*.cq2oss.xstore.ctyun.cn

Issued by SHECA DV Server CA G5

About this certificate

This digital certificate with serial number 4f:8f:94:d6:1b:b9:44:0b:9a:5c:e9:6e:75:46:c3:4f was issued on by UniTrust.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

Certificate Subject

CN=*.cq2oss.xstore.ctyun.cn

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 4f:8f:94:d6:1b:b9:44:0b:9a:5c:e9:6e:75:46:c3:4f
Serial Number (int): 105754528877807020686834672988712256335
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: 37:10:99:e9:47:5f:21:26:54:b7:53:90:35:40:58:de:6c:9d:83:ce
AuthorityKeyId: d8:e7:06:1b:64:5f:ab:30:08:88:7a:24:53:aa:e1:1c:83:04:bf:6d

Fingerprint (sha1): 8b:74:9b:e7:08:7f:92:71:48:a9:3a:da:d5:db:ac:68:39:68:b9:2f
Fingerprint (sha256): 34:bf:48:e1:c5:44:f7:45:36:02:78:b7:5b:58:95:fc:a6:02:09:26:bf:8e:15:e1:33:1d:cf:ab:ac:81:f8:d4

Issuing Certificate URL: http://certs.global.sheca.com/dvscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/dvscag5
CRL Distribution Point: http://crl.global.sheca.com/dvscag5.crl

Check the revocation status for certificate *.cq2oss.xstore.ctyun.cn

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.cq2oss.xstore.ctyun.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.cq2oss.xstore.ctyun.cn
cq2oss.xstore.ctyun.cn

Other certificates including the domain name ctyun.cn

(limited to 100 certificates)
*.tjoss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.nm2oss.xstore.ctyun.cn
*.cqoss.xstore.ctyun.cn
*.hangzhou7.zos.ctyun.cn
*.hubei-41-website.zos.ctyun.cn
*.js2oss.xstore.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.ctyun.cn
*.ahoss.xstore.ctyun.cn
*.yichang2.website.zos.ctyun.cn
*.shandong-20.zos.ctyun.cn
*.snoss.xstore.ctyun.cn
*.ctyun.cn
*.xinan2-website.zos.ctyun.cn
*.shanghai-7.zos.ctyun.cn
*.liveplay.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hn6oss.xstore.ctyun.cn
*.hainan-2.zos.ctyun.cn
*.jiujiang-2.zos.ctyun.cn
*.huaihua1.zos.ctyun.cn
*.guangxi-5.zos.ctyun.cn
*.vaas.ctyun.cn
*.zhejiang-4.zos.ctyun.cn
*.ctapi.ctyun.cn
*.hb5oss.xstore.ctyun.cn
*.xinan2.zos.ctyun.cn
ctyun.cn
*.obs.ctyun.cn
*.hubei-41.zos.ctyun.cn
*.xzoss.xstore.ctyun.cn
*.yunnan-2.zos.ctyun.cn
*.sn2oss.xstore.ctyun.cn
*.changzhou3.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.ynoss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.gx3oss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
*.gzoss.xstore.ctyun.cn
*.js4oss.xstore.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.hn5oss.xstore.ctyun.cn
*.zhengwu-beijing-1-website.zos.ctyun.cn
ctyun.cn
*.jiangsu-10.zos.ctyun.cn
*.fjoss.xstore.ctyun.cn
*.shenyang8-website.zos.ctyun.cn
*.ctyun.cn
*.changsha42-website.zos.ctyun.cn
*.zhanjiang2.website.zos.ctyun.cn
*.jx2oss.xstore.ctyun.cn
*.guangdong-3.zos.ctyun.cn
*.snxaoss.xstore.ctyun.cn
*.sichuan-2.zos.ctyun.cn
*.huabei-2-website.zos.ctyun.cn
*.huaihua1.website.zos.ctyun.cn
*.nantong2-website.zos.ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.gxoss.xstore.ctyun.cn
*.cq2oss.xstore.ctyun.cn
*.sxoss.xstore.ctyun.cn
*.beijing9.zos.ctyun.cn
*.ah3oss.xstore.ctyun.cn
*.zhengzhou5-website.zos.ctyun.cn
*.zj3oss.xstore.ctyun.cn
*.hn2oss.xstore.ctyun.cn
ctyun.cn
*.yangqi-shanghai-1-website.zos.ctyun.cn
*.suzhou3.zos.ctyun.cn
*.guangxi-5-website.zos.ctyun.cn
*.xstore.ctyun.cn
*.shoss.xstore.ctyun.cn
*.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.taiyuan4-website.zos.ctyun.cn
*.hloss.xstore.ctyun.cn
*.jiangsu-10-website.zos.ctyun.cn
*.hb3oss.xstore.ctyun.cn
*.hioss.xstore.ctyun.cn
*.liaoning-5.zos.ctyun.cn
*.wulumuqi27-website.zos.ctyun.cn
*.shandong-20-website.zos.ctyun.cn
*.hubei-4.zos.ctyun.cn
*.yunnan-2.zos.ctyun.cn
naas.huaweicloud.com
*.xiangyang2.zos.ctyun.cn
*.hunan-4.zos.ctyun.cn
*.fujian-25.zos.ctyun.cn
*.gz4oss.xstore.ctyun.cn
*.nm4oss.xstore.ctyun.cn
*.hboss.xstore.ctyun.cn
*.cn-nmhh1.ctyun.cn
*.hn2oss.xstore.ctyun.cn
*.chongqing-2.zos.ctyun.cn
*.nanchang5.zos.ctyun.cn
*.hn3oss.xstore.ctyun.cn

