ocr-staging-cx4k6b.itranslateapp.com

Issued by GTS CA 1D4

About this certificate

This digital certificate with serial number 53:6d:70:be:57:54:ff:5c:12:33:8e:fe:69:64:0c:35 was issued on by Google Trust Services LLC.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=ocr-staging-cx4k6b.itranslateapp.com

Google Trust Services LLC

Organization: Google Trust Services LLC
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 53:6d:70:be:57:54:ff:5c:12:33:8e:fe:69:64:0c:35
Serial Number (int): 110894170717982751885007220479023647797
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ec:c9:ed:9c:26:98:bb:72:32:f3:cd:db:72:ae:4a:88:97:c0:f4:f5
AuthorityKeyId: 25:e2:18:0e:b2:57:91:94:2a:e5:d4:5d:86:90:83:de:53:b3:b8:92

Fingerprint (sha1): b4:0f:5a:93:ca:8c:d9:35:73:90:a7:c3:da:7e:29:9f:73:fe:d7:91
Fingerprint (sha256): 2f:02:47:ba:f6:ef:48:0b:15:fb:3a:71:e4:42:95:c3:30:7b:82:d8:b5:25:b3:40:1f:2c:8d:5f:58:75:b9:f3

Issuing Certificate URL: http://pki.goog/repo/certs/gts1d4.der

Revocation information

OCSP Server: http://ocsp.pki.goog/s/gts1d4/0kZr9j4bx_U
CRL Distribution Point: http://crls.pki.goog/gts1d4/UZtnpr-Odwk.crl

Check the revocation status for certificate ocr-staging-cx4k6b.itranslateapp.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for ocr-staging-cx4k6b.itranslateapp.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

ocr-staging-cx4k6b.itranslateapp.com

Other certificates including the domain name itranslateapp.com

(limited to 100 certificates)
medical.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
asr.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
medical.itranslateapp.com
data.itranslateapp.com
data.itranslateapp.com
pypi.itranslateapp.com
dev-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
gandalf.internal.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
dev-api.itranslateapp.com
asr.itranslateapp.com
han-shot-first.itranslateapp.com
pypi.itranslateapp.com
pypi.itranslateapp.com
pypi.itranslateapp.com
medical.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
pypi.itranslateapp.com
dev-api.itranslateapp.com
pypi.itranslateapp.com
data.itranslateapp.com
lb-setup-test-ssl-api.itranslateapp.com
vpn.itranslateapp.com
dev-api.itranslateapp.com
asr.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
test.ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
api.staging-3c6e.itranslateapp.com
pypi.itranslateapp.com
ssl-api.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
data.itranslateapp.com
itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
asr.itranslateapp.com
test.ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
api.staging-3c6e.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
api.staging-3c6e.itranslateapp.com
ssl-api.itranslateapp.com
accounts.itranslateapp.com
accounts-staging-cx4k6b.itranslateapp.com
itranslateapp.com
pypi.itranslateapp.com
ocr-staging-cx4k6b.itranslateapp.com
asr.itranslateapp.com
ssl-api.itranslateapp.com
test.ssl-api.itranslateapp.com
itranslateapp.com
medical.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
han-shot-first.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
pypi.itranslateapp.com
web-api.itranslateapp.com
ssl-api.itranslateapp.com
web-api.itranslateapp.com
medical.itranslateapp.com
api.staging-3c6e.itranslateapp.com
accounts.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
web-api.itranslateapp.com
test.ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
dev-api.itranslateapp.com
ssl-test.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.itranslateapp.com
ssl-api.staging-3c6e.itranslateapp.com
web-api.itranslateapp.com
test123.itranslateapp.com
temp-blub.itranslateapp.com
api.staging-3c6e.itranslateapp.com
data.itranslateapp.com
asr-watch-v2.itranslateapp.com
data.itranslateapp.com
ssl-api.itranslateapp.com

