*.vattenfall.se

Issued by AlphaSSL CA - SHA256 - G4

About this certificate

This digital certificate with serial number 3e:37:af:ee:f8:d3:aa:43:14:8a:2f:46 was issued on by GlobalSign nv-sa.

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=*.vattenfall.se

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 3e:37:af:ee:f8:d3:aa:43:14:8a:2f:46
Serial Number (int): 19255392351391652342907154246
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 0d:a4:8e:13:f4:24:e0:d7:f9:eb:e4:d0:8c:9b:aa:8e:df:d3:01:50
AuthorityKeyId: 4f:cb:ac:a8:c2:ef:ab:dd:83:6f:6b:bf:ce:98:3d:5c:58:25:76:15

Fingerprint (sha1): 5c:37:f4:33:ee:73:e0:5e:7c:f4:1b:a4:4c:66:b3:30:4a:d7:1e:d3
Fingerprint (sha256): 3b:df:9a:4c:c8:19:68:3b:72:a1:6c:5e:51:77:b1:a4:b9:81:16:a0:f1:c8:db:83:5c:f8:90:ea:77:ce:b2:76

Issuing Certificate URL: http://secure.globalsign.com/cacert/alphasslcasha256g4.crt

Revocation information

OCSP Server: http://ocsp.globalsign.com/alphasslcasha256g4
CRL Distribution Point: http://crl.globalsign.com/alphasslcasha256g4.crl

Check the revocation status for certificate *.vattenfall.se

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for *.vattenfall.se

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

*.vattenfall.se
vattenfall.se

Other certificates including the domain name vattenfall.se

(limited to 100 certificates)
solcellsguiden.vattenfall.se
bastpocket.vattenfall.se
www.vattenfall.se
ssl418473.cloudflaressl.com
selfserviceapi.vfretail-web-local.vattenfall.se
powerplants.vattenfall.com
autodiscover.vattenfall.com
incharge.vattenfall.se
energyplaza.vattenfall.se
ssl418475.cloudflaressl.com
ssl418475.cloudflaressl.com
heatbusinessportal.vattenfall.se
selfserviceapi.vfretail-web-dev.vattenfall.se
prelive-eshop.vattenfall.se
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
energysiteplus.vattenfall.se
powerplants.vattenfall.com
effektreserven.vattenfall.se
ssl418473.cloudflaressl.com
ssl418473.cloudflaressl.com
hydroinfoportal.vattenfall.se
electricpriceplus.vattenfall.se
webworkplace.vattenfall.se
corporate.vattenfall.se
energyplaza.vattenfall.se
bastpocketpda.vattenfall.se
vcr-tst.goincharge.com
powerplants.vattenfall.com
energyplazaupdates.vattenfall.se
*.vattenfall.se

energifragan.vattenfall.se
ssl418473.cloudflaressl.com
energyplazaupdates.vattenfall.se
preprod-karnkraft.vattenfall.se
www.vattenfall.se
csg.vattenfall.se
*.vattenfall.se
www2.vattenfall.se
auth.vattenfall.se
ssl418475.cloudflaressl.com
vcr.goincharge.com
corporate.vattenfall.se
energibutik.vattenfall.se
ssl418475.cloudflaressl.com
energifragan.vattenfall.se
powerplants.vattenfall.com
preedit-eshop.vattenfall.se
projekt.vattenfall.se
live-energibutik.vattenfall.se
ssl418473.cloudflaressl.com
ssl418474.cloudflaressl.com
fiskevatten.vattenfall.se
kundforum.vattenfall.se
energibutik.vattenfall.se
kundforum.vattenfall.se
www2.vattenfall.se
ssl418475.cloudflaressl.com
ssl418473.cloudflaressl.com
www2.vattenfall.se
solcellsguiden-test.vattenfall.se
www2.vattenfall.se
powerplants.vattenfall.com
edit-eshop.vattenfall.se
webworkplace.vattenfall.se
pihydro.vattenfall.se
vattenfall.se
ssl418475.cloudflaressl.com
energiexperten.vattenfall.se
ssl418475.cloudflaressl.com
powerplants.vattenfall.com
webworkplace.vattenfall.se
demo-energysiteplus.vattenfall.se
*.vattenfall.se
fiskevatten.vattenfall.se
ssl418474.cloudflaressl.com
elements.vattenfall.se
www2.vattenfall.se
kundforum.vattenfall.se
powerplants.vattenfall.com
powerplants.vattenfall.com
vcr.goincharge.com
applications.vattenfall.se
ssl418474.cloudflaressl.com
*.vattenfall.se
ssl418475.cloudflaressl.com
live-energibutik.vattenfall.se
energyplazaupdates.vattenfall.se
vattenfall.se
www.vattenfall.se
hydroinforportaldev.vattenfall.se
energifragan.vattenfall.se
portal-dev.incharge.vattenfall.se
energyplazaupdates.vattenfall.se
oh-acc.vattenfall.se
beta.vattenfall.se
sni.cloudflaressl.com
*.vattenfall.se
applications.vattenfall.se

