fupo-int.bmw-connecteddrive.com

- Bayerische Motoren Werke AG -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 0a:70:a3:8b:50:2b:33:ca:31:95:1e:eb was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Bayerische Motoren Werke AG

Organization: Bayerische Motoren Werke AG
State / Province: Bavaria
Locality: Munich
Country: DE

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 0a:70:a3:8b:50:2b:33:ca:31:95:1e:eb
Serial Number (int): 3231022105621191043153469163
Serial Number lenght: 92 bits, 12 octets

SubjectKeyId: de:ef:a7:fb:e8:2e:48:9f:82:00:e3:08:e3:8a:b3:94:ff:d2:b9:a1
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): cf:5b:46:a0:ae:a3:c3:26:2c:64:16:30:fd:a4:ab:aa:32:bf:b8:46
Fingerprint (sha256): 26:60:27:84:8e:df:79:24:b9:04:65:e1:3a:ee:b3:d8:3a:32:e6:97:ee:01:50:73:34:cc:27:f2:12:e9:7f:52

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate fupo-int.bmw-connecteddrive.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for fupo-int.bmw-connecteddrive.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

fupo-int.bmw-connecteddrive.com

Other certificates including the domain name bmw-connecteddrive.com

(limited to 100 certificates)
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
tst.bmw-connecteddrive.asia
www.bmw-connecteddrive.com
int.bmw-connecteddrive.ae
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-int.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
www.mini-connected.de
int.bmw-connecteddrive.ae
www.bmw-connecteddrive.com
www.mini-connected.de
www.mini-connected.de
tst.bmw-connecteddrive.com.au
int.bmw-connecteddrive.ae
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
tst.bmw-connecteddrive.asia
infonet3.bmwgroup.com
int.bmw-connecteddrive.ae
fupo-int.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
cdip-test.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
cdip-int.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.ae
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com.au
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-poc.bmw-connecteddrive.com
www.bmw-connecteddrive.com.au
int.connecteddrive.com
www.bmw-connecteddrive.ae
cdip.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-int.bmw-connecteddrive.com
cdip-test.bmw-connecteddrive.com
fupo-test.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.bmw-connecteddrive.ae
fupo.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
www.mini-connected.de
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.com
fupo-poc.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo-test.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
prod.connecteddrive.com
fupo-int.bmw-connecteddrive.com
www.mini-connected.de
www.bmw-connecteddrive.com
www.bmw-connecteddrive.com
infonet3.bmwgroup.com
fupo.bmw-connecteddrive.com
www.bmw-connecteddrive.com
prod.connecteddrive.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
infonet3.bmwgroup.com
cdip-int.bmw-connecteddrive.com
int.bmw-connecteddrive.ae

