www.bradesconetempresa.com.br

- BANCO BRADESCO S A -

Issued by GlobalSign RSA OV SSL CA 2018

About this certificate

This digital certificate with serial number 11:d5:90:45:f7:d9:71:0d:8f:d3:11:b6 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

BANCO BRADESCO S A

Organization: BANCO BRADESCO S A
State / Province: SAO PAULO
Locality: OSASCO
Country: BR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate will expire on

Certificate Details

Serial Number (hex): 11:d5:90:45:f7:d9:71:0d:8f:d3:11:b6
Serial Number (int): 5519427677999086597779427766
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 79:e5:65:f5:96:62:db:45:c3:44:a9:ee:56:ae:ac:e5:06:d6:05:d6
AuthorityKeyId: f8:ef:7f:f2:cd:78:67:a8:de:6f:8f:24:8d:88:f1:87:03:02:b3:eb

Fingerprint (sha1): 2b:4e:eb:e3:ca:35:cb:50:42:af:36:da:5f:2f:af:08:b2:2b:e2:89
Fingerprint (sha256): 3a:e2:cf:a7:c8:af:00:f1:c1:a2:84:5f:54:b8:7d:db:ed:8c:5f:fe:85:b2:14:54:0d:a1:a1:5a:c4:49:78:df

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/gsrsaovsslca2018

Check the revocation status for certificate www.bradesconetempresa.com.br

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.bradesconetempresa.com.br

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.bradesconetempresa.com.br
bradesconetempresa.com.br

Other certificates including the domain name bradesconetempresa.com.br

(limited to 100 certificates)
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesco.com.br
www.bradesco.com.br
www.bradesconetempresa.com.br
www.bradesco.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
caempresa.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesco.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
caempresa.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br
bradesconetempresa.com.br
bradesconetempresa.com.br
www.bradesconetempresa.com.br

