mail.crosscert.com

- CrossCert -

Issued by CrossCert Class 1 Server CA

About this certificate

This digital certificate with serial number 7b:3b:c4:fe:00:00:3f:52 was issued on by CrossCert.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates MUST contain the Subject Alternate Name extension (BRs: 7.1.4.2.1)
  • CAs MUST NOT issue certificates that have authority key IDs that include both the key ID and the issuer's issuer name and serial number (Mozilla Root Store Policy / Section 5.2)
  • Subscriber Certificate: authorityInformationAccess MUST contain the HTTP URL of the Issuing CA's OSCP responder. (BRs: 7.1.2.3)
  • Subscriber certificate cRLDistributionPoints extension must contain the HTTP URL of the CA’s CRL service (BRs: 7.1.2.3)
  • Subscriber certificates MUST have the extended key usage extension present (BRs: 7.1.2.3)
  • The common name field in subscriber certificates must include only names from the SAN extension (BRs: 7.1.4.2.2)
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • Compliant certificates should use the utf8string encoding for explicitText (RFC 6818: 3)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

CrossCert

Organization: CrossCert
Organization unit: AccreditedCA
Organization unit: SSL
Organization unit: 000
Country: KR

CrossCert

Organization: CrossCert
Organization unit: AccreditedCA
Country: KR

This certificate has expire since

Certificate Details

Serial Number (hex): 7b:3b:c4:fe:00:00:3f:52
Serial Number (int): 8879907685491818322
Serial Number lenght: 63 bits, 8 octets

SubjectKeyId: 1c:d4:9e:a1:a3:f5:74:57:c3:fe:a6:87:88:5d:f8:08:16:d3:f5:f8
AuthorityKeyId: 6d:b8:ff:92:5c:b1:bf:e9:49:78:31:7c:80:75:c0:62:10:4b:bd:38

Fingerprint (sha1): b6:4b:52:99:2b:53:a8:d3:d7:fd:7c:bd:3f:01:73:6c:98:dc:05:7f
Fingerprint (sha256): 38:91:30:20:53:ee:c7:9a:08:0d:eb:13:f4:fe:6a:1e:38:80:d3:12:1a:35:32:52:40:49:86:a9:14:3e:21:a4

Issuing Certificate URL: ldap://ssl.crosscert.com:389/cn=CrossCert Class 1 Server CA,ou=AccreditedCA,o=CrossCert,c=KR?cACertificate;binary

Revocation information

CRL Distribution Point: ldap://ssldir.crosscert.com:389/cn=s1dp6p4,ou=crldp,ou=AccreditedCA,o=CrossCert,c=KR?certificateRevocationList

Check the revocation status for certificate mail.crosscert.com

0

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for mail.crosscert.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA1 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Extensions

6 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

This certificate doesn't contain any subject alternative names.

