bb.grcc.edu

- Grand Rapids Community College -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 65:88:d1:c1:45:30:3e:d7:00:00:00:00:58:07:ae:19 was issued on by AffirmTrust.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Grand Rapids Community College

Company registration number: 01-01-1914
Organization: Grand Rapids Community College
State / Province: Michigan
Locality: Grand Rapids
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 65:88:d1:c1:45:30:3e:d7:00:00:00:00:58:07:ae:19
Serial Number (int): 134962434283092559042686646828019461657
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: cb:78:31:9d:c4:47:1a:c3:3d:56:3b:ce:d3:d7:21:c7:6c:43:b0:01
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 9b:5e:64:2b:4f:52:dc:4f:a0:3b:c1:bb:4e:f8:97:f5:d3:15:5a:94
Fingerprint (sha256): 32:2b:ce:02:95:a8:69:9d:3c:30:4b:93:b7:1a:04:2d:14:83:79:ff:f7:aa:11:7b:98:38:45:88:78:57:aa:47

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate bb.grcc.edu

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for bb.grcc.edu

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

bb.grcc.edu
bb10.grcc.edu
bbapp01.grcc.edu
bbapp02.grcc.edu
bbapp03.grcc.edu
bbapp04.grcc.edu
bbprimary.grcc.edu

Other certificates including the domain name grcc.edu

(limited to 100 certificates)
papercut.grcc.edu
5178081291534336-fe1.pantheonsite.io
hrprod.grcc.edu
5178081291534336-fe1.pantheonsite.io
5762952716091392-fe3.pantheonsite.io
pspt.grcc.edu
grccwireless.grcc.edu
SCCM.AD.GRCC.EDU
mydesktop.grcc.edu
webnow.grcc.edu
mydesktop.grcc.edu
eprint.grcc.edu
ccsurveys.grcc.edu
epupg1.grcc.edu
eprint.grcc.edu
bb.grcc.edu
bbadb1.grcc.edu
dworksmove.grcc.edu
ACS.grcc.edu
ACS.grcc.edu
webnow.grcc.edu
alertus.ad.grcc.edu
subjectguides.grcc.edu
mydesktop.grcc.edu
5178081291534336-fe1.pantheonsite.io
grccwireless.grcc.edu
imagenow.grcc.edu
lib.grcc.edu
phire.grcc.edu
ibtst.grcc.edu
Analytics.grcc.edu
selfservice.grcc.edu
dworkstst.grcc.edu
mydesktop.grcc.edu
ccsurveys.grcc.edu
bb.grcc.edu
lib.grcc.edu
pi.grcc.edu
sarsweb.grcc.edu
lib.grcc.edu
oc.grcc.edu
air.grcc.edu
lib.grcc.edu
sccmdb.ad.grcc.edu
pstools.grcc.edu
inowprodfcc.grcc.edu
csdev.grcc.edu
ndam.grcc.edu
5178081291534336-fe1.pantheonsite.io
imagenow.grcc.edu
relay.grcc.edu
grcc.edu
grcc.edu
bbtstf5.grcc.edu
pstools.grcc.edu
analytics.grcc.edu
grcc.edu
5178081291534336-fe1.pantheonsite.io
acs.grcc.edu
bb.grcc.edu
subjectguides.grcc.edu
*.grcc.edu
hammerhead.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
psdeves1-2017.ad.grcc.edu
bbdev.grcc.edu
ipam.grcc.edu
dworks.grcc.edu
ds.grcc.edu
*.grcc.edu
mail.grcc.edu
guac.grcc.edu
sccm.ad.grcc.edu
gwsync.grcc.edu
bb.grcc.edu
mydesktop.grcc.edu
guac.grcc.edu
ibtst.grcc.edu
dooraccess.grcc.edu
prtg.grcc.edu
grccwireless.grcc.edu
guac.grcc.edu
mydesktop.grcc.edu
sccm.ad.grcc.edu
lib.grcc.edu
*.grcc.edu
ACS.grcc.edu
alertus.ad.grcc.edu
edocstst.grcc.edu
idatahub.grcc.edu
prtg.grcc.edu
subjectguides.grcc.edu
imagenowtst.grcc.edu
Unity1.grcc.edu
lib.grcc.edu
psupges1.ad.grcc.edu
*.grcc.edu
oc.grcc.edu
pstst.grcc.edu

