exchedge01.sfr.com

- SFR -

Issued by Certigna Wild CA

About this certificate

This digital certificate with serial number ca:ac:59:89:eb:14:c6:52:15:68:4f:e8:59:ad:df:04 was issued on by DHIMYOTIS.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

SFR

Organization: SFR
Locality: PARIS
Country: FR

DHIMYOTIS

Organization: DHIMYOTIS
Organization unit: 0002 48146308100036
Country: FR

This certificate will expire on

Certificate Details

Serial Number (hex): ca:ac:59:89:eb:14:c6:52:15:68:4f:e8:59:ad:df:04
Serial Number (int): 269398946269688078498705829865624297220
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: 83:e0:63:1d:cd:75:b3:cd:f3:17:70:f2:80:47:38:e4:a8:ba:c8:99
AuthorityKeyId: 8e:7c:17:b7:bc:f7:c3:b4:98:d6:b6:35:99:22:2a:c4:c3:9e:24:67

Fingerprint (sha1): 63:0b:d0:92:00:5e:83:34:51:2f:05:ba:81:c7:fa:db:2c:84:a5:04
Fingerprint (sha256): 2f:5b:1f:5a:2f:b1:11:13:dd:5b:80:a7:2c:e1:50:f9:9f:f4:ed:c1:bd:b7:bb:99:ea:d6:45:36:26:0e:e4:03

Issuing Certificate URL: http://autorite.certigna.fr/wildca.der
Issuing Certificate URL: http://autorite.dhimyotis.com/wildca.der

Revocation information

OCSP Server: http://wildca.ocsp.dhimyotis.com
OCSP Server: http://wildca.ocsp.certigna.fr
CRL Distribution Point: http://crl.certigna.fr/wildca.crl
CRL Distribution Point: http://crl.dhimyotis.com/wildca.crl

Check the revocation status for certificate exchedge01.sfr.com

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for exchedge01.sfr.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Client Authentication
Server Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

exchedge01.sfr.com
exchedge04.sfr.com
exchedge02.sfr.com
exchedge03.sfr.com

Other certificates including the domain name sfr.com

(limited to 100 certificates)
extra-prmfo.sfr.com
sso.sfr.com
zemel.sfr.com
mysfr.sfr.com
sun-admin.sfr.com
intra-zabbix-reseau.sfr.com
extra-sigma-sfrnco.sfr.com
extra-prmbo.sfr.com
extra-rcetao.sfr.com
campus.sfr.com
fgw-77251-18-c.fgw.fr.sfr.com
zepush.sfr.com
zemel.sfr.com
ipstd1ss1sm11.sfr.com
intra-sara.sfr.com
campus.sfr.com
*.pfv.private.sfr.com
sun-apps.sfr.com
fgw-910235-12-b.fgw.fr.sfr.com
zepush.sfr.com
*.pack.private.sfr.com
autodiscover.sfr.com
fgw-910235-7-a.fgw.fr.sfr.com
fgw-77251-22-b.fgw.fr.sfr.com
*.private.sfr.com
adrms.sfr.com
extra-sigma-sfrnco.sfr.com
fgw-910235-2-a.fgw.fr.sfr.com
*.private.sfr.com
intra-sfrnco.sfr.com
zemel.sfr.com
intra-sfrnco.sfr.com
campus.sfr.com
fgw-77251-22-c.fgw.fr.sfr.com
conf.sfr.com
intra-webdav.sfr.com
sfrtemps.private.sfr.com
fgw-910235-1-b.fgw.fr.sfr.com
corporate.sfr.com
*.completel.private.sfr.com
extra-consofi.sfr.com
intra-aclserver.sfr.com
campus.sfr.com
fgw-910235-13-c.fgw.fr.sfr.com
sip.sfr.com
extra-sfrnco.sfr.com
*.sfr.com
zemel.sfr.com
fgw-77251-24-b.fgw.fr.sfr.com
wsaetv.sfr.com
wsaetv.sfr.com
fgw-910235-2-c.fgw.fr.sfr.com
fgw-910235-4-a.fgw.fr.sfr.com
apps.sfr.com
zepush.sfr.com
autodiscover.sfr.com
intra-sultan.sfr.com
sip03.sfr.com
extra-sultan.sfr.com
corporate.sfr.com
intra-sfrnco.sfr.com
autodiscover.sfr.com
autodiscover.sfr.com
fgw-910235-5-b.fgw.fr.sfr.com
extranet.sfr.com
legacy.sfr.com
intra-kara-direct.sfr.com
exchedge01.sfr.com
fgw-910235-7-b.fgw.fr.sfr.com
extra-sfosynchro.sfr.com
sun-apps.sfr.com
campus.sfr.com
www.sfr.com
campus.sfr.com
intra-sfrnco.sfr.com
actuinterne.sfr.com
corporate.sfr.com
pnp.fr.sfr.com
extra-sfrnco.sfr.com
campus.sfr.com
intra-zabbix-systeme.sfr.com
actuinterne.sfr.com
wsaetv-qlf.sfr.com
fgw-77251-17-a.fgw.fr.sfr.com
fgw-910235-8-c.fgw.fr.sfr.com
fgw-910235-2-b.fgw.fr.sfr.com
intra-pdcbios-ihmrc.sfr.com
fgw-910235-9-c.fgw.fr.sfr.com
fgw-910235-7-c.fgw.fr.sfr.com
qlf-apps.sfr.com
*.sfr.com
fgw-910235-12-c.fgw.fr.sfr.com
intra-sfrnco-pack.sfr.com
portail-guest.private.sfr.com
wsaetv-pre.sfr.com
autodiscover.sfr.com
fgw-910235-13-b.fgw.fr.sfr.com
*.thd.sfr.com
extra-sigma-sfrnco.sfr.com
smtp1.sfr.com