Other certificates including the domain name crosscert.com

(limited to 100 certificates)
test1.crosscert.com
ebill.crosscert.com
www.crosscert.com
board.crosscert.com
dr-raadmin.crosscert.com
raadmin.crosscert.com
support2.cdnetworks.net
www.crosscert.com
hm.crosscert.com
support2.cdnetworks.net
marketing-picc.crosscert.com
www.crosscert.com
support2.cdnetworks.net
marketing-unisign.crosscert.com
raadmin.crosscert.com
testraadmin.crosscert.com
onsite.crosscert.com
support2.cdnetworks.net
auth.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
*.crosscert.com
onsite-admin.crosscert.com
support11b.cdnetworks.net
digitalid.crosscert.com
svn.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
digitalid.crosscert.com
aa-ttp.crosscert.com
mpki-admin.crosscert.com
*.crosscert.com
support2.cdnetworks.net
crmra.crosscert.com
support2.cdnetworks.net
cert.crosscert.com
pcsprelay3.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
support11b.cdnetworks.net
*.crosscert.com
onsite-admin.crosscert.com
raadmin.crosscert.com
billing.crosscert.com
onsite.crosscert.com
crmra.crosscert.com
support11b.cdnetworks.net
test.crosscert.com
marketing-etrade.crosscert.com
1.crosscert.com
fidoserver3.crosscert.com
marketing-picc.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
*.crosscert.com
mpki.crosscert.com
support2.cdnetworks.net
*.crosscert.com
marketing-g2b.crosscert.com
testhmkim.crosscert.com
support2.cdnetworks.net
1dy.crosscert.com
digitalid.crosscert.com
star.crosscert.com
raadmin.crosscert.com
support11b.cdnetworks.net
auth.crosscert.com
www.crosscert.com
billing.crosscert.com
cm-test2.crosscert.com
support2.cdnetworks.net
kecacrl.crosscert.com
mail.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
support2.cdnetworks.net
m.crosscert.com
support11b.cdnetworks.net
support2.cdnetworks.net
cert.crosscert.com
support2.cdnetworks.net
support2.cdnetworks.net
onsite-admin.crosscert.com
support11b.cdnetworks.net
fidotestserver.crosscert.com
api.crosscert.com
*.crosscert.com
eeapi.crosscert.com
www.crosscert.com
raadmin.crosscert.com
ev-rsa.crosscert.com
chatapp.crosscert.com
support2.cdnetworks.net
onsite.crosscert.com
board.crosscert.com
support2.cdnetworks.net
support11b.cdnetworks.net

Certificate

The complete raw certificate details for mail.crosscert.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfUhZSxfOZhpO3RJYbUB
/3REESjb6ddKLgYJ+TsDa+gdbymVpdsrHZdZRXdHlQ46eI7n8H8X0b0WOx6AV5zt
zYRYkknC9ae7FIUSBCp17egXgK37a2cSmkBL3iFbINbM9n07MDgxUtfSxzIfPKy6
aP4uUQDzUPDFWw8h2qviGOWOjd23ZnHYChaPqeMvOnLzosXPGbBzF+IEC9Tj/zF6
4BwpH2BGdkp0cP+J/JK6ypaeVg8SAOgLmPtgI7PJN+Bj+wi3Q+FA69E6wNWWlJB/
E+x4He8unQA03El4a1YbA4tC87Krvmc7fuadKaEN5QCYRK36bWEHX9gA0oqjzF4t
nwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 8879907685491818322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AccreditedCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert Class 1 Server CA'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2014-11-06 00:10:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-11-06 14:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'CrossCert'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'AccreditedCA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SSL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '000'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'mail.crosscert.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 18425432550186571579814311646790015715058841199896566905301886605800304243017598248732724433955842728278896189445588799608343886576868418845148194136971012043224492852593350198769710906554837126948465867036861616460400685779456828847597663962379921901970107527170814166369040337862500044926181794299727260097289692813527167042149376374618040592307823926079199523294371239031993138597209804295427018829611855432999150028669015073317292092985625613833187218873534016137739413100394901229446063545381880680091825513435504853790314041807402749873680424632497436533725872362780685678151419769495806073963439771678203063711
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6db8ff925cb1bfe94978317c8075c062104bbd38
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:1|true] IA5String 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:4|true] Name 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'KR'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KISA'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Korea Certification Authority Central'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'KISA RootCA 1'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String ''�'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							1cd49ea1a3f57457c3fea687885df80816d3f5f8
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (116 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.410.200004.5.4.6
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'http://gca.crosscert.com/cps.html'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.2 (unotice)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:30|false] BMPString [199 116 0 32 199 120 201 157 193 28 178 148 0 32 198 249 193 28 188 132 0 32 199 120 201 157 193 28 199 133 178 200 178 228 0 46]
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (120 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ssldir.crosscert.com:389/cn=s1dp6p4,ou=crldp,ou=AccreditedCA,o=CrossCert,c=KR?certificateRevocationList'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'ldap://ssl.crosscert.com:389/cn=CrossCert Class 1 Server CA,ou=AccreditedCA,o=CrossCert,c=KR?cACertificate;binary'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.5 (sha1WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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