*.eos-beijing-1.cmecloud.cn

- 中国移动通信集团有限公司政企客户分公司 -

Issued by GlobalSign Organization Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 3a:d0:b8:6a:b6:1d:29:5d:44:40:e8:f7 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

中国移动通信集团有限公司政企客户分公司

Organization: 中国移动通信集团有限公司政企客户分公司
State / Province: 北京
Locality: 北京
Country: CN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3a:d0:b8:6a:b6:1d:29:5d:44:40:e8:f7
Serial Number (int): 18202458024028267052089272567
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 94:f7:dc:45:40:23:e9:e5:dd:ba:c6:de:f2:c3:b4:19:02:8a:97:4b
AuthorityKeyId: 96:de:61:f1:bd:1c:16:29:53:1c:c0:cc:7d:3b:83:00:40:e6:1a:7c

Fingerprint (sha1): 2e:d1:d1:3c:ef:6c:a2:50:45:71:7f:91:6c:e5:48:43:d2:ad:47:e8
Fingerprint (sha256): 27:d0:26:0e:d8:5a:07:b6:8e:e5:50:68:75:ab:55:fc:a7:f5:ed:da:dd:fe:6a:83:5f:4e:96:ad:5f:d7:db:1e

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsorganizationvalsha2g2

Check the revocation status for certificate *.eos-beijing-1.cmecloud.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eos-beijing-1.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eos-beijing-1.cmecloud.cn
eos-beijing-1.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos-fujian-1.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.lygrmxchcso1.joint.cmecloud.cn
*.obs-website.cidc-rp-11.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos-huanan-1.cmecloud.cn
dingdong.cmecloud.cn
*.eos-hubei-1.cmecloud.cn
*.obs.cidc-rp-2000.joint.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos-jilin-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
console.ecso.sxya-1.cmecloud.cn
*.eos-beijing-4.cmecloud.cn
*.joint.ecloud.10086.cn
*.eos-huhehaote-2.cmecloud.cn
ticket.cmecloud.cn
*.cmecloud.cn
*.eos-jiangxi-1.cmecloud.cn
*.eos-suzhou-3.cmecloud.cn
*.eos-beijing-2.cmecloud.cn
console.ecso.qdnggzyjyzx-1.cmecloud.cn
iam.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
iam.joint.cmecloud.cn
*.eos-jiangxi-1.cmecloud.cn
*.eos-dongguan-4.cmecloud.cn
*.eos-hunan-1.cmecloud.cn
*.eos-gansu-1.cmecloud.cn
console.ecso.tjxq-1.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-anhui-1.cmecloud.cn
ticket.cmecloud.cn
*.eos-jinan-2.cmecloud.cn
*.obs.tjbdhlwq1.joint.cmecloud.cn
*.eos-jinan-2.cmecloud.cn
*.obs.dualstack.cidc-rp-2000.joint.cmecloud.cn
*.eos-shanxi-1.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos-guangxi-1.cmecloud.cn
*.eos-hainan-1.cmecloud.cn
*.cmecloud.cn
*.eos-hunan-1.cmecloud.cn
*.eos-liaoning-1.cmecloud.cn
*.obs.cidc-rp-12.joint.cmecloud.cn
*.eos-yunnan-2.cmecloud.cn
*.cidc-rp-11.joint.cmecloud.cn
*.joint.ecloud.10086.cn
*.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-shanghai-1.cmecloud.cn
*.eos-dongguan-4.cmecloud.cn
*.eos-beijing-2.cmecloud.cn
console.ecso.bjtzys-1.cmecloud.cn
*.obs.jstzhlwq1.joint.cmecloud.cn
*.eos-hebei-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos-jinan-1.cmecloud.cn
*.cidc-rp-2000.joint.cmecloud.cn
*.eos-guangzhou-1.cmecloud.cn
*.cidc-rp-2006.joint.cmecloud.cn
*.eos.chongqing-5.cmecloud.cn
*.eos-dongguan-5.cmecloud.cn
*.cmecloud.cn
*.eos-zhengzhou-3.cmecloud.cn