Certificate

The complete raw certificate details for *.vattenfall.se in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGTDCCBTSgAwIBAgIMPjev7vjTqkMUii9GMA0GCSqGSIb3DQEBCwUAMEwxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSIwIAYDVQQDExlB
bHBoYVNTTCBDQSAtIFNIQTI1NiAtIEc0MB4XDTIzMDEwOTE0NTc1MVoXDTI0MDIx
MDE0NTc1MFowGjEYMBYGA1UEAwwPKi52YXR0ZW5mYWxsLnNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoj34p2cjUPp1HgZC0bwKoTMvfju6LquEWYv
OibN1DSePDQ+c6M3JpjdkctEZ869xg6dpCSkROKKjJ+nFAuLP3944HOjms4+NuSc
C+rO7SSY2eMMvHUEh6NrCDP0XYJ02Meu79yJN30U8mUt9/PnleP/2YzedHFhU1Yn
InasRIKCT+34oPucblIpqW9gP5pHKUZ7q7+Mo/Pq0xRaPmjrwBv1A+85BabvLROt
uEkaWVdM2/HUxC7ZeEhKDgZj9Q7S6SEw4Jtgz3WoWndNZuGLQc3m2U6LKgJU26pV
U3tlwy8e5+4KpbVdPIGGzZ0UVP+aInPSLpvor+TQI4dCjCMPZQIDAQABo4IDXjCC
A1owDgYDVR0PAQH/BAQDAgWgMIGTBggrBgEFBQcBAQSBhjCBgzBGBggrBgEFBQcw
AoY6aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNvbS9jYWNlcnQvYWxwaGFzc2xj
YXNoYTI1Nmc0LmNydDA5BggrBgEFBQcwAYYtaHR0cDovL29jc3AuZ2xvYmFsc2ln
bi5jb20vYWxwaGFzc2xjYXNoYTI1Nmc0MFcGA1UdIARQME4wCAYGZ4EMAQIBMEIG
CisGAQQBoDIKAQMwNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xvYmFsc2ln
bi5jb20vcmVwb3NpdG9yeS8wCQYDVR0TBAIwADBBBgNVHR8EOjA4MDagNKAyhjBo
dHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2FscGhhc3NsY2FzaGEyNTZnNC5jcmww
KQYDVR0RBCIwIIIPKi52YXR0ZW5mYWxsLnNlgg12YXR0ZW5mYWxsLnNlMB0GA1Ud
JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBRPy6yowu+r3YNv
a7/OmD1cWCV2FTAdBgNVHQ4EFgQUDaSOE/Qk4Nf56+TQjJuqjt/TAVAwggF/Bgor
BgEEAdZ5AgQCBIIBbwSCAWsBaQB3AG9Tdqwx8DEZ2JkApFEV/3cVHBHZAsEAKQaN
sgiaN9kTAAABhZcJtEAAAAQDAEgwRgIhAPO7QTgