www1.jisedu.or.id

- Jakarta Intercultural School -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 4b:d3:0b:78:e9:b6:c5:3b:30:8a:db:b2 was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Jakarta Intercultural School

Organization: Jakarta Intercultural School
State / Province: Jakarta
Locality: Jakarta
Country: ID

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 4b:d3:0b:78:e9:b6:c5:3b:30:8a:db:b2
Serial Number (int): 23466513261021032036071824306
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: d4:fe:0b:04:dc:bf:90:ee:82:93:88:e5:5a:8f:b3:20:e8:86:41:87
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): c0:a9:41:87:89:24:31:e2:a3:5b:3b:c8:e4:ad:f2:e3:9b:6a:62:36
Fingerprint (sha256): 30:1b:19:82:d6:3c:2b:f7:53:65:fe:4a:c0:fe:52:f8:3d:8a:20:c1:ee:58:36:8f:28:94:d1:99:ba:d7:9c:9c

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www1.jisedu.or.id

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www1.jisedu.or.id

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www1.jisedu.or.id

Other certificates including the domain name jisedu.or.id

(limited to 100 certificates)
www.jisedu.or.id
ldpr.jisedu.or.id
campusonline.jisedu.or.id
campus.jisedu.or.id
jisacademy.jisedu.or.id
CCM-CIL.jisedu.or.id
www1.jisedu.or.id
JISCUP01.jisedu.or.id
alumni.jisedu.or.id
uatcampus.jisedu.or.id
dragontales.jisedu.or.id
campusonline.jisedu.or.id
dragontales.jisedu.or.id
jispsvm2.jisedu.or.id
jisnet.jisedu.or.id
jispsa.jisedu.or.id
jisacademy.jisedu.or.id
jispsvm4.jisedu.or.id
www.jisedu.or.id
joinus.jisedu.or.id
apps.jisedu.or.id
www1.jisedu.or.id
dragontales.jisedu.or.id
EWCORE.jisedu.or.id
jisap.jisedu.or.id
jispstest.jisedu.or.id
campusonline.jisedu.or.id
www1.jisedu.or.id
jispsa.jisedu.or.id
EWEDGE.jisedu.or.id
alumni.jisedu.or.id
alumni.jisedu.or.id
www.jisedu.or.id
dragontales.jisedu.or.id
jisacademy.jisedu.or.id
alumni.jisedu.or.id
cr.jisedu.or.id
jisap.jisedu.or.id
jisnet.jisedu.or.id
CCM-PAT.jisedu.or.id
jisacademy.jisedu.or.id
dragontales.jisedu.or.id
joinus.jisedu.or.id
jiscup01.jisedu.or.id
is-helpdesk.jisedu.or.id
jisnet.jisedu.or.id
jisacademy.jisedu.or.id
www.jisedu.or.id
jisedu.or.id
campusonline.jisedu.or.id
campusonline.jisedu.or.id
EWCORE.jisedu.or.id
library.jisedu.or.id
is-helpdesk.jisedu.or.id
www.jisedu.or.id
jisap.jisedu.or.id
EWEDGE.jisedu.or.id
jisnet.jisedu.or.id
www.jisedu.or.id
www1.jisedu.or.id
jisap.jisedu.or.id
jisap.jisedu.or.id
jisap.jisedu.or.id
jisweb.jisedu.or.id
CCM-PAT.jisedu.or.id
CCM-CIL.jisedu.or.id
www.jisedu.or.id
jisacademy.jisedu.or.id
apps.jisedu.or.id
EWEDGE.jisedu.or.id
jispsvm3.jisedu.or.id
JISCUP01.jisedu.or.id
www1.jisedu.or.id
jisnet.jisedu.or.id
alumni.jisedu.or.id
CCM-CIL.jisedu.or.id
jiscup01.jisedu.or.id
CCM-CIL.jisedu.or.id
jispsa.jisedu.or.id
apps.jisedu.or.id
jispsvm4.jisedu.or.id
alumni.jisedu.or.id
moodle.jisedu.or.id
library.jisedu.or.id
jisnet.jisedu.or.id
jisacademy.jisedu.or.id
library.jisedu.or.id
CCM-PAT.jisedu.or.id
www.jisedu.or.id
www.jisedu.or.id
is-helpdesk.jisedu.or.id
jispsa.jisedu.or.id
jisnet.jisedu.or.id
CCM-PAT.jisedu.or.id
jisacademy.jisedu.or.id
joinus.jisedu.or.id
JISCUP01.jisedu.or.id
jismail.jisedu.or.id
jisedu.or.id
EWCORE.jisedu.or.id