Certificate

The complete raw certificate details for *.cq2oss.xstore.ctyun.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGBTCCBO2gAwIBAgIQT4+U1hu5RAuaXOludUbDTzANBgkqhkiG9w0BAQsFADBA
MQswCQYDVQQGEwJDTjERMA8GA1UECgwIVW5pVHJ1c3QxHjAcBgNVBAMMFVNIRUNB
IERWIFNlcnZlciBDQSBHNTAeFw0yMzExMDYwODE5MDRaFw0yNDEyMDYxNTU5NTla
MCMxITAfBgNVBAMMGCouY3Eyb3NzLnhzdG9yZS5jdHl1bi5jbjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALhEUTsftwry379/U2ReOLR9h7J5BxStBc0O
8OnKjLaIu1MzkiqapEs2hKIl6KZ0xmUDgHQi0B7fxTGtaP4AEMw7HvfSAVVB+E8x
incWe0HHkVX3leMtplt7cnymybYPFaVSzI2azbxAbwnT0xKtkaEdeefohc5qRX8s
NcAuBViYvozOBgU2jbK2h+E9bs9FbXGiAoGWHNj9r/RNAJFFvE58n4pQdQNV5BRl
gXs7ipPCMLfdWx7wBqix7qjSSTACFYnLkGp10alYFvVmGMfAgzqImsMnvgCk34Vc
jVWsqxXgcv/W3NDhERdA8Mru7u8XugESY5gYt/ws82YFq05BO2MCAwEAAaOCAxYw
ggMSMIIBfwYKKwYBBAHWeQIEAgSCAW8EggFrAWkAdQDuzdBk1dsazsVct520zROi
ModGfLzs3sNRSFlGcR+1mwAAAYujtsefAAAEAwBGMEQCIHh4p9rjWsIVYN+hQNOJ
/gIsg7pWbxuwnpbLJtbpthTIAiBlpVk4BGu9uBLmAs++H2fTgnJM0yAhaJq0tCm7
GOc0dgB3AHb/iD8KtvuVUcJhzPWHujS0pM27KdxoQgqf5mdMWjp0AAABi6O2yn4A
AAQDAEgwRgIhAL2wbwbS6Kay3pKj/3BMNZdi4W/tIR2VCNCNvXXWrJqZAiEA+r4m
z2PPSV65oyeMLdJ23Uo7ikfNdCa3ce1M0QfqQ/YAdwBVgdTCFpA2AUrqC5tXPFPw
wOQ4eHAlCBcvo6odBxPTDAAAAYujtsg2AAAEAwBIMEYCIQDT3GnaiApbeNhaYpiL
qxGAM/wh8EXxvlxwaJagKIhvYgIhAJaV8Flk6kvZXP64Ve05T859bUhGwmU7IcJX
xMCBrDqUMHcGCCsGAQUFBwEBBGswaTAwBggrBgEFBQcwAYYkaHR0cDovL29jc3Au
Z2xvYmFsLnNoZWNhLmNvbS9kdnNjYWc1MDUGCCsGAQUFBzAChilodHRwOi8vY2Vy
dHMuZ2xvYmFsLnNoZWNhLmNvbS9kdnNjYWc1LmNlcjAfBgNVHSMEGDAWgBTY5wYb
ZF+rMAiIeiRTquEcgwS/bTA7BgNVHREENDAyghgqLmNxMm9zcy54c3RvcmUuY3R5
dW4uY26CFmNxMm9zcy54c3RvcmUuY3R5dW4uY24wHQYDVR0OBBYEFDcQmelHXyEm
VLdTkDVAWN5snYPOMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMCAGA1Ud
IAQZMBcwCwYJKoEchu86AQEBMAgGBmeBDAECATA4BgNVHR8EMTAvMC2gK6Aphido
dHRwOi8vY3JsLmdsb2JhbC5zaGVjYS5jb20vZHZzY2FnNS5jcmwwHQYDVR0lBBYw
FAYIKwYBBQUHAwEGCCsGAQUFBwMCMA0GCSqGSIb3DQEBCwUAA4IBAQAzRAHXdMti
hfQ30LI9GEQQzyBJiZiAOVXB9GIMTtNx58UKALOGOCQEqpA0GcIzRPVPxMexgZzh
2DYO8Fb1qA5oRV1gyUrvbHlaXT8618j6J0KjN0TT9/ujE23J7dh4h7hasZFeTEi7
2J2jVW5BrcS4jpV77IZ0pm+P3zZg+LDQRr3BKmDd3mvDKVKuA1jJe9E9ZzqXuDDp
cArcljvGLPGAuGlASx9SqOgP3IJ5xRCvPikkjU4w2GmrnmVuZgOV83jurqSsLmib