Certificate

The complete raw certificate details for bb.grcc.edu in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIH6zCCBtOgAwIBAgIQZYjRwUUwPtcAAAAAWAeuGTANBgkqhkiG9w0BAQsFADCB
gzELMAkGA1UEBhMCQ0ExFDASBgNVBAoTC0FmZmlybVRydXN0MSswKQYDVQQLEyJT
ZWUgd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MTEwLwYDVQQDEyhBZmZp
cm1UcnVzdCBFeHRlbmRlZCBWYWxpZGF0aW9uIENBIC0gRVYxMB4XDTE3MDYxNjE4
NTQ0OFoXDTE5MDYxNzE5MjQ0NVowgdoxCzAJBgNVBAYTAlVTMREwDwYDVQQIEwhN
aWNoaWdhbjEVMBMGA1UEBxMMR3JhbmQgUmFwaWRzMRMwEQYLKwYBBAGCNzwCAQMT
AlVTMRkwFwYLKwYBBAGCNzwCAQITCE1pY2hpZ2FuMScwJQYDVQQKEx5HcmFuZCBS
YXBpZHMgQ29tbXVuaXR5IENvbGxlZ2UxHTAbBgNVBA8TFFByaXZhdGUgT3JnYW5p
emF0aW9uMRMwEQYDVQQFEwowMS0wMS0xOTE0MRQwEgYDVQQDEwtiYi5ncmNjLmVk
dTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAL6RJiEUH8oUiXD6sH22
BNF2pOxZR5QnY9q0a1d/WkcTeP/vMDq/+3OQPh/tLXvorSdVvbMem4CTKxZXfad3
wQZXue5uakdhUoLDidwKgG4y/4s72rrrXiF+CL+h5NJo791D3EQ57wbD3xgosuBq
7hhr3/i4XMJ6ku3aqtcWuwd1p0gT2vuZEWfdOID2JhgfZYQE/nV2xFd736o+YCVY
Q4UwW/fg153pQ+ujjQ2+aQVl5JAX2CGvkdVvtacyiMf4YWA7SYKDV2rX3LsRbqzY
O07qgEtei1kmQ+C260mkWO2hoFwA43HcfEFmAUyXa8fIx0QytEFu1Df+gku6v9z9
wlcCAwEAAaOCBAAwggP8MIGBBgNVHREEejB4ggtiYi5ncmNjLmVkdYINYmIxMC5n
cmNjLmVkdYIQYmJhcHAwMS5ncmNjLmVkdYIQYmJhcHAwMi5ncmNjLmVkdYIQYmJh
cHAwMy5ncmNjLmVkdYIQYmJhcHAwNC5ncmNjLmVkdYISYmJwcmltYXJ5LmdyY2Mu
ZWR1MIIB9gYKKwYBBAHWeQIEAgSCAeYEggHiAeAAdgDuS723dc5guuFCaR+r4Z5m
ow9+X7By2IMAxHuJeqj9ywAAAVyyXXeRAAAEAwBHMEUCIFTBCi5Kv5Z+y9NJ9pqh
9Qfvd8ox8UDBjg7uInf7YrKJAiEAuB9LbRKv1TrDZrnMIOzDR7pGFcGVEMfikXo6
2vI3SyAAdgBWFAaaL9fC7NP14b1Esj7HRna5vJkRXMDvlJhV1onQ3QAAAVyyXXkh
AAAEAwBHMEUCIDjRRXJX4gMdDZlntb9eZhur3HYjUmizlHUIF2yM3ezqAiEAvTbd
+AsYraViqVPTNc1WFsz7z7fbsZX1tASaQLbkp9QAdgDd6x0reg1PpiCLga2BaHB+
Lo6dAdVciI09EcTNtuy+zAAAAVyyXXtZAAAEAwBHMEUCIFrQwlFw7ocI0GdutXzV
h7g19NU+iIqc1iMCgtBaUn1jAiEAvHU2o5Uv2c6rjQbQj1k9epzkwH+ra+78nugr
Vw+uxXQAdgCkuQmQtBhYFIe7E6LMZ3AKPDWYBPkb37jjd80OyA3cEAAAAVyyXXwm
AAAEAwBHMEUCIQCb5Z0fcGh6SL+80eLf/RTJ7pbUZ0TIt1wYXFj/zrmfFgIgPlBx
gsJN+1ylFp6RO58lEpvanXtxPnkQNX3lOAxVAA8wDgYDVR0PAQH/BAQDAgWgMB0G
A1UdJQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAJBgNVHRMEAjAAMGwGCCsGAQUF
BwEBBGAwXjAnBggrBgEFBQcwAYYbaHR0cDovL29jc3AuYWZmaXJtdHJ1c3QuY29t
MDMGCCsGAQUFBzAChidodHRwOi8vYWlhLmFmZmlybXRydXN0LmNvbS9hZnRldjFj
YS5jcnQwVgYDVR0gBE8wTTBCBgorBgEEAYKPCQIBMDQwMgYIKwYBBQUHAgEWJmh0
dHBzOi8vd3d3LmFmZmlybXRydXN0LmNvbS9yZXBvc2l0b3J5MAcGBWeBDAEBMDwG
A1UdHwQ1MDMwMaAvoC2GK2h0dHA6Ly9jcmwuYWZmaXJtdHJ1c3QuY29tL2NybC9h
ZnRldjFjYS5jcmwwHwYDVR0jBBgwFoAU2+9lNwvlR8s10ZAfA8G8iMen6oAwHQYD
VR0OBBYEFMt4MZ3ERxrDPVY7ztPXIcdsQ7ABMA0GCSqGSIb3DQEBCwUAA4IBAQA+
Nkhc4KUIXBxK46fv4oq9HDYH8g7BpJUG4YstBRqV/12Gmewowvm6WR1mXqWRnorw
