*.hs.llnwd.net

- Limelight Networks, Inc. -

Issued by GeoTrust SSL CA - G3

About this certificate

This digital certificate with serial number 28:b2:ea:be:fd:0a:fa:5b:0e:1f:04:3b:ae:02:55:82 was issued on by GeoTrust Inc..

With 30 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Sub certificates SHOULD include Subject Key Identifier in end entity certs (RFC 5280: 4.2 & 4.2.1.2)

Limelight Networks, Inc.

Organization: Limelight Networks, Inc.
State / Province: Arizona
Locality: Tempe
Country: US

GeoTrust Inc.

Organization: GeoTrust Inc.
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 28:b2:ea:be:fd:0a:fa:5b:0e:1f:04:3b:ae:02:55:82
Serial Number (int): 54098109887726945449422470681133733250
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId:
AuthorityKeyId: d2:6f:f7:96:f4:85:3f:72:3c:30:7d:23:da:85:78:9b:a3:7c:5a:7c

Fingerprint (sha1): 8e:a5:eb:16:59:2d:0c:16:4c:b1:6d:df:ba:51:ce:3e:8e:75:65:50
Fingerprint (sha256): 32:61:99:81:ac:90:6e:d8:71:e9:5c:f1:13:14:e9:9f:90:ba:1e:fd:28:ea:09:f4:7c:45:f6:43:e1:a0:93:63

Issuing Certificate URL: http://gn.symcb.com/gn.crt

Revocation information

OCSP Server: http://gn.symcd.com
CRL Distribution Point: http://gn.symcb.com/gn.crl

Check the revocation status for certificate *.hs.llnwd.net

30

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.hs.llnwd.net

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

8 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.hs.llnwd.net
*.llnw.com
*.llnw.net
*.lvp.llnw.net
*.phx2.llnw.net
*.phx3.llnw.net
*.upload.llnw.net
*.video.llnw.net
*.cs.lldns.net
*.loris.llnwd.net
*.s.loris.llnwd.net
*.llnwi.net
*.s.llnwi.net
*.limelight.com
*.video.limelight.com
*.videoplatform.limelight.com
*.llnw-trials.com
*.assets.delvenetworks.com
*.delvenetworks.com
*.s.delvenetworks.com
*.cpl.delvenetworks.com
*.s.cpl.delvenetworks.com
*.vo.llnwd.net
*.s.mfs.lvp.llnw.net
*.vp.llnw.com
*.mfs.lvp.llnw.net
*.lldns.net
*.mfs.video.llnw.net
*.content.video.llnw.net
*.smedia.lvp.llnw.net

Other certificates including the domain name llnwd.net

(limited to 100 certificates)
*.hs.llnwd.net
*.bbccomm.hs.llnwd.net
*.hs.llnwd.net
*.bbcfmt.hs.llnwd.net
*.hs.llnwd.net
*.bbccomm.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
phx.llnw.net
*.bbccomm.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.bbcfmt.hs.llnwd.net
*.hs.llnwd.net
*.bbcfmt.hs.llnwd.net
*.hs.llnwd.net
*.bbcfmt.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
phx.llnw.net
*.bbcfmtstor.hs.llnwd.net
*.limelight.com
*.hs.llnwd.net
*.bbcfmt.hs.llnwd.net

*.hs.llnwd.net
*.bbcfmtstor.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net
phx.llnw.net
*.hs.llnwd.net
*.hs.llnwd.net

*.hs.llnwd.net
*.hs.llnwd.net
*.hs.llnwd.net

Certificate

The complete raw certificate details for *.hs.llnwd.net in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq6zeW88aHRy4b+puueAA
oAiGGb4HRAaaRQNlDBL78n++hZWmC3n+bUrOQ+Qlimuwz/GEOlJCBvpcr8Ele1BM
7R5QdswOnXEaeAToM59f911T91o2LcyFWHrLbqgrbBnpuoAdxng00Ghwfj6ccFew
rS5m0TapIEPExGDQZkbrNNrA7vT8oK+mj8gCzsvmSnGjRx5tFfrtqM9UNhe0dWJM
8iGsEJuxsXOQbG/i6cHfNeionsoLSd9QzXIwL37gQGvJLNaiudfjSBFr9C3m5DaJ
dhpzPyJPdYYgg2afB2ZiLraOYb1edVCYr3NeYjlkUXfW7hTxuZU3J4dma1UF8UKZ
8wIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 54098109887726945449422470681133733250
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GeoTrust SSL CA - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-04-02 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-11-23 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Arizona'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Tempe'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String 'Limelight Networks, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:20|false] TeletexString, T61String '*.hs.llnwd.net'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21671994827245788744328027745781757082981246368771730894774964803153740028047976938748479635786863086800933729238302535643922993516821171256017714687651697826012299903114309259453694963573130193963047213320070662854630356093832191561203375435842889127256836368385901252007349866549806997542845838865211553471911973830071137015066349868079561834862045644931961648214360846518132620743152410656009225775969890092581351346838233187994076918321664207961224283022111137588369800529844750640212593348860045590534720966484139309963942747898160664992031949553913648807505063944475913889307153181024847155265341196089759537651
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (586 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.hs.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lvp.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phx2.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.phx3.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.upload.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cs.lldns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.loris.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.loris.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnwi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.llnwi.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.video.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.videoplatform.limelight.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.llnw-trials.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.assets.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cpl.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.cpl.delvenetworks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vo.llnwd.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.s.mfs.lvp.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vp.llnw.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfs.lvp.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.lldns.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.mfs.video.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.content.video.llnw.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.smedia.lvp.llnw.net'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (75 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcd.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (149 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'https://www.geotrust.com/resources/repository/legal'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (36 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://gn.symcb.com/gn.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d26ff796f4853f723c307d23da85789ba37c5a7c
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00afb1a8cc0a48cae28b583b2667485b93ac8cf6a94ea5c9e825fc4e991314e6ba5203926c242545e508da449bea8a646c2fca05968513a58efa6e2e96a7e54328350c26a00bb6b4fb05cea585c02c6f1c6f3e62e84f43e9bc4c3fa3fb4ba87311da74aaf75ad459a3dc380ca5bdf5890b989924697971078271ababe59f217b6f5f9984deee1ff4b079dacf2a418a52f0a7d53df6f57251ca5f184ce603bfc49f1a471208e9cba4de86e41cc32af0df2923b569ae0c193eef0bcee3c8f8247653575d3db7fcc3401ebea738ae683eb6800865a0c5968c4424d51e78e22e0fe8a8085cfbf3f53d1a87a9efeeaf84c963903d5438f60809ed23d58b4c13836cd4c6