EqIy6N/qcIqDgzhvnPLN+YqLuVWN7yvc2ZpCaIi/XHuGj1c7t0PU9T2HX+2vXJve
0jFIkvS+/LG+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuERROx+3CvLfv39TZF44
tH2HsnkHFK0FzQ7w6cqMtoi7UzOSKpqkSzaEoiXopnTGZQOAdCLQHt/FMa1o/gAQ
zDse99IBVUH4TzGKdxZ7QceRVfeV4y2mW3tyfKbJtg8VpVLMjZrNvEBvCdPTEq2R
oR155+iFzmpFfyw1wC4FWJi+jM4GBTaNsraH4T1uz0VtcaICgZYc2P2v9E0AkUW8
TnyfilB1A1XkFGWBezuKk8Iwt91bHvAGqLHuqNJJMAIVicuQanXRqVgW9WYYx8CD
Ooiawye+AKTfhVyNVayrFeBy/9bc0OERF0Dwyu7u7xe6ARJjmBi3/CzzZgWrTkE7
YwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105754528877807020686834672988712256335
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA DV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-11-06 08:19:04 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-12-06 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.cq2oss.xstore.ctyun.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23261536634119572044626380365820741021115091031028589085591140173408279126930823126340767504469277495755575613270459936209350011682334710115715260575205299261441724828300682038357127527657699129283577741229984216349844869950496936857128509332236192034691104117856179856616036595482185111810915794415214402485568141312632680073598034198580110780124929218030730388461703262779895019496162541724076090660691116049007273003485121759416519685337073699272579856499841104138659127726255448353108415114917902017926612481958498903479230505915041067663751968256106453499947709125777250169902187533355520060889118800448273333091
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/dvscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/dvscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d8e7061b645fab3008887a2453aae11c8304bf6d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (52 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.cq2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'cq2oss.xstore.ctyun.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							371099e9475f212654b75390354058de6c9d83ce
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.1
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/dvscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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