estate.fco.gov.uk

- FCDO Services -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 79:cd:4f:df:e4:89:1a:0c:2e:00:62:4c was issued on by GlobalSign nv-sa.

With 20 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

FCDO Services

Organization: FCDO Services
State / Province: Buckinghamshire
Locality: Milton Keynes
Country: GB

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 79:cd:4f:df:e4:89:1a:0c:2e:00:62:4c
Serial Number (int): 37695893178447549587785802316
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 1c:7e:e2:03:73:b4:3a:6e:48:97:92:14:c2:a8:14:86:b9:87:3c:b5
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 26:89:8d:66:ac:bf:19:be:65:a3:f9:c4:f2:c0:5f:6b:a2:8f:0c:b4
Fingerprint (sha256): 2c:c3:f4:a2:e3:7c:8f:fe:62:fd:ab:cf:d8:68:a6:3b:1f:34:52:e7:49:d4:f2:c8:55:88:d7:b8:eb:d3:2b:ef

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate estate.fco.gov.uk

20

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for estate.fco.gov.uk

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

estate.fco.gov.uk
atas.fcos.gsi.gov.uk
cit.psn360.fcos.gsi.gov.uk
crm.fcos.gsi.gov.uk
ecase.fcos.gsi.gov.uk
ecase-bis.fcos.gsi.gov.uk
ecase-mod.fcos.gsi.gov.uk
ecase-test-bis.fcos.gsi.gov.uk
ecase-test-mod.fcos.gsi.gov.uk
ext.mobile.fco.gsi.gov.uk
hot.psn360.fcos.gsi.gov.uk
icasework.fcos.gsi.gov.uk
iicsa.fcos.gov.uk
mod.fcos.gov.uk
mod.psn360.fcos.gsi.gov.uk
nationalpolice.fcos.gsi.gov.uk
nctphq.fcos.gov.uk
showcase.psn360.fcos.gsi.gov.uk
ukvisas.fco.gov.uk
mail.estate.fco.gov.uk

Other certificates including the domain name fco.gov.uk

(limited to 100 certificates)
protocol.fco.gov.uk
blogs.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fcdo.gov.uk
gitlab.dev.hub.fco.gov.uk
vle.fco.gov.uk
api.cistest.fco.gov.uk
vle.fco.gov.uk
nexus.dev.hub.fco.gov.uk
securelogin.wifi.fco.gov.uk
crisis.hub.fco.gov.uk
link.cistest.fco.gov.uk
vle.fco.gov.uk
vle.fco.gov.uk
pyramiddr.fco.gov.uk
api.cistest.fco.gov.uk
vetting.fco.gov.uk
*.myna.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
mx.ppe.fco.gov.uk
*.visa4uk.fco.gov.uk
blogs.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
vle.fco.gov.uk
vetting.fco.gov.uk
*.hub.fco.gov.uk
www.chevening.fco.gov.uk
jira.dev.hub.fco.gov.uk
confluence.dev.hub.fco.gov.uk
sip.ppe.fco.gov.uk
blogs.fcdo.gov.uk
web-analytics.fco.gov.uk
ci.crisis.dev.hub.fco.gov.uk
*.sharepoint.cloud.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
servicenowtest.fcos.gov.uk
crisis.hub.fco.gov.uk
*.fconet.fco.gov.uk
nexus.dev.hub.fco.gov.uk
terminal.fco.gov.uk
vle.fco.gov.uk
*.fconet.fco.gov.uk
portal.wifi.fco.gov.uk
internationalmedia.fco.gov.uk
www.locate.fco.gov.uk
servicenowtest.fcos.gov.uk
protocol.fcdo.gov.uk
nexus.dev.hub.fco.gov.uk
hspinternet.fco.gov.uk
*.visa4uk.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.estate.fco.gov.uk
blogs.fcdo.gov.uk
*.estate.fco.gov.uk
protocol.fco.gov.uk
ist.crisis.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
hspinternet.fco.gov.uk
web-analytics.fco.gov.uk
jira.dev.hub.fco.gov.uk
ftp.bacs.services.fco.gov.uk
*.os-insight.fco.gov.uk
*.visa4uk.fco.gov.uk
exercise.consular.hub.fco.gov.uk
vle-test.fco.gov.uk
uat.crisis.dev.hub.fco.gov.uk
protocol.fco.gov.uk
protocol.fcdo.gov.uk
vle.fco.gov.uk
local.crisis.dev.hub.fco.gov.uk
transfer.cistest.fco.gov.uk
etdc.cis.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
*.fco.gov.uk
crisis.hub.fco.gov.uk
blogs.fcdo.gov.uk
protocol.fcdo.gov.uk
sts.ppe.fco.gov.uk
ist.crisis.hub.fco.gov.uk
crisis.hub.fco.gov.uk
protocol.fco.gov.uk
blogs.fcdo.gov.uk
blogs.fco.gov.uk
api.cis.fco.gov.uk
*.visa4uk.fco.gov.uk
wasp.wifi.fco.gov.uk
portal.estate.fco.gov.uk
pyramid.fco.gov.uk
protocol.fco.gov.uk
pyramid.fco.gov.uk
jira.dev.hub.fco.gov.uk
*.consular.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
*.hub.fco.gov.uk
exercise.crisis.hub.fco.gov.uk
nexus.dev.hub.fco.gov.uk
nightly.crisis.dev.hub.fco.gov.uk
estate.fco.gov.uk

Certificate

The complete raw certificate details for estate.fco.gov.uk in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtm4kfmyMlGdaZVs0+STE
RLMGjNSIGmuK1Ml5uYgIze8AseVnx/d3NotapfvGCN4lJSkZjvXlfbpX1M/VX9kE
e6w83QaMdktLbuaSUKeAUbi9ALnjd2QewYjCPQpq9BkQlen3r2+KoEjmecyipz53
PsiZ1ry2X6f0lUYLLpyN+vxWL4LAiSS/0nWcXblOBA3GiV3I2N01LgueYsytaPgh
auCR71FNQvijTH0ig66Aim3kJ0iFBPppIjkwc7F47/eJQ6dv1QC9fhkDxJ2lmV1N
4LguY3NIBCt6NfZKx60qZ336/sH9Km8ZLJV9PvRasyW2a2cXLp7VzfeugkkeFEMU
twIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 37695893178447549587785802316
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-10-09 09:08:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2021-11-10 07:36:02 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GB'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Buckinghamshire'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Milton Keynes'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FCDO Services'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'estate.fco.gov.uk'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23029684821523334640576315253108312141069037161890226355269432329159935490833634142660116912327246130578312998915355345035319231920423939622813457217503033866245017712384472046092746306141576213470363742796075391297261757256516325348023235736461055860309882494691947414131783178252959104981144653248341990991737217240450340090017728326910931876823328867599341521486723579506612595958221169835298107138497599841582710857394419315022138064484614216825673952690279395205027487926463206787970414567906842522513573366757330286574138364094845440909992117483797183017253198621664525156809417752756812782795918244188354974903
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (510 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'estate.fco.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'atas.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cit.psn360.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'crm.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecase.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecase-bis.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecase-mod.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecase-test-bis.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ecase-test-mod.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ext.mobile.fco.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'hot.psn360.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'icasework.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iicsa.fcos.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod.fcos.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mod.psn360.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nationalpolice.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'nctphq.fcos.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'showcase.psn360.fcos.gsi.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ukvisas.fco.gov.uk'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.estate.fco.gov.uk'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1c7ee20373b43a6e48979214c2a81486b9873cb5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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