Certificate

The complete raw certificate details for www1.jisedu.or.id in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIMS9MLeOm2xTswituyMA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzAxMzEwMjQ2MDZaFw0y
NDAzMDMwMjQ2MDVaMHQxCzAJBgNVBAYTAklEMRAwDgYDVQQIEwdKYWthcnRhMRAw
DgYDVQQHEwdKYWthcnRhMSUwIwYDVQQKExxKYWthcnRhIEludGVyY3VsdHVyYWwg
U2Nob29sMRowGAYDVQQDExF3d3cxLmppc2VkdS5vci5pZDCCASIwDQYJKoZIhvcN
AQEBBQADggEPADCCAQoCggEBALY0xDRAuxYlkEZLLTMZhBPHTpX/7VFUk94AH1jK
dJN8NLgfJYt7Ho9ciztruE2Pd+TFA7tf0xiEdO+sPlJs/FKEXD501hhndZq7+J36
oiYxxOduKzGoPQy3E9TDNG0eVxzTFOT5P34PSPzUdGlVflVA96mi4dB6i6b0NGFH
PdwEXOiN0PJj8EGm2REPIjzDz+5l+WLHiSXqL7VBkociaVO2a/eei4Kss0HZM0Qp
EvPfdiCmqK12iCBclzKUrXbfG9y4DmSt1aqgjgfC//tTwvBEwKMSIYKvLLS9u54N
66slOUHq1KLF/eC8xa+7rB3FT9A7iNpr1WCzV6yztHkIpGECAwEAAaOCAwcwggMD
MA4GA1UdDwEB/wQEAwIFoDCBjgYIKwYBBQUHAQEEgYEwfzBEBggrBgEFBQcwAoY4
aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvZ3Nyc2FvdnNzbGNh
MjAxOC5jcnQwNwYIKwYBBQUHMAGGK2h0dHA6Ly9vY3NwLmdsb2JhbHNpZ24uY29t
L2dzcnNhb3Zzc2xjYTIwMTgwVgYDVR0gBE8wTTBBBgkrBgEEAaAyARQwNDAyBggr
BgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2lnbi5jb20vcmVwb3NpdG9yeS8w
CAYGZ4EMAQICMAkGA1UdEwQCMAAwHAYDVR0RBBUwE4IRd3d3MS5qaXNlZHUub3Iu
aWQwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjv
f/LNeGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBTU/gsE3L+Q7oKTiOVaj7Mg6IZB
hzCCAX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHUAc9meiRtMlnigIH1HneayxhzQ
UV5xGSqMa4AQesF3crUAAAGGBbeofwAABAMARjBEAiA5ncf1GUTGN/qAWXMwzMar
eEXbRY7SUBjkNZmSAPTl1wIgIscBRwHftxnbhywx2WdWRDRfDLoCHiLPhzTl6a+A
Om8AdwDuzdBk1dsazsVct520zROiModGfLzs3sNRSFlGcR+1mwAAAYYFt6soAAAE
AwBIMEYCIQC1PrEPee0ApF01ccX/asl7ZIz/qqQU7ZQHKHfMbn6ipgIhAO2LYv5T
Ku3nR+Z3NNiHL08omE/9DcRdgpmH23ypZA5pAHYA2ra/az+1tiKfm8K7XGvocJFx
bLtRhIU0vaQ9MEjX+6sAAAGGBbeqwwAABAMARzBFAiB1xDdKbNnpU3d3oq7YrfMi
A142HocsjkcFMpDBRQWAOwIhAODz5HqH7ZI73WseuHU/gcJKxOUFPb5DaY/xNlmF
uNTzMA0GCSqGSIb3DQEBCwUAA4IBAQBUbgh/OGZmNyKNksKwIRpBgEZUF0bbOKcW
+s6QFvhVb7zj9SZ2WFfZBC2cgLyUzILSA/q8ZEQLDN+b6W6dfyv/JNCK2AzTAAq3
e72W2ky/13hO15B/5bF7UGVOO/eDE1LjdJYkUKHQZnpQ0bOzDypIQnquzfb5mAM/
/b3S97ltZBlVOEijUAomIWSYxov30zyY0sgBxqmb4zOJl4fnl4+OUpgb6RwGc3xc
d2gp6zbRdrVqiivPU/4EoNSZxWq1lNsx/8gcdSWntl/yHwIPLJLjlv0g+jmCQSBw
5zbgyUY+GxPDTXDCxSLDVhrVxjFeASfwtXMC32EDgQnCTJTOT5k9
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjTENEC7FiWQRkstMxmE
E8dOlf/tUVST3gAfWMp0k3w0uB8li3sej1yLO2u4TY935MUDu1/TGIR076w+Umz8
UoRcPnTWGGd1mrv4nfqiJjHE524rMag9DLcT1MM0bR5XHNMU5Pk/fg9I/NR0aVV+
VUD3qaLh0HqLpvQ0YUc93ARc6I3Q8mPwQabZEQ8iPMPP7mX5YseJJeovtUGShyJp
U7Zr956LgqyzQdkzRCkS8992IKaorXaIIFyXMpStdt8b3LgOZK3VqqCOB8L/+1PC
8ETAoxIhgq8stL27ng3rqyU5QerUosX94LzFr7usHcVP0DuI2mvVYLNXrLO0eQik
YQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 23466513261021032036071824306
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-31 02:46:06 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-03-03 02:46:05 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Jakarta Intercultural School'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www1.jisedu.or.id'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23001391596448470683170638574106885335556593926297107694792821499767714241936597069889096805737747407407699578836312007467225110814948245606156335488158422522046616188090271017957805414486082396482106652295647315885198544121849878052554792120185528797043361606381787321417477204226413970288895042045109941650041722598371571643811497416947951414984806086052360074876429520968991222254400203908875356393488988859703144341604744787858017732944029208450497169219229105226594318882214947071147477427442188282422358546170181313957107180373413947363993539849935897161885879820934612864425400033499001635573086757787447895137
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (21 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www1.jisedu.or.id'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							d4fe0b04dcbf90ee829388e55a8fb320e8864187
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00546e087f38666637228d92c2b0211a418046541746db38a716face9016f8556fbce3f526765857d9042d9c80bc94cc82d203fabc64440b0cdf9be96e9d7f2bff24d08ad80cd3000ab77bbd96da4cbfd7784ed7907fe5b17b50654e3bf7831352e374962450a1d0667a50d1b3b30f2a48427aaecdf6f998033ffdbdd2f7b96d6419553848a3500a26216498c68bf7d33c98d2c801c6a99be333899787e7978f8e52981be91c06737c5c776829eb36d176b56a8a2bcf53fe04a0d499c56ab594db31ffc81c7525a7b65ff21f020f2c92e396fd20fa3982412070e736e0c9463e1b13c34d70c2c522c3561ad5c6315e0127f0b57302df61038109c24c94ce4f993d