Certificate

The complete raw certificate details for fupo-int.bmw-connecteddrive.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFQjCCBCqgAwIBAgIMCnCji1ArM8oxlR7rMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0xOTA2MjMyMTE2NTVaFw0y
MDA2MjMyMTE2NTVaMIGAMQswCQYDVQQGEwJERTEQMA4GA1UECBMHQmF2YXJpYTEP
MA0GA1UEBxMGTXVuaWNoMSQwIgYDVQQKExtCYXllcmlzY2hlIE1vdG9yZW4gV2Vy
a2UgQUcxKDAmBgNVBAMTH2Z1cG8taW50LmJtdy1jb25uZWN0ZWRkcml2ZS5jb20w
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDU/Q6DDOY+Umg5FQniOmtG
kqdf48QzPaGvaH//2N6Sm5DhKjMvMKCxCYaJvNa2tPVY+xCNemGjiBIXR9FBWt2k
qqlTCf8DE3GzCu5SAdCacQ6X3xvhjg6nYJ3rrSw6wXOWMwdyRe28AeaESDa0WuZ0
WmgrUmq2u7RC/NDGrjmtS896SsZ4VLOJwCmjvMmk3YUkTpjFgzhraU1YHy3KGPlB
mnQ+g01RoxYdKgeknZ3rcNJoUs13HCQqdi0gzCp0w0kNZ7L2a58qcKy6PVrTD3mu
wh5YBdcSfTxieiY5MFSxRF4P3K8w1bj60TETMavCFKoxo7gj/+N7l0bV1cWwm1IB
AgMBAAGjggHpMIIB5TAOBgNVHQ8BAf8EBAMCBaAwgY4GCCsGAQUFBwEBBIGBMH8w
RAYIKwYBBQUHMAKGOGh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0
L2dzcnNhb3Zzc2xjYTIwMTguY3J0MDcGCCsGAQUFBzABhitodHRwOi8vb2NzcC5n
bG9iYWxzaWduLmNvbS9nc3JzYW92c3NsY2EyMDE4MFYGA1UdIARPME0wQQYJKwYB
BAGgMgEUMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmdsb2JhbHNpZ24uY29t
L3JlcG9zaXRvcnkvMAgGBmeBDAECAjAJBgNVHRMEAjAAMD8GA1UdHwQ4MDYwNKAy
oDCGLmh0dHA6Ly9jcmwuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxOC5j
cmwwKgYDVR0RBCMwIYIfZnVwby1pbnQuYm13LWNvbm5lY3RlZGRyaXZlLmNvbTAd
BgNVHSUEFjAUBggrBgEFBQcDAQYIKwYBBQUHAwIwHwYDVR0jBBgwFoAU+O9/8s14
Z6jeb48kjYjxhwMCs+swHQYDVR0OBBYEFN7vp/voLkifggDjCOOKs5T/0rmhMBMG
CisGAQQB1nkCBAMBAf8EAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA8yS+1P9soAroj
H0kd3bACiXS7FgHuhhftGsEbqHHsnaNEehIvYyMpnYDuili9qN1XbH5vXmROCx68
kZFUb8tq00W6vgBisdiR3h5UOCKKxmXLVNG0vZjqz3ueQwXYCB+DUcOA9nkA9fG5
6rNOXgCLGvWZswWLiJyLMDDoTKN6TEcECngQOYLzfGjIC960mvlsAfT9wHybilh4
1ScUQf+SlBBiMpwmauIPhkTeGWAgzfL4DLmU7CYjH4S27kn2mu7EUh906+TJX8Wv
h0Rq+6MU2B3JyEYuA/zy9xzUrAYvGIs3EhrEfZ+yV0htDOOEXzriyHgKJRhWcsom
sL8NFXGR
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1P0OgwzmPlJoORUJ4jpr
RpKnX+PEMz2hr2h//9jekpuQ4SozLzCgsQmGibzWtrT1WPsQjXpho4gSF0fRQVrd
pKqpUwn/AxNxswruUgHQmnEOl98b4Y4Op2Cd660sOsFzljMHckXtvAHmhEg2tFrm
dFpoK1Jqtru0QvzQxq45rUvPekrGeFSzicApo7zJpN2FJE6YxYM4a2lNWB8tyhj5
QZp0PoNNUaMWHSoHpJ2d63DSaFLNdxwkKnYtIMwqdMNJDWey9mufKnCsuj1a0w95
rsIeWAXXEn08YnomOTBUsUReD9yvMNW4+tExEzGrwhSqMaO4I//je5dG1dXFsJtS
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 3231022105621191043153469163
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-23 21:16:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-06-23 21:16:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bavaria'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Munich'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Bayerische Motoren Werke AG'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'fupo-int.bmw-connecteddrive.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26887307556119646950784561834735499123581379445826032080151981419586337026861679942710290952128533847903995115442950952033483295191781334226862461209016050680110782896692378554694881604280761728589432636349509723832942655515646500689875323791176945715098027940073923151927398159654163787857386478596608754202722684161131521036097946727262261075545243898043218478353386379831801922911490117054295965785907902251130693196959621589809914502713468885709794929714966878365152098987313863100534342633747544821232444877033685567108412459819327320430911630735057939221429553652251671504199707549210396148536486833262677414401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fupo-int.bmw-connecteddrive.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							deefa7fbe82e489f8200e308e38ab394ffd2b9a1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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