www.ssi.com.vn

- Saigon Securities Incorporation -

Issued by GlobalSign Extended Validation CA - SHA256 - G2

About this certificate

This digital certificate with serial number 6d:6a:f3:3e:35:58:cd:02:cc:84:57:40 was issued on by GlobalSign nv-sa.

With 9 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Saigon Securities Incorporation

Company registration number: 03/GPHDKD
Organization: Saigon Securities Incorporation
Organization unit: IT Department
Address: 72 Nguyen Hue, Ben Nghe Ward, District 1
State / Province: Ho Chi Minh
Locality: Ho Chi Minh
Country: VN

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 6d:6a:f3:3e:35:58:cd:02:cc:84:57:40
Serial Number (int): 33863160890003280771164690240
Serial Number lenght: 95 bits, 12 octets

SubjectKeyId: 9c:1f:c9:4e:00:86:05:d2:e2:3d:42:bc:83:71:6e:bc:fe:48:cf:dd
AuthorityKeyId: da:40:77:43:65:1c:f8:fe:a7:e3:f4:64:82:3e:4d:43:13:22:31:02

Fingerprint (sha1): f9:01:ac:80:7a:82:21:f2:5e:0b:af:ed:89:52:45:a3:e2:a3:d0:37
Fingerprint (sha256): 3a:00:9e:78:13:70:b9:29:46:e8:ad:9d:af:d9:bf:e2:f9:9a:99:e4:92:f6:24:bd:ee:4b:e7:aa:0e:8f:4e:12

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g2
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g2.crl

Check the revocation status for certificate www.ssi.com.vn

9

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.ssi.com.vn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.ssi.com.vn
owa.ssi.com.vn
mail.ssi.com.vn
autodiscover.ssi.com.vn
papi.ssi.com.vn
mapi.ssi.com.vn
mts.ssi.com.vn
mailgateway.ssi.com.vn
ssi.com.vn

Other certificates including the domain name ssi.com.vn

(limited to 100 certificates)
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
meeting.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
webtrading.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
mail.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
tracking.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn
wt-snapshot-afd.ssi.com.vn
*.ssi.com.vn
www.ssi.com.vn
meeting.ssi.com.vn
smarttrading.ssi.com.vn
*.ssi.com.vn
*.ssi.com.vn

Certificate

The complete raw certificate details for www.ssi.com.vn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAee0S2PQM2zbu1JDOlo
BWl+gvkf4xok/+1lHOqbrKuUGIPu8rCjFnnH5ljDn6DxLsEJwcq2VE2c3MfOnq6s
fg61YR6RtXDiBxG8cPeWwsGs5thXJf7QY5zDeFUaBVN1rlN5WCbZBbNbwX1zkEty
LK3g16qQHMKjuuKr4zevyp7nHbgaaqrzYds5ueXWwwOQTtNjLPosidek8HPHHeB8
1rDCPxxzu9XUFQGBN9A/or0hy6Q2Oq/qk71TY/ticvV6mhqGbbPIqtQ4nx9X1SXL
I4B+qlZuPHDUI40RJeL0r9O9+uBUvIG9ErrV9EwW6Jzs95ZXUEPU+8VYn2Di8Seo
vwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 33863160890003280771164690240
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-01-08 02:02:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2015-10-22 08:00:54 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '03/GPHDKD'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'VN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Ho Chi Minh'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '72 Nguyen Hue, Ben Nghe Ward, District 1'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'IT Department'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Saigon Securities Incorporation'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.ssi.com.vn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22726652642977829770406575231485691335810536366153662585602573515198711816912843738817275480569422499059309516732602926810300815032752061287548656499096720479576425081996248107703362351595294430878167521352141431321083562118980637196240545720731027624719151772660435316607744654206374833766393473846280775349346960816331123266150305846860639058082784715260203261868514249820681999691125435132399913074957800387094638369772434642720232828460417835156314966135744567099151345363840329283328555568114295718107248524341292609263989637868833898907363321373940905605740915706919216286497475868169701727542816411389505546431
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g2.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (135 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g2r2.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g2'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (163 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'owa.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mail.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'autodiscover.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'papi.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mapi.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mts.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'mailgateway.ssi.com.vn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'ssi.com.vn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9c1fc94e008605d2e23d42bc83716ebcfe48cfdd
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName da407743651cf8fea7e3f464823e4d4313223102
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (484 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (480 bytes)
							01de00750068f698f81f6482be3a8ceeb9281d4cfc71515d6793d444d10a67acbb4f4ffbc40000014ac746f91500000403004630440220022c99a92daaf522fc3239f529174193d4a72c9296b20a47156d1f5e541b49a00220318bdbf17b9e8c353f393d43c5fff0690669f6d2a52bf2aa776832c41349b87d007500a4b90990b418581487bb13a2cc67700a3c359804f91bdfb8e377cd0ec80ddc100000014ac747003c000004030046304402202ff74d204bc8188e9a7305181d3cb9575d5db836f46bfa2c7b6a117f36dfe060022017d34cd8924aadc53b46940f6e0fa2e92f533a9bc43d2a7499604d0ef513197a007600ee4bbdb775ce60bae142691fabe19e66a30f7e5fb072d88300c47b897aa8fdcb0000014ac7470cbd00000403004730450221009f54634ab53504c45a3b3f0272fe82015aad930bc5a54db4329fe8a8541d15200220743c1c244890e70af610f26df73cec61812469f2dd01eccf05b631a1ffd2c3630076005614069a2fd7c2ecd3f5e1bd44b23ec74676b9bc99115cc0ef949855d689d0dd0000014ac74711380000040300473045022100f79045f384677107a598b6d7808379a0234265010ed7153673e55ccfa77c85fd0220589155e8c8d423223a3fe85567e6530c11eed485cad7c40505296f247f638f22
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		001da5984a23cb79ec9598d8eb1392404994c9f6f56de77a5759cd6f575b55186b036412131654c0fc3d56c7549e4ee831cf68c1fd146b2c8f5c3c2617a7f38a015394eae6055a8e49a9d17f11cae254f733d0f864f4e6ebe9f335044265eaa39e8a2532c6aa1a16b008abd9a4a96c412bca5f690a5ce1e6922e43538e46341773838912f0dd5cd1ac2d343efb706bcfe26546384008212ffb6355f3250bf5438964283dc3c072a97db368a99cb665687ae384357c13bf83cd0765d6e7fdb77d832d4ff6163991bd8cd939105cb71552b5b7c37eaa026b82a1b09be91c6e86c22ce361e73fb4d3b95bf2c2fbf4edb7b34309e4b18847e5fae5fdd471a96fef736c