mail.grcc.edu

- Grand Rapids Community College -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number a4:9a:9b:81:d6:6f:f3:01:00:00:00:00:58:07:c4:e3 was issued on by AffirmTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grand Rapids Community College

Company registration number: 01-01-1914
Organization: Grand Rapids Community College
State / Province: Michigan
Locality: Grand Rapids
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): a4:9a:9b:81:d6:6f:f3:01:00:00:00:00:58:07:c4:e3
Serial Number (int): 218796159085227227381280465656264246499
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: bd:a3:6f:ec:db:e5:41:31:0f:4d:b2:40:44:09:f8:d8:1e:32:76:54
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 88:e2:bc:74:f9:43:c3:2f:9b:aa:ba:cc:4f:3c:9c:d9:44:6e:f7:25
Fingerprint (sha256): 30:d4:78:c8:84:10:f1:eb:37:14:06:f3:dc:5c:57:1f:02:e9:d0:6a:96:f6:41:5e:6d:16:04:02:9e:74:e8:ab

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate mail.grcc.edu

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.grcc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

earth.grcc.edu
fire.grcc.edu
mail.grcc.edu
water.grcc.edu

Other certificates including the domain name grcc.edu

(limited to 100 certificates)
papercut.grcc.edu
5178081291534336-fe1.pantheonsite.io
hrprod.grcc.edu
5178081291534336-fe1.pantheonsite.io
5762952716091392-fe3.pantheonsite.io
pspt.grcc.edu
grccwireless.grcc.edu
SCCM.AD.GRCC.EDU
mydesktop.grcc.edu
webnow.grcc.edu
mydesktop.grcc.edu
eprint.grcc.edu
ccsurveys.grcc.edu
epupg1.grcc.edu
eprint.grcc.edu
bb.grcc.edu
bbadb1.grcc.edu
dworksmove.grcc.edu
ACS.grcc.edu
ACS.grcc.edu
webnow.grcc.edu
alertus.ad.grcc.edu
subjectguides.grcc.edu
mydesktop.grcc.edu
5178081291534336-fe1.pantheonsite.io
grccwireless.grcc.edu
imagenow.grcc.edu
lib.grcc.edu
phire.grcc.edu
ibtst.grcc.edu
Analytics.grcc.edu
selfservice.grcc.edu
dworkstst.grcc.edu
mydesktop.grcc.edu
ccsurveys.grcc.edu
bb.grcc.edu
lib.grcc.edu
pi.grcc.edu
sarsweb.grcc.edu
lib.grcc.edu
oc.grcc.edu
air.grcc.edu
lib.grcc.edu
sccmdb.ad.grcc.edu
pstools.grcc.edu
inowprodfcc.grcc.edu
csdev.grcc.edu
ndam.grcc.edu
5178081291534336-fe1.pantheonsite.io
imagenow.grcc.edu
relay.grcc.edu
grcc.edu
grcc.edu
bbtstf5.grcc.edu
pstools.grcc.edu
analytics.grcc.edu
grcc.edu
5178081291534336-fe1.pantheonsite.io
acs.grcc.edu
bb.grcc.edu
subjectguides.grcc.edu
*.grcc.edu
hammerhead.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
psdeves1-2017.ad.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
dworks.grcc.edu
ds.grcc.edu
*.grcc.edu
mail.grcc.edu
guac.grcc.edu
sccm.ad.grcc.edu
gwsync.grcc.edu
bb.grcc.edu
mydesktop.grcc.edu
guac.grcc.edu
ibtst.grcc.edu
dooraccess.grcc.edu
prtg.grcc.edu
grccwireless.grcc.edu
guac.grcc.edu
mydesktop.grcc.edu
sccm.ad.grcc.edu
lib.grcc.edu
*.grcc.edu
ACS.grcc.edu
alertus.ad.grcc.edu
edocstst.grcc.edu
idatahub.grcc.edu
prtg.grcc.edu
subjectguides.grcc.edu
imagenowtst.grcc.edu
Unity1.grcc.edu
lib.grcc.edu
psupges1.ad.grcc.edu
*.grcc.edu
oc.grcc.edu
pstst.grcc.edu

Certificate

The complete raw certificate details for mail.grcc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7gQxIV2seGqIPDlstTPn
tjnolzMpqShYcvIx4j2q/MUf2t18A6kJWpr5z5WQkl2SLAPTm2Kook4mHNdxTuqd
DvlTSZDhhdf7bD/7G4fmFSpzpYfcb9UAQNbCfdeDU360juwAHfx10gCJ4iRaWRz0
XLqFHUb8YAPRhma+gwO2rj1Z7KhJBsLZwrEQTsSxetLP11QwX1oX8kVColURenac
4vs+a1C1oerafo+5hfTxAuufrWa1vlVulenIB9c8ntzgoz9ZJ8jxHE59jl3+XVsI
TL2qvu81VvIs8WYQcu4XOslMvx3a2hmH8rCFioFfxdIyZ/1OijhueldVCnR697gs
gwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 218796159085227227381280465656264246499
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-10-10 13:34:15 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-10-11 14:04:13 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01-01-1914'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'mail.grcc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 30046783692434853035615829749110993699783482158025014112502355442102920266071952871089709821372656787822752064312843153679653874624455788473210400070466856630588357884787380979603890098458341804115806026566647740368361162000372050582109627797723100318456986119181377239466638340188002678820139916545653887277092900765437526116099847585320822835945926589509135972878786012025553544955167713879545739273568596935122818902610651157234640775388220509337031816063225122500852803044235631034955410969530496457124290013659474831850231339068840339347852529955531780569368439151212495384519957432966989288259395508788239281283
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'earth.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'fire.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'water.grcc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (487 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (483 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							bda36fecdbe541310f4db2404409f8d81e327654
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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