Certificate

The complete raw certificate details for www.bradesconetempresa.com.br in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGgDCCBWigAwIBAgIMEdWQRffZcQ2P0xG2MA0GCSqGSIb3DQEBCwUAMFAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSYwJAYDVQQDEx1H
bG9iYWxTaWduIFJTQSBPViBTU0wgQ0EgMjAxODAeFw0yMzA5MDExOTM2MDJaFw0y
NDEwMDIxOTM2MDFaMHcxJjAkBgNVBAMTHXd3dy5icmFkZXNjb25ldGVtcHJlc2Eu
Y29tLmJyMRswGQYDVQQKExJCQU5DTyBCUkFERVNDTyBTIEExDzANBgNVBAcTBk9T
QVNDTzESMBAGA1UECBMJU0FPIFBBVUxPMQswCQYDVQQGEwJCUjCCASIwDQYJKoZI
hvcNAQEBBQADggEPADCCAQoCggEBALxO2+WM3r0ZzgqGU08H4YNeohfl3D7yQVrq
c409F2k9g+5PY8GpkjCTAVjXJL291TLKkjfb4khrE/4U6fgCsgEVDtosjC2XN3Fq
6G0shpZwuQRP0I4YcX2I43dl1YFRj5IeY3lCZ+r4ZMY69rkm1lkidcxx5M7D3e8W
5TilMqSqSB6BqQyexQaD5MwaLmaRhDDyqP1k0LB9WIrfo8hEXVwKFKwcm3uVTeHX
CIG1+KILDFjRooj1TVT6rXEJ7o0sxAPevPiM4F8xY0pqosh0M/ZaiKTFEui+hiUs
SpPec8BtBUbEDWNlTqifGhbOZpDmQNKeF8qlw+/I+7y2A+mF4tkCAwEAAaOCAzEw
ggMtMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGOBggrBgEFBQcBAQSB
gTB/MEQGCCsGAQUFBzAChjhodHRwOi8vc2VjdXJlLmdsb2JhbHNpZ24uY29tL2Nh
Y2VydC9nc3JzYW92c3NsY2EyMDE4LmNydDA3BggrBgEFBQcwAYYraHR0cDovL29j
c3AuZ2xvYmFsc2lnbi5jb20vZ3Nyc2FvdnNzbGNhMjAxODBWBgNVHSAETzBNMEEG
CSsGAQQBoDIBFDA0MDIGCCsGAQUFBwIBFiZodHRwczovL3d3dy5nbG9iYWxzaWdu
LmNvbS9yZXBvc2l0b3J5LzAIBgZngQwBAgIwQwYDVR0RBDwwOoIdd3d3LmJyYWRl
c2NvbmV0ZW1wcmVzYS5jb20uYnKCGWJyYWRlc2NvbmV0ZW1wcmVzYS5jb20uYnIw
HQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPjvf/LN
eGeo3m+PJI2I8YcDArPrMB0GA1UdDgQWBBR55WX1lmLbRcNEqe5WrqzlBtYF1jCC
AX4GCisGAQQB1nkCBAIEggFuBIIBagFoAHcA7s3QZNXbGs7FXLedtM0TojKHRny8
7N7DUUhZRnEftZsAAAGKUj7YpAAABAMASDBGAiEA4ruhcVEwuagiXAtFMQNS7TGk
3L1niE0VGlYpgceITBMCIQD+DZAeNsfQ4IyGdaN3OtNRUTkRyeYsm/3sLiTOnAeZ
ZgB2AEiw42vapkc0D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABilI+1XQAAAQD
AEcwRQIhALLTBJXqoBDblih8YLkzJR0oh5zdz125T+sa/cUox3wtAiAIQ8UfW7qp
6YjnZWUJR+nUY14hL+xQlwtiNNJXQbleBwB1ANq2v2s/tbYin5vCu1xr6HCRcWy7
UYSFNL2kPTBI1/urAAABilI+1ZMAAAQDAEYwRAIgIUOHakgIzqVRTGH8DgheiM59
+6O30cvPjzQpsxdbeIECICithUfyyNqdAwHrPhxtX4K3e6F3ayTJCLp/pAfLZHjK
MA0GCSqGSIb3DQEBCwUAA4IBAQCK5YCq14htWVb8ozzU0esW5lnywvo5BT9Q827A
mzqxf2waBMngJdqgj+8tRBrSFDbr0nxyX9m/942PuvcZXeT36xe/uLuOnXShu8X0
Xkd7aZzpdAFgfOTxD6QVz+WV77+ziWRHPDUR++rH2Ob/DucKtSLU7DP3NJvh5EWI
zWlX4sJBfhTJjC6L1WDbxz8SspO6Klq66Lco7NsuM4xgnSkSc9F8KsmoZk32P6Ad
/FvZcGnsVweYhSjsomdy/0KMMO2RFMFwAmUgrAfayMBxtX7k+58ZHF9nMoRbxVgy
iztdZhm+Hk/8pCMUjmWxxC+I0WNcLXz2LHEOU8W5c4B7xos1
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvE7b5YzevRnOCoZTTwfh
g16iF+XcPvJBWupzjT0XaT2D7k9jwamSMJMBWNckvb3VMsqSN9viSGsT/hTp+AKy
ARUO2iyMLZc3cWrobSyGlnC5BE/QjhhxfYjjd2XVgVGPkh5jeUJn6vhkxjr2uSbW
WSJ1zHHkzsPd7xblOKUypKpIHoGpDJ7FBoPkzBouZpGEMPKo/WTQsH1Yit+jyERd
XAoUrBybe5VN4dcIgbX4ogsMWNGiiPVNVPqtcQnujSzEA968+IzgXzFjSmqiyHQz
9lqIpMUS6L6GJSxKk95zwG0FRsQNY2VOqJ8aFs5mkOZA0p4XyqXD78j7vLYD6YXi
2QIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 5519427677999086597779427766
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign RSA OV SSL CA 2018'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-09-01 19:36:02 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-10-02 19:36:01 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.bradesconetempresa.com.br'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BANCO BRADESCO S A'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'OSASCO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'SAO PAULO'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BR'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 23771688141752087552587184656602527300228300441175259262194490262261950111484338470483831301992000024978697819210372363117440587900690417138342337002298155353846674767970735401985050874247326134625866135101509069781580481192378314475849968535720698644092701442241486438038234256417178310182432492165369937323614665527798811132604269125898042426689105120772577855170541851242093136906134521017870488919872438098978690171926177291332025004355080205023985657653598132218420102883131126530013247178748508424047973164388084056765897230676384850256894499247753701446859577355948518782815335143169274737450907134641786184409
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (129 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsrsaovsslca2018.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsrsaovsslca2018'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.20 (globalsignOVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (60 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.bradesconetempresa.com.br'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'bradesconetempresa.com.br'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8ef7ff2cd7867a8de6f8f248d88f1870302b3eb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							79e565f59662db45c344a9ee56aeace506d605d6
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (366 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (362 bytes)
							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
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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