Certificate

The complete raw certificate details for *.eos-beijing-1.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFWTCCBEGgAwIBAgIMOtC4arYdKV1EQOj3MA0GCSqGSIb3DQEBCwUAMGYxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTwwOgYDVQQDEzNH
bG9iYWxTaWduIE9yZ2FuaXphdGlvbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0g
RzIwHhcNMTgxMDA5MDMwNjAzWhcNMjAxMDA5MDMwNjAzWjCBmTELMAkGA1UEBhMC
Q04xDzANBgNVBAgMBuWMl+S6rDEPMA0GA1UEBwwG5YyX5LqsMUIwQAYDVQQKDDnk
uK3lm73np7vliqjpgJrkv6Hpm4blm6LmnInpmZDlhazlj7jmlL/kvIHlrqLmiLfl
iIblhazlj7gxJDAiBgNVBAMMGyouZW9zLWJlaWppbmctMS5jbWVjbG91ZC5jbjCC
ASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJUTJIrt/2BzbrwmSii8zR3y
I8Gd5i5X47Zx46S1W0C8Lfwze10tYgcjkdFBPknubRcRigkkDFjEAMhAjBBAQv/8
FY05HurUsYYALiukTlrp6gpRSq2nhgpaq2+fn/gP6QzNCcvulyQVpQHlunighzqP
6NTZWDCgFLe5DM3HAp/UuzB+KfBc3CyaPIw8J/jEB3Ovo+WnjRpI9rjJZyJgc+KM
jdJVP/XgQ6PfijqYJcxzFigTyphp7D324yFJ/F60LvwTtYVRtf596liLR0Vifs/C
kTbLqvxFRGyJTgr/fQh4U7wDfZmGZPsIM8IhtvYtHp6OoaArEP9Jp27SLzGLOxsC
AwEAAaOCAdEwggHNMA4GA1UdDwEB/wQEAwIFoDCBoAYIKwYBBQUHAQEEgZMwgZAw
TQYIKwYBBQUHMAKGQWh0dHA6Ly9zZWN1cmUuZ2xvYmFsc2lnbi5jb20vY2FjZXJ0
L2dzb3JnYW5pemF0aW9udmFsc2hhMmcycjEuY3J0MD8GCCsGAQUFBzABhjNodHRw
Oi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nvcmdhbml6YXRpb252YWxzaGEyZzIw
VgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93
d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQICMAkGA1UdEwQC
MAAwQQYDVR0RBDowOIIbKi5lb3MtYmVpamluZy0xLmNtZWNsb3VkLmNughllb3Mt
YmVpamluZy0xLmNtZWNsb3VkLmNuMB0GA1UdJQQWMBQGCCsGAQUFBwMBBggrBgEF
BQcDAjAdBgNVHQ4EFgQUlPfcRUAj6eXdusbe8sO0GQKKl0swHwYDVR0jBBgwFoAU
lt5h8b0cFilTHMDMfTuDAEDmGnwwEwYKKwYBBAHWeQIEAwEB/wQCBQAwDQYJKoZI
hvcNAQELBQADggEBAFBC9siVifA5BI70lUan39FbP2jcRN0gR5+NvnBdlcG5fuaV
MN6+dD9PkE/xYMBrQtnnraz5EQKevqwn/Gs65xv5B38bvSUz8bpJg46V2iu50e7I
q/LscjHNtWHhfLHOqbNuzTwNskCU8BHWZzjG132wjHMViCA6kRMSsX8IGijL+h83
TIQbVnFQiUm82wOcXnBq2FD1aJ9Qy7z25KRD5zvCMIQ5ubni5RSDeyHVAOhFYUqK
Qv+UXQQpXzHpi0wXuWLYYsU8I08R9hWo5oMsi0tbTURBkUaKdtqgVCs61GgAn6GT
YitYq6FMai/lGLv8Vdp/5gfe5KzJ+GB/k4JO2C8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRMkiu3/YHNuvCZKKLzN
HfIjwZ3mLlfjtnHjpLVbQLwt/DN7XS1iByOR0UE+Se5tFxGKCSQMWMQAyECMEEBC
//wVjTke6tSxhgAuK6ROWunqClFKraeGClqrb5+f+A/pDM0Jy+6XJBWlAeW6eKCH
Oo/o1NlYMKAUt7kMzccCn9S7MH4p8FzcLJo8jDwn+MQHc6+j5aeNGkj2uMlnImBz
4oyN0lU/9eBDo9+KOpglzHMWKBPKmGnsPfbjIUn8XrQu/BO1hVG1/n3qWItHRWJ+
z8KRNsuq/EVEbIlOCv99CHhTvAN9mYZk+wgzwiG29i0eno6hoCsQ/0mnbtIvMYs7
GwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 18202458024028267052089272567
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Organization Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-10-09 03:06:03 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-09 03:06:03 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '北京'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中国移动通信集团有限公司政企客户分公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eos-beijing-1.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18818947079272435360253008278361165779953991719276723569976699814064906953491631575622600665472276290785998317916658535342194954193750724688544733753982689108724594886882131624735999234364254958527491393819813094880283926273106661506734286015685310252554937013509367731758294096928929881282696472348616336132795659177736002821777039000222740888083594109197916431447683043342535438659234994487344067760359525135023694604922480541120395678494174534825313579587306426837925693549280450973139860292945437975830164817406803163238272426178650420748775261505972756483308248460510971416337841994069185081277245765679099624219
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (147 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsorganizationvalsha2g2r1.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsorganizationvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-beijing-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-beijing-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							94f7dc454023e9e5ddbac6def2c3b419028a974b
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 96de61f1bd1c1629531cc0cc7d3b830040e61a7c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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