6uTve8lqWA/++GXy5IfjhOrxvRYreK73NHMnrObqGf9F7U8Ne8oqkwayaQMLyqBR
yQ0nd92QWYO5XlCKfSb4vwostppvjJQBBWBn/c0wXhnlD4LjMwknp6SMzuYxaFnJ
TJqMhPfEVw9nPNMarH4DzqM54YVXj5opEftsWH1pLGIXbVmWFes0SICwmF9eRlEM
LwD91m7KIeX/vGMAFOAL4r4Y1MCwlAUt/xr0MQd3LXD5bEMSbfft6RJNos212lKc
x/FFMBWmPfuN1wXYDbVs
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpEmIRQfyhSJcPqwfbYE
0Xak7FlHlCdj2rRrV39aRxN4/+8wOr/7c5A+H+0te+itJ1W9sx6bgJMrFld9p3fB
Ble57m5qR2FSgsOJ3AqAbjL/izvauuteIX4Iv6Hk0mjv3UPcRDnvBsPfGCiy4Gru
GGvf+LhcwnqS7dqq1xa7B3WnSBPa+5kRZ904gPYmGB9lhAT+dXbEV3vfqj5gJVhD
hTBb9+DXnelD66ONDb5pBWXkkBfYIa+R1W+1pzKIx/hhYDtJgoNXatfcuxFurNg7
TuqAS16LWSZD4LbrSaRY7aGgXADjcdx8QWYBTJdrx8jHRDK0QW7UN/6CS7q/3P3C
VwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 134962434283092559042686646828019461657
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-06-16 18:54:48 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-06-17 19:24:45 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Michigan'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Grand Rapids Community College'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '01-01-1914'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'bb.grcc.edu'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24056853554629009550569505531343866396147122065540691436935483737170224630762880789759197485687924192292391511511186895223995250162269225781405379279717362586131799821612844677296896560449448453948758935885158862828341830477785906298565154532888934006146647162804676472507688798738114055876520155107107236912002977298275901011284388155933426519535080303716802810192007119021528891866314508154067355560128903444478278610086781003801409447730032633995855548971554329062111341963025074575328983808543989718449548728669770832914847859018656599981312088125524448123584836184069516208155902477471133377369735415490460631639
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (122 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bb10.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbapp01.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbapp02.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbapp03.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbapp04.grcc.edu'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bbprimary.grcc.edu'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (486 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (482 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							cb78319dc4471ac33d563bced3d721c76c43b001
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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