Certificate

The complete raw certificate details for ocr-staging-cx4k6b.itranslateapp.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFijCCBHKgAwIBAgIQU21wvldU/1wSM47+aWQMNTANBgkqhkiG9w0BAQsFADBG
MQswCQYDVQQGEwJVUzEiMCAGA1UEChMZR29vZ2xlIFRydXN0IFNlcnZpY2VzIExM
QzETMBEGA1UEAxMKR1RTIENBIDFENDAeFw0yMzA5MjIwNzM2MjNaFw0yMzEyMjEw
ODI0NTJaMC8xLTArBgNVBAMTJG9jci1zdGFnaW5nLWN4NGs2Yi5pdHJhbnNsYXRl
YXBwLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM43l72T3w2s
aqDJqY33hFnIL56y5T8xxJCl1rlMnIPCnVJFkYPaxYB9YH1gONJRo/k1J08QIo4l
Cvkw7b7yca3LXm3gPkdDwuJ6coZn3N0SqWwxFqCYYXG8AAVLb11dM99XYquGTSBQ
IdehiIKsbXB/nghnj6PkKm43sdKFzJTkSTKs+WguxhO6sWIyDQGZ41ovYJUnx8SG
yChdecid+7gI+lfFAYHiZIDyOsdOFoMqUP5+0Kji8165cAUtCnHiACUkt7aoCpQN
jrlSJalmm5mEmOzWThL2/tuQr+7l3RpfQcF9y5Wz//LMJ+DgCJArZ5LBAwX2Podw
yIwWd25H6R0CAwEAAaOCAokwggKFMA4GA1UdDwEB/wQEAwIFoDATBgNVHSUEDDAK
BggrBgEFBQcDATAMBgNVHRMBAf8EAjAAMB0GA1UdDgQWBBTsye2cJpi7cjLzzdty
rkqIl8D09TAfBgNVHSMEGDAWgBQl4hgOsleRlCrl1F2GkIPeU7O4kjB4BggrBgEF
BQcBAQRsMGowNQYIKwYBBQUHMAGGKWh0dHA6Ly9vY3NwLnBraS5nb29nL3MvZ3Rz
MWQ0LzBrWnI5ajRieF9VMDEGCCsGAQUFBzAChiVodHRwOi8vcGtpLmdvb2cvcmVw
by9jZXJ0cy9ndHMxZDQuZGVyMC8GA1UdEQQoMCaCJG9jci1zdGFnaW5nLWN4NGs2
Yi5pdHJhbnNsYXRlYXBwLmNvbTAhBgNVHSAEGjAYMAgGBmeBDAECATAMBgorBgEE
AdZ5AgUDMDwGA1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmxzLnBraS5nb29nL2d0
czFkNC9VWnRucHItT2R3ay5jcmwwggECBgorBgEEAdZ5AgQCBIHzBIHwAO4AdQDo
PtDaPvUGNTLnVyi8iWvJA9PL0RFr7Otp4Xd9bQa9bgAAAYq8CG8nAAAEAwBGMEQC
IB8IHiMS4VHMT2SfZYuusDqlHGhhmjVL8foAu3dvrnbzAiBkH/Ubo3Ro3g1kGrnE
DIk2m2RVI/aA5x2UZESmS24iYQB1AFWB1MIWkDYBSuoLm1c8U/DA5Dh4cCUIFy+j
qh0HE9MMAAABirwIbzwAAAQDAEYwRAIgF5JQM43Jm06HcLM6RIYvkE7yxkPLSsmC
WpqzNQeRphkCIG9wI4h1hXSYR7kdK+nGqwEeFwbuYZGfBJkwMV61ZXrtMA0GCSqG
SIb3DQEBCwUAA4IBAQCKAd4kJUUvBSuZwNnj+KlTe3sOH0O33K31aJe4SdVG3uzv
JEarIWROoNJmfAXVb61dEyJk+cSszCWEgdojfOXIbbw85aZPr7U8x9S++qq4O0sA
grii3wJtwz6YZGqkiR3RIIYkzxxeh13F9/5O5yew5lQ8r9LdOe4an251SLkpnqbn
NkEyC5j5jdXd6OKuyzbPVgAekt7/ZzO5TAQf18mTjRelzh2iAoFdrSlOKnQ99NaN
z7gggj4gDRZAhg6uuIrWcXQjRUs8xrIChMM31LQN4MrLnMcw+0/Do3Sn8Sjcb/7p
O+sgr3WS+SfajrgqSoGThR2Arx7YBT5mYN2Ud1f5
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzjeXvZPfDaxqoMmpjfeE
WcgvnrLlPzHEkKXWuUycg8KdUkWRg9rFgH1gfWA40lGj+TUnTxAijiUK+TDtvvJx
rctebeA+R0PC4npyhmfc3RKpbDEWoJhhcbwABUtvXV0z31diq4ZNIFAh16GIgqxt
cH+eCGePo+Qqbjex0oXMlORJMqz5aC7GE7qxYjINAZnjWi9glSfHxIbIKF15yJ37
uAj6V8UBgeJkgPI6x04WgypQ/n7QqOLzXrlwBS0KceIAJSS3tqgKlA2OuVIlqWab
mYSY7NZOEvb+25Cv7uXdGl9BwX3LlbP/8swn4OAIkCtnksEDBfY+h3DIjBZ3bkfp
HQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 110894170717982751885007220479023647797
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1D4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-22 07:36:23 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-21 08:24:52 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ocr-staging-cx4k6b.itranslateapp.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26032504623090194843465415017892675565598500319994836665157437081134090453682412903028300574323223176606552339213829800093540651791108917145592184155266646452117092399699889384078970524929974226990894094399380507833837672363575118513183624046972564532501760698375179572237849472983808175520889907004666565907547617094787583298783877563057471835118256315724898843324095177009615877774113072606353234745565023475442892331037751876305655896083112509533432589145287437979174588943319567842981872613508190514548305702642987431665159027723187892942610786545846017965747289706779099133988917621635048111634744966193969883421
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							ecc9ed9c2698bb7232f3cddb72ae4a8897c0f4f5
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 25e2180eb25791942ae5d45d869083de53b3b892
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1d4/0kZr9j4bx_U'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1d4.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (40 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ocr-staging-cx4k6b.itranslateapp.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1d4/UZtnpr-Odwk.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (240 bytes)
							00ee007500e83ed0da3ef5063532e75728bc896bc903d3cbd1116beceb69e1777d6d06bd6e0000018abc086f27000004030046304402201f081e2312e151cc4f649f658baeb03aa51c68619a354bf1fa00bb776fae76f30220641ff51ba37468de0d641ab9c40c89369b645523f680e71d946444a64b6e22610075005581d4c2169036014aea0b9b573c53f0c0e43878702508172fa3aa1d0713d30c0000018abc086f3c00000403004630440220179250338dc99b4e8770b33a44862f904ef2c643cb4ac9825a9ab3350791a61902206f7023887585749847b91d2be9c6ab011e1706ee61919f049930315eb5657aed
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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