apps.csbsju.edu

- Order of Saint Benedict -

Issued by GlobalSign Organization Validation CA - G2

About this certificate

This digital certificate with serial number 11:21:61:58:bd:3b:3d:c8:54:df:db:3b:77:d0:98:0b:43:c0 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Order of Saint Benedict

Organization: Order of Saint Benedict
State / Province: MN
Locality: Collegeville
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 11:21:61:58:bd:3b:3d:c8:54:df:db:3b:77:d0:98:0b:43:c0
Serial Number (int): 1492267574824098847641479170417247658918848
Serial Number lenght: 141 bits, 18 octets

SubjectKeyId: 6d:e2:e3:8e:10:49:6a:cf:e3:17:c8:f1:66:e2:4f:43:f4:7b:ec:cd
AuthorityKeyId: 5d:46:b2:8d:c4:4b:74:1c:bb:ed:f5:73:b6:3a:b7:38:8f:75:9e:7e

Fingerprint (sha1): 7e:ed:c5:91:a8:65:40:06:65:af:d3:1c:62:ee:96:20:e7:d0:be:e5
Fingerprint (sha256): 25:e5:4c:56:71:1a:ae:ee:6e:f6:2a:c2:c5:81:40:5d:97:7c:b0:6d:3a:c1:4a:a7:bb:ae:66:dd:0a:c1:51:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalg2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalg2
CRL Distribution Point: http://crl.globalsign.com/gs/gsorganizationvalg2.crl

Check the revocation status for certificate apps.csbsju.edu

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for apps.csbsju.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

apps.csbsju.edu

Other certificates including the domain name csbsju.edu

(limited to 100 certificates)
moodle2sandbox.csbsju.edu
cognos.csbsju.edu
cluster.technolutions.net
clockwork.csbsju.edu
sjualum.csbsju.edu
banxf1.ad.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
assets.csbsju.edu
cluster.technolutions.net
igx.csbsju.edu
bookstore.csbsju.edu
cluster.technolutions.net
apps.csbsju.edu
sipaccess.csbsju.edu
sustainability.csbsju.edu
bansso.csbsju.edu
mitelcallcenter.csbsju.edu
cluster.technolutions.net
tbxsa8srv.ad.csbsju.edu
cluster.technolutions.net
citrix.csbsju.edu
employees.csbsju.edu
apps.csbsju.edu
cluster.technolutions.net
sharepoint.csbsju.edu
csbsju.edu
cluster.technolutions.net
bookstore.csbsju.edu
technolutions.com
cluster.technolutions.net
csbalum.csbsju.edu
banxf1.ad.csbsju.edu
employment.csbsju.edu
moodle.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
ssb.csbsju.edu
cluster.technolutions.net
api.csbsju.edu
digitalcommons.csbsju.edu
www.users.csbsju.edu
ssl365432.cloudflaressl.com
auth.csbsju.edu
banxf2.ad.csbsju.edu
ssl365433.cloudflaressl.com
apps.csbsju.edu
banxf1.ad.csbsju.edu
passsrv.ad.csbsju.edu
cluster.technolutions.net
bansso.csbsju.edu
cluster.technolutions.net
aleph.mnpals.net
cluster.technolutions.net
clubs.sharepoint.csbsju.edu
guides.csbsju.edu
banxf2.ad.csbsju.edu
cluster.technolutions.net
spam.csbsju.edu
sharepoint.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
bookstore.csbsju.edu
guides.csbsju.edu
cluster.technolutions.net
admissions.csbsju.edu
webapps.csbsju.edu
csbalum.csbsju.edu
cluster.technolutions.net
viewdevcs.csbsju.edu
blogs.csbsju.edu
digitalcommons.csbsju.edu
www.csbsju.edu
citrix.csbsju.edu
www.users.csbsju.edu
cluster.technolutions.net
cluster.technolutions.net
viewcs.csbsju.edu
view.csbsju.edu
auth-stage.csbsju.edu
zabbix.csbsju.edu
lyncfe2013pool.ad.csbsju.edu
vappvol.csbsju.edu
bookstore.csbsju.edu
cluster.technolutions.net
bookstore.csbsju.edu
cluster.technolutions.net
phyplantwork.csbsju.edu
ssl365433.cloudflaressl.com
cluster.technolutions.net
csbsju.edu
cluster.technolutions.net
homedir.csbsju.edu
apps.csbsju.edu
canvas.csbsju.edu
technolutions.com
selfservice.csbsju.edu
api.csbsju.edu
sharepoint.csbsju.edu
technolutions.com

