anrmaps.vermont.gov

- State of Vermont -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 04:77:d9:8d:bd:e6:c8:94:d3:c5:7a:e2 was issued on by GlobalSign nv-sa.

With 26 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

State of Vermont

Organization: State of Vermont
State / Province: Vermont
Locality: Montpelier
Country: US

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 04:77:d9:8d:bd:e6:c8:94:d3:c5:7a:e2
Serial Number (int): 1382829580021063312092789474
Serial Number lenght: 91 bits, 12 octets

SubjectKeyId: 9e:d8:dc:a1:50:f8:31:09:32:4e:56:e6:a1:57:67:bc:c8:bd:d7:fc
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 88:46:40:dd:37:a9:a5:df:c6:ac:08:1f:1f:f2:76:83:c1:de:e6:7d
Fingerprint (sha256): 3a:d6:39:2a:a4:b1:ec:b1:6d:2c:4a:71:58:87:b7:e4:70:c7:2c:b8:36:30:ac:3d:e1:35:90:d6:d0:75:b7:53

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018
CRL Distribution Point: http://crl.globalsign.com/gsrsaovsslca2018.crl

Check the revocation status for certificate anrmaps.vermont.gov

26

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for anrmaps.vermont.gov

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

anrmaps.vermont.gov
anrmaps.vt.gov
anrinside.vt.gov
anroutside.vt.gov
anrweb.vt.gov
anrintra.vt.gov
anronline.vt.gov
anrnode.anr.state.vt.us
securevtstateparks.com
vtstateparks.com
www.vtstateparks.com
enb.vt.gov
anronlinetest.vt.gov
spoconceptsearch.vt.gov
www.spoconceptsearch.vt.gov
leadresults.vt.gov
anrinside.vermont.gov
anroutside.vermont.gov
anrweb.vermont.gov
anrintra.vermont.gov
anronline.vermont.gov
enb.vermont.gov
anronlinetest.vermont.gov
spoconceptsearch.vermont.gov
leadresults.vermont.gov
www.spoconceptsearch.vermont.gov

Other certificates including the domain name vermont.gov

(limited to 100 certificates)
dhriu.vermont.gov
www.myvtax.vermont.gov
inside.vermont.gov
www.vermont.gov
ssl7.revizesites.com
anrmaps.vermont.gov
ismstg.apps.vermont.gov
*.healthconnect.vermont.gov
list.vermont.gov
ljfo.vermont.gov
e911ags.vermont.gov
usaherds.vermont.gov
matsdev.vtrans.vermont.gov
maps.vcgi.vermont.gov
1moreconversation.com
inside.vermont.gov
dev.maps.vcgi.vermont.gov
employerreporting.vermont.gov
gpnh.ngesi.vermont.gov
selfserve.education.state.vt.us
cloud.agriculture.vermont.gov
railtrails.vermont.gov
gs.tax.vermont.gov
*.professionals.vermont.gov
anrgeodata.vermont.gov
secure.vermont.gov
eoc.vermont.gov
1moreconversation.com
bedboard.vermont.gov
slds.education.vermont.gov
staging.mydmv.vermont.gov
geodata.vermont.gov
rms.vermont.gov
cloud.agriculture.vermont.gov
*.hsep.vermont.gov
ssl7.revizesites.com
anrgeodata.vermont.gov
legislature.vermont.gov
apps.health.vermont.gov
uipublic01.labor.vermont.gov
ACCDMaps.Vermont.gov
anrmaps.vermont.gov
list.vermont.gov
www.vermont.gov
Inside.Vermont.Gov
*.id.vermont.gov
peacham.vermont.gov
grants.vermont.gov
www.staging.vtpics.vermont.gov
edwa.vermont.gov
cloud.agriculture.vermont.gov
agriculturegrants.vermont.gov
maps.vermont.gov
secure.accd.vermont.gov
WebDBMS.ngesi.vermont.gov
preprod.slds.vermont.gov
anrmaps.vermont.gov
gs.vtrans.vermont.gov
*.healthconnect.vermont.gov
vtlottery.com
my.vermont.gov
retire.vermont.gov
ljfo.vermont.gov
apps.health.vermont.gov
bedboard.vermont.gov
dev.maps.vcgi.vermont.gov
legislature.vermont.gov
ssl7.revizesites.com
uipublic.labor.vermont.gov
maps.vermont.gov
1moreconversation.com
*.id.vermont.gov
sos.vermont.gov
*.hsep.vermont.gov
ssl7.revizesites.com
roadsidemarkers.vermont.gov
design.education.vermont.gov
*.ngesi.vermont.gov
childcareproviders.vermont.gov
160.166.tmcapital.com
*.apps.vermont.gov
vitws.labor.vermont.gov
www.usaplants.vermont.gov
test.slds.vermont.gov
www.rms.vermont.gov
cloud.agriculture.vermont.gov
ssl7.revizesites.com
*.professionals.vermont.gov
*.hsep.in.vermont.gov
maps.vcgi.vermont.gov
infotest.my.vermont.gov
www.vermont.gov
uipublic.labor.vermont.gov
apps.health.vermont.gov
dualenrollment.vermont.gov
ljfo.vermont.gov
lobbying.vermont.gov
orc.vermont.gov
*.hsep.vermont.gov
dev-dfr.gs.vermont.gov

Certificate

The complete raw certificate details for anrmaps.vermont.gov in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----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-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 1382829580021063312092789474
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-08-13 20:48:05 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-02-03 18:25:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Montpelier'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'State of Vermont'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'anrmaps.vermont.gov'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 905866629226587320259008998764543858373466833957355735479266324840045400052955532279235874122847442999658782289801055818074252154808334544888418050708040375226627897698590513305477075904461283198747989255558143559583470644211263181488799048054292612845022317856759632698088484662874320371025489412372891857658981301141421358378758504356260668489160755580144884348310343456448674118824563840141306714947618821518448425584731425739076842284272101802151381570499994596828143448071410319355315543899123970115099221960425808453539747550614788182406692808358340302929152485247497722923012836688406205238088065371975848995981177116428155861740544859516695352487773943725112160101369992450205989101087241986886339506234893908506471582144070842341457255985319091413152217945464934429396277518506662535521958562360831863329782224428072019691105096158075549344765345842554111451083584621151831900030311672394663005476581025507978772619149650595441098973387601778857476013163751151568003394591056648319928317527280413774181830721112118587998048613132462665512415035663284174180340138457647957471040117895723335333214916053659522221460686253692536267100310819014392592864674402135243861153088411341874229867511165554550540603715113850992746145081
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsrsaovsslca2018.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (570 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrmaps.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrmaps.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrinside.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anroutside.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrweb.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrintra.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anronline.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrnode.anr.state.vt.us'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'securevtstateparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vtstateparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vtstateparks.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enb.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anronlinetest.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoconceptsearch.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoconceptsearch.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadresults.vt.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrinside.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anroutside.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrweb.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anrintra.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anronline.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'enb.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'anronlinetest.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'spoconceptsearch.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'leadresults.vermont.gov'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.spoconceptsearch.vermont.gov'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							9ed8dca150f83109324e56e6a15767bcc8bdd7fc
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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