*.eos-fujian-1.cmecloud.cn

- 中移（苏州）软件技术有限公司 -

Issued by SHECA OV Server CA G5

About this certificate

This digital certificate with serial number 4f:56:ea:85:7d:ba:4c:c8:9d:d0:4c:db:51:e8:be:1f was issued on by UniTrust.

With 4 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
  • Apple recommends that certificates be issued with a maximum validity of 397 days. TLS server certificates issued on or after September 1, 2020 00:00 GMT/UTC should not have a validity period greater than 397 days (https://support.apple.com/en-us/HT211025)

中移（苏州）软件技术有限公司

Organization: 中移（苏州）软件技术有限公司
State / Province: 江苏省
Locality: 苏州市
Country: CN

UniTrust

Organization: UniTrust
Country: CN

This certificate will expire on

Certificate Details

Serial Number (hex): 4f:56:ea:85:7d:ba:4c:c8:9d:d0:4c:db:51:e8:be:1f
Serial Number (int): 105460305856946067054180125060612275743
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: ca:f9:d4:ed:f9:df:96:28:38:9e:fc:c2:04:30:6f:1a:bf:6a:93:3f
AuthorityKeyId: 03:79:a3:8d:52:5f:d4:e9:88:92:1f:43:58:54:25:02:f4:87:8b:7e

Fingerprint (sha1): 6a:99:69:23:9c:ab:58:38:32:6c:48:24:12:af:1c:15:c4:fc:22:21
Fingerprint (sha256): 3b:72:90:08:70:e9:6c:b8:74:a7:18:0b:28:cc:0d:08:7f:09:6e:5a:4e:66:71:76:0b:93:0b:bf:44:04:5c:3a

Issuing Certificate URL: http://certs.global.sheca.com/ovscag5.cer

Revocation information

OCSP Server: http://ocsp.global.sheca.com/ovscag5
CRL Distribution Point: http://crl.global.sheca.com/ovscag5.crl

Check the revocation status for certificate *.eos-fujian-1.cmecloud.cn

4

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.eos-fujian-1.cmecloud.cn

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.eos-fujian-1.cmecloud.cn
eos-fujian-1.cmecloud.cn
*.eos-fujian-1-internal.cmecloud.cn
eos-fujian-1-internal.cmecloud.cn

Other certificates including the domain name cmecloud.cn

(limited to 100 certificates)
*.eos.xian-4.cmecloud.cn
*.eos.nanning-2.cmecloud.cn
*.eos.hangzhou-zs-1.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ningxia-1.cmecloud.cn
*.eos.huhehaote-11.cmecloud.cn
smp.ecso.hnzkh-1.cmecloud.cn
console.ecso.jsha-1.cmecloud.cn
*.eos.ecso.jscz-1.cmecloud.cn
*.cidc-rp-2159.xjaksxczwwwq1.joint.cmecloud.cn
*.eos.guiyang-5.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
console.ecs.hnzkh-1.cmecloud.cn
*.ahmashcso1.joint.cmecloud.cn
*.obs.cqdjmdyhlwq1.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.obs.joint.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.cmecloud.cn
console-beijing-1.cmecloud.cn
cidc-rp-13.joint.cmecloud.cn
*.eos.ecs.hnzkh-1.cmecloud.cn
*.eos.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.sdly-1.cmecloud.cn
*.eos.ecso.jxnc-1-internal.cmecloud.cn
*.eos.anhui-3.cmecloud.cn
*.ecis.zs-guian-1.cmecloud.cn
*.smp.ecs.jswx-1.cmecloud.cn
*.eos.ecs.jswx-1.cmecloud.cn
*.obs.cqyczwwwq1.joint.cmecloud.cn
*.eos-tianjin-1.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.eos-xinjiang-1.cmecloud.cn
*.eos.chongqing-4.cmecloud.cn
*.cidc-rp-2121.fjptmzzlzhcso1.joint.cmecloud.cn
*.obs.cidc-rp-2005.joint.cmecloud.cn
*.eos-guiyang-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.tjbhylyhcso2.joint.cmecloud.cn
*.jsycdthlwq1.joint.cmecloud.cn
*.xjbzzwwwq1.joint.cmecloud.cn
*.eos-huhehaote-6.cmecloud.cn
*.eos-jinan-3.cmecloud.cn
*.obs.tjshnwqhcso2.joint.cmecloud.cn
*.obs.cidc-rp-11.joint.cmecloud.cn
smp.ecs.jswx-1.cmecloud.cn
*.ecis.zs-nanjing-1.cmecloud.cn
*.ecis.huabei-3.cmecloud.cn
*.eos-ningbo-3.cmecloud.cn
smp.ecs.hnzkh-1.cmecloud.cn
*.smp.ecso.jsnj2-1.cmecloud.cn
*.obs.jsycdthlwq1.joint.cmecloud.cn
*.eos.nanjing-zs-1.cmecloud.cn
*.eos.chongqing-4-internal.cmecloud.cn
*.ecis.zs-qingdao-1.cmecloud.cn
*.eos.ecs.hnld-1-internal.cmecloud.cn
*.eos-chengdu-6.cmecloud.cn
*.eos-guiyang-4.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.eos-beijing-1.cmecloud.cn
*.eos.ecs.hnzkz-1.cmecloud.cn
*.ecis.zs-shanghai-1.cmecloud.cn
console.ecso.jsnj-3.cmecloud.cn
*.eos.ecso.jsxy-1.cmecloud.cn
*.eos.hainan-hw-1.cmecloud.cn
*.eos-guangxi-1.cmecloud.cn
*.lygrmxchcso1.joint.cmecloud.cn
*.eos.huhehaote-12.cmecloud.cn
*.cidc-rp-2140.jsycdthlwq1.joint.cmecloud.cn
*.ecis.zs-beijing-1.cmecloud.cn
*.obs-website.cidc-rp-11.joint.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.eos.ecs.hbxy-1.cmecloud.cn
portal.zjdx.cmecloud.cn
*.obs.cqychlwq1.joint.cmecloud.cn
*.eos-huanan-1.cmecloud.cn
dingdong.cmecloud.cn
*.eos-hubei-1.cmecloud.cn
*.cidc-rp-2000.joint.cmecloud.cn
*.obs.cidc-rp-2000.joint.cmecloud.cn
*.eos-wuxi-4.cmecloud.cn
*.ecis.zs-guangzhou-1.cmecloud.cn
*.obs.zjjhhyyhcso1.joint.cmecloud.cn
*.obs.fjptmzzlzhcso1.joint.cmecloud.cn
*.eos-fujian-1.cmecloud.cn
*.eos.ecs.xjklmy-1-internal.cmecloud.cn
*.secpool.ecs.hnld-1.cmecloud.cn
cidc-rp-12.joint.cmecloud.cn
*.jsntzwwwq.joint.cmecloud.cn
*.eos-yunnan-2.cmecloud.cn
*.obs.tjbhylyhcso2.joint.cmecloud.cn
*.eos.guiyang-zs-1.cmecloud.cn
*.obs.gdgznshcso1.joint.cmecloud.cn
*.obs.cqbshlwq1.joint.cmecloud.cn
*.eos-jilin-1.cmecloud.cn
*.elasticsearch.cmecloud.cn
*.eos-anhui-1.cmecloud.cn
*.ecis.zs-hangzhou-1.cmecloud.cn
console.ecso.sxya-1.cmecloud.cn
*.cidc-rp-2139.cqcshlwq1.joint.cmecloud.cn

