email.pscufs.com

- PSCU Financial Services Inc. -

Issued by DigiCert High Assurance CA-3

About this certificate

This digital certificate with serial number 05:fc:97:70:dd:a6:49:e5:9e:cb:ff:52:0f:20:86:42 was issued on by DigiCert Inc.

With 5 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • 1 DNS name(s) are bare public suffixes: p2k3-cashub The domain SHOULD NOT have a bare public suffix (awslabs certlint)

PSCU Financial Services Inc.

Organization: PSCU Financial Services Inc.
State / Province: Florida
Locality: St. Petersburg
Country: US

DigiCert Inc

Organization: DigiCert Inc
Organization unit: www.digicert.com
Country: US

This certificate has expire since

Certificate Details

Serial Number (hex): 05:fc:97:70:dd:a6:49:e5:9e:cb:ff:52:0f:20:86:42
Serial Number (int): 7957670373276926751821997889168639554
Serial Number lenght: 123 bits, 16 octets

SubjectKeyId: 3a:13:bb:f7:11:46:f6:b4:3e:32:f1:7d:40:9d:a7:4d:59:c7:44:03
AuthorityKeyId: 50:ea:73:89:db:29:fb:10:8f:9e:e5:01:20:d4:de:79:99:48:83:f7

Fingerprint (sha1): 97:16:ef:e5:b1:ce:c6:2c:6f:86:68:31:bb:98:97:75:6a:81:5a:97
Fingerprint (sha256): 33:18:cb:58:b8:aa:02:dc:e7:82:e2:e9:41:4a:4f:34:ea:f9:24:6a:57:09:31:c4:e7:a5:55:d1:38:cb:26:92

Issuing Certificate URL: http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt

Revocation information

OCSP Server: http://ocsp.digicert.com
CRL Distribution Point: http://crl3.digicert.com/ca3-2010h.crl
CRL Distribution Point: http://crl4.digicert.com/ca3-2010h.crl

Check the revocation status for certificate email.pscufs.com

5

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for email.pscufs.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

email.pscufs.com
mail.pscufs.com
autodiscover.pscufs.com
p2k3-cashub.pscu.root.corp
p2k3-cashub

Other certificates including the domain name pscufs.com

(limited to 100 certificates)
testbillpay1.pscufs.com
popmoney.pscufs.com
onlineforms.pscufs.com
billpay1.pscufs.com
popmoney.pscufs.com
gprprepaid.pscufs.com
mygiftcardaccount.pscufs.com
mygiftcardaccount.pscufs.com
prepaidstudentcard.pscufs.com
gprprepaid.pscufs.com
apps5.pscufs.com
authpf.pscufs.com
myprepaidcard.pscufs.com
bod.pscufs.com
apps3.pscufs.com
myprepaidcard.pscufs.com
fg.pscufs.com
billpay1.pscufs.com
gprprepaid.pscufs.com
apps.pscufs.com
gprprepaid.pscufs.com
testbillpay1.pscufs.com
billpay1.pscufs.com
phx-mailgate1.pscufs.com
authpf.pscufs.com
gprprepaid.pscufs.com
membersphx.pscufs.com
ocs.pscufs.com
billpay1.pscufs.com
testbillpay1.pscufs.com
payrollprepaid.pscufs.com
ocs.pscufs.com
members.pscufs.com
mygiftcard.pscufs.com
enrollment.pscufs.com
cusap.pscufs.com
*.pscufs.com
designyourowncard.pscufs.com
altmgmt.pscufs.com
mbankingapp.pscufs.com
myprepaidcard.pscufs.com
emvprepaid.pscufs.com
apps.pscufs.com
mbankingsqa.pscufs.com
mobi.pscufs.com
mygiftcardaccount.pscufs.com
popmoney.pscufs.com
mygiftcardaccount.pscufs.com
mygiftcardaccount.pscufs.com
membersuat.pscufs.com
billpay1.pscufs.com
studentprepaid.pscufs.com
designyourowncard.pscufs.com
cwa.pscufs.com
apps5.pscufs.com
onlineforms.pscufs.com
prepaidstudentcard.pscufs.com
myprepaidcard.pscufs.com
pingaccessprod.pscufs.com
billpay1.pscufs.com
wr2.pscufs.com
designyourowncard.pscufs.com
apps3.pscufs.com
testbillpay1.pscufs.com
cwa.pscufs.com
testpopmoney.pscufs.com
ocs.pscufs.com
phx-mailgate1.pscufs.com
popmoney.pscufs.com
designyourowncard.pscufs.com
studentprepaid.pscufs.com
esm.pscufs.com
apps9.pscufs.com
pfvip.pscufs.com
myprepaidcard.pscufs.com
payrollprepaid.pscufs.com
mobi.pscufs.com
designyourowncard.pscufs.com
fg.pscufs.com
cwa.pscufs.com
email.pscufs.com
myprepaidcard.pscufs.com
billpay1.pscufs.com
members.pscufs.com
mygiftcard.pscufs.com
fg.pscufs.com
apps4.pscufs.com
vpn.pscufs.com
securemail.pscufs.com
enrollment.pscufs.com
vpn.pscufs.com
payrollprepaid.pscufs.com
apps4.pscufs.com
saswww.pscufs.com
payrollprepaid.pscufs.com
apps.pscufs.com
sapwebprod.pscufs.com
esmcert.pscufs.com
mbanking.pscufs.com
popmoney.pscufs.com

Certificate

The complete raw certificate details for email.pscufs.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4g+cx4J/VVr7ZGiZhBq
aS6aDsJG/CZvGmwpL/64iVPe3m4r8cUqEhtk8fqotwvcFqoI703VWGyY1diBPgRp
JhKq51olYVF5GekDT8XAbPdxpl5thfCUpq+GEmzSBMbVEN628hE0YTufkN/havVq
88qRU9GK1ZWfLLS85NCoeoV+oV+NukfUG4zaUk/JKSac+snIapqW8o5LargsemTF
rqYHVFYv+gTsrUjF0UByP++ZXvEzPL9iXaMDIVQ/dbMugzkB5/I/XvFxD1waIY6v
0Uf3NkFdJxw+qg6EnQg6pfoAAqbuq9mH1CxXI6Eu9KFtM7WURYpI16eS6Y2WdXCF
8QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7957670373276926751821997889168639554
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert Inc'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.digicert.com'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DigiCert High Assurance CA-3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2010-11-01 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2012-11-04 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Florida'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'St. Petersburg'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'PSCU Financial Services Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'email.pscufs.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26198513520782396332023160633998865928609339753655912196347407281782436893006620225728246010928935285809767476402815600582826596241018520101502351807515366654032766451390490283560233741031674275878722162370841777949326315496274191689241415939511562533598329627215538472955684645429665399652275282986167756371281497182907632163927152829904855363648629118672167223766822068712252128865127859649512105235972259731685118544296325505903364631424579154530901800820171336453320324145366809177592554391946868621836502402642146819653791500140974624176508369594009342646552681059330475831999957430250201062569236860660400293361
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 50ea7389db29fb108f9ee50120d4de79994883f7
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							3a13bbf71146f6b43e32f17d409da74d59c74403
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (103 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'email.pscufs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.pscufs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.pscufs.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2k3-cashub.pscu.root.corp'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'p2k3-cashub'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (111 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.digicert.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://cacerts.digicert.com/DigiCertHighAssuranceCA-3.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (94 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl3.digicert.com/ca3-2010h.crl'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl4.digicert.com/ca3-2010h.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (445 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.16.840.1.114412.1.3.0.1 (digiCertGlobalCAPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://www.digicert.com/ssl-cps-repository.htm'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [0 65 0 110 0 121 0 32 0 117 0 115 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 105 0 115 0 32 0 67 0 101 0 114 0 116 0 105 0 102 0 105 0 99 0 97 0 116 0 101 0 32 0 99 0 111 0 110 0 115 0 116 0 105 0 116 0 117 0 116 0 101 0 115 0 32 0 97 0 99 0 99 0 101 0 112 0 116 0 97 0 110 0 99 0 101 0 32 0 111 0 102 0 32 0 116 0 104 0 101 0 32 0 68 0 105 0 103 0 105 0 67 0 101 0 114 0 116 0 32 0 67 0 80 0 47 0 67 0 80 0 83 0 32 0 97 0 110 0 100 0 32 0 116 0 104 0 101 0 32 0 82 0 101 0 108 0 121 0 105 0 110 0 103 0 32 0 80 0 97 0 114 0 116 0 121 0 32 0 65 0 103 0 114 0 101 0 101 0 109 0 101 0 110 0 116 0 32 0 119 0 104 0 105 0 99 0 104 0 32 0 108 0 105 0 109 0 105 0 116 0 32 0 108 0 105 0 97 0 98 0 105 0 108 0 105 0 116 0 121 0 32 0 97 0 110 0 100 0 32 0 97 0 114 0 101 0 32 0 105 0 110 0 99 0 111 0 114 0 112 0 111 0 114 0 97 0 116 0 101 0 100 0 32 0 104 0 101 0 114 0 101 0 105 0 110 0 32 0 98 0 121 0 32 0 114 0 101 0 102 0 101 0 114 0 101 0 110 0 99 0 101 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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