktactical.com
aardvarktactical.com
ssl375421.cloudflaressl.com
forms.upasolutions.com
ssl375421.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com
mail.varkmail.com
aardvarktactical.com
ssl375421.cloudflaressl.com
track.tr.gold
forms.cabinrentalpros.com
mail.aardvarktactical.com
forms.cabinrentalpros.com
www.aardvarktactical.com
formulaire.anaf.fr
secure-forms.techaviagroup.com
forms.localsecurity.org
forms.glowfieldschool.com
forms.cabinrentalpros.com
www.aardvarktactical.com
aardvarktactical.com
forms.ignitingbusiness.com
vault.aardvarktactical.com
ssl375421.cloudflaressl.com
forms.dandeibert.com
ssl375421.cloudflaressl.com
aardvarktactical.com
aardvarktactical.com
forms.cabinrentalpros.com
ssl375421.cloudflaressl.com
ssl375420.cloudflaressl.com
www.aardvarktactical.com
ssl375421.cloudflaressl.com

Certificate

The complete raw certificate details for mail.aardvarktactical.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5ORCpcS2AOdlXF4I6CZ
3asZC9nTMa9oKlFxjAgkpSIwYog40EtoRAxLG9HXqRHlWBh9+RmjtVkL02bj+BFW
UZmRduCdhY8rpTTYnKFgFrTwcX52zCmx7YnJhOG14xDZlIsTTcOaNlBL3yJIxz0Q
3ACAUrFH32973Q4ItIssUAUxD7B6ugzZG9TvbYgCtsrYCvI/a+dJtLHb9PCvdPeM
hSVjf83N3qXxZPr3Zsui0P8gXu59muLp3e58vbl9sCXHU+KLMXDEIYhKZom24lzE
q9tO/3bdfhQ4XmHKWqc0Osol7di2e63IdgN1gwYMUbI1vrDE+7TlaOv2x62H1Ywg
CQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 10920986829374173956204549167492687870
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-05-06 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2011-05-10 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'La Verne'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Aardvark Tactical Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.aardvarktactical.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24689237255077158365143030225085591027165998311024826433045758437353594703147572587617366092305128086239276380411702108034782123838742605598234140250106122802845705924517507470293648368554848276392488278016084150946615941434976951681165104947961544717918414245497384548217264064951245197306881091404135066783370416522056201032247201407302834253192520717240504159226688970031708700069178187968219212051747677941486622881893109303913365303114609519377196469356963077401382141966850355251886150680172818667831842275854318974870892086545908802025611864282277479467617529689902888259300044849082998984983371829982496825353
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							44e9da76f2ff0d233e320c5173d2728ee7ade93b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (88 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.aardvarktactical.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex-05.ati.local'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ex-05'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.aardvarktactical.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (115 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://www.digicert.com/CACerts/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2010d.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2010d.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.3.0.1 (digiCertGlobalCAPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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