Certificate

The complete raw certificate details for apps.csbsju.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISESFhWL07PchU39s7d9CYC0PAMA0GCSqGSIb3DQEBBQUA
MF0xCzAJBgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTMwMQYD
VQQDEypHbG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gRzIw
HhcNMTMwNzAzMTQzMTAyWhcNMTUwODMxMTk1MjQ4WjBtMQswCQYDVQQGEwJVUzEL
MAkGA1UECBMCTU4xFTATBgNVBAcTDENvbGxlZ2V2aWxsZTEgMB4GA1UEChMXT3Jk
ZXIgb2YgU2FpbnQgQmVuZWRpY3QxGDAWBgNVBAMTD2FwcHMuY3Nic2p1LmVkdTCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKe7QquguySi6SL4rSYiFK0w
KYZeBdCpmg0bbYblR6vDQq5g4khMQuMJlWhEdwq1ldGkDU/cHDvJWMoecOPyNXXo
lugOiHO3R+emRE/bNCEkk65Cee8YGENlj9L9TLYu8M/X+8SLVocCfnMh60pesVkB
du53dH9sJHMKyttzRdF6UE0m/5QJp4YEz31pIYPbaDAUqtCa04HkMKkQaXgLasNI
qHsV16ET4zY66hfEIcyU2ETN4ZREdf5G4MmmfZ9JUQspNKk/yKPjCaBFcwxEIZgP
dYdk2MIc9EJvchmhET6vb/zTrIR5Be3EoZpHF24aM6pgjD7tpVwkWa/hOZRpG7kC
AwEAAaOCAcUwggHBMA4GA1UdDwEB/wQEAwIFoDBJBgNVHSAEQjBAMD4GBmeBDAEC
AjA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWduLmNvbS9yZXBv
c2l0b3J5LzAaBgNVHREEEzARgg9hcHBzLmNzYnNqdS5lZHUwCQYDVR0TBAIwADAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwRQYDVR0fBD4wPDA6oDigNoY0
aHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9ncy9nc29yZ2FuaXphdGlvbnZhbGcy
LmNybDCBlgYIKwYBBQUHAQEEgYkwgYYwRwYIKwYBBQUHMAKGO2h0dHA6Ly9zZWN1
cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0L2dzb3JnYW5pemF0aW9udmFsZzIuY3J0
MDsGCCsGAQUFBzABhi9odHRwOi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdh
bml6YXRpb252YWxnMjAdBgNVHQ4EFgQUbeLjjhBJas/jF8jxZuJPQ/R77M0wHwYD
VR0jBBgwFoAUXUayjcRLdBy77fVztjq3OI91nn4wDQYJKoZIhvcNAQEFBQADggEB
AB0d8CV2r4lSRd21MoK6RLdQ/LiR40/t4xEPbOQZCrbHi6em/vxddBc9Yj62KjYt
tgUz5A2TRC6e5xh/HibT+c/bPwwR4kkj8VTqJToJm4BWSO9AFz+FRBnTFlt+rPrv
ckrWB150gvT9SuszdmTID0pKZzxFMZz5OitL976rk0pvPip5RJ0L40j4bXrx/aQ0
9D6IONtGrCjn4dbZj+ZBZE9lQnv3O4wfkP3DTiQQ0YcJ+KMG51CuOcUf/Qt+KPrF
xfUWqo7fX5i/QkcWAArNiPLdYPxoKUPWfzGRhB+CwaRgEL1j6yyD4iutghh5EBga
ZiNeKwV/mFsSVI9P6yLH8C8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp7tCq6C7JKLpIvitJiIU
rTAphl4F0KmaDRtthuVHq8NCrmDiSExC4wmVaER3CrWV0aQNT9wcO8lYyh5w4/I1
deiW6A6Ic7dH56ZET9s0ISSTrkJ57xgYQ2WP0v1Mti7wz9f7xItWhwJ+cyHrSl6x
WQF27nd0f2wkcwrK23NF0XpQTSb/lAmnhgTPfWkhg9toMBSq0JrTgeQwqRBpeAtq
w0ioexXXoRPjNjrqF8QhzJTYRM3hlER1/kbgyaZ9n0lRCyk0qT/Io+MJoEVzDEQh
mA91h2TYwhz0Qm9yGaERPq9v/NOshHkF7cShmkcXbhozqmCMPu2lXCRZr+E5lGkb
uQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1492267574824098847641479170417247658918848
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2013-07-03 14:31:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-08-31 19:52:48 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'MN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Collegeville'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Order of Saint Benedict'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'apps.csbsju.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21174138489639297439730736759710271325547638399667171301213507428060370814045190852311646097858181580060372302353273756397713570093703284726436320587238923912913980799780360549431839221857949826146600953062406523284534203511450195306883054804524002960029443617448710252812200873631779770310596799051287229212650884078021848327518400232400882618345812609049544855595829185001437494802713669120322969251634588674456230895291896652781194857660914259965004616408205282375006156598626272293572769744260848029117148708499875853596902641247608733128184161853631303355118369916571752526615593049555435960197512988914415639481
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (19 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'apps.csbsju.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsorganizationvalg2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalg2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalg2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							6de2e38e10496acfe317c8f166e24f43f47beccd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 5d46b28dc44b741cbbedf573b63ab7388f759e7e
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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