Certificate

The complete raw certificate details for exchedge01.sfr.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWYPQDV4LKA5Krs1yPWU
1MkbO+AGlWHFKxowJfbwzj2ynH1KMxgphMbVBd8Ck4PI4uw/dmrSCgCD+ncJRWWJ
O8qfAqF/vjUuD2tFYWdLrmHV1/SpsBwg9Ph1oWt4B/mDIPsBly99tOvO0TkqAniB
DdN5DTc9Yd8hJguBY/nG/80Wm23DkVAXQUE+K7RmwiIJschpcChpTEtWNmJH9+XR
88L/db4CBAsxA3bO8kjL/gxJqjTKOksAuAPf3IU6kRH0M6xTR/rNU7qOOLYirRlT
FLuXnXxa+moHtbbm7buIDlQfwGp/DshpIyLzOEgqWvLzSHWB6/EmCwaITWUedu7+
OwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 269398946269688078498705829865624297220
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'DHIMYOTIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '0002 48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.97
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'NTRFR-48146308100036'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Certigna Wild CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-21 23:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-03 22:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'PARIS'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SFR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'exchedge01.sfr.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17849928451636684072720996911324805559246259076853771900183713525778727365243702632076378738054548865134699706500083249942672385313598298377434959178292155347160663148826474257571602630567412461805732694625755808732530937187658402899548777383936941162796949823029928567570100285128273131241957284912701422854315696559013591470133786999830228927319470650468948532356000593044757702874193607952711755070425297184369953524136356745677423728173607038268952176215717816217601152832492373441243273895034600447574124307537369657407010713312799300686691342012086037390978583928130310862453076487252402369583510345758425415227
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (199 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.certigna.fr/wildca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://autorite.dhimyotis.com/wildca.der'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://wildca.ocsp.dhimyotis.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://wildca.ocsp.certigna.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 8e7c17b7bcf7c3b498d6b63599222ac4c39e2467
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (90 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.250.1.177.2.7.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.certigna.com/autorite-certification'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (86 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.certigna.fr/wildca.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.dhimyotis.com/wildca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (82 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchedge01.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchedge04.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchedge02.sfr.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'exchedge03.sfr.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							83e0631dcd75b3cdf31770f2804738e4a8bac899
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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