Certificate

The complete raw certificate details for *.eos-fujian-1.cmecloud.cn in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArg4co0DM+fz+jhf82/B5
YXA+DcatyaOx7uWukTxCAfEdgk9JSItWvQP9QfjamGWj0DRUOnoZGFS51JDn1Gbt
sBG/gg+4nJ9KM6D66QAY+FwmWbAWgqA1q3g/Z4mKGXQJU5BbqF2lN159IlwliWyt
SjHAvz7WNpeigbQrr5B8yLI0tl8HtM62e4eq7yXAJY2t5bYUzxA2MflN59LRKvEc
lZfOK1vSieTFrAgaUtFtT8fyOPQNNmSPDSLYIzUMJEtu4QouNu0QMEFZ44p+hobL
Y2MyiciQ5LZ3T1C4yrCV5ICu5Uu00BinFvEVsJuajJUPosrcNA5M49L9ONw2aRyK
pwIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 105460305856946067054180125060612275743
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'UniTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'SHECA OV Server CA G5'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-12-11 03:50:49 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-01-11 15:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CN'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '江苏省'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '苏州市'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '中移（苏州）软件技术有限公司'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.eos-fujian-1.cmecloud.cn'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 21972423884599801191120950087917270058857701836279139871567658349535411601508772822886397634666657204830397391695100406685417569081563792579127602222761685774035470189943620295578802273172356915171015077423236569761617416817564162334761284169636100596620057300724764740975191965960348104619258489918688606956215641596505215587052535384118240799713802094944784501092571531861669082295676068489317005492202951205261529744566245989569500465021052829566641630205517060114353433932744481163209659488091875534414794650219173033329110495135468955461048432798898648024278048480227713089564882233246362888654643095484975844007
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (107 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.global.sheca.com/ovscag5'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://certs.global.sheca.com/ovscag5.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0379a38d525fd4e988921f4358542502f4878b7e
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (128 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-fujian-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-fujian-1.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.eos-fujian-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eos-fujian-1-internal.cmecloud.cn'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							caf9d4edf9df9628389efcc204306f1abf6a933f
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (25 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.156.112570.1.1.2
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (49 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.global.sheca.com/ovscag5.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		0094dfb7bfe127ae23e922a4105cfe58cbc368698a2644196a5f0a0ec27f0093af30ce2e94502290a20a5174e26c49521a6beaca8014054cfe443362ac19a4d912e05823c1abc0aaa215ae8d5cd53f996307d62a15534566f30ab5999ab5d732c4e63f53246e216e74816d4179e70c7f6a2bd9d1838894245c1467406810bc0c3c16a73e8481004fafd85c88a744357b977112855cfdac3cf14f083c94fbf0a234280a5403eb33cb13cf67c7179b20dfea4ede317efa4fc152108b69b47e7772e4ee86eac80ffabc9b04e47e5f059d2569091e6e21577ea7da4ee697ae717f6dfe655bdb19daf62cab66ff071e3415c28fb60048b41cc607b769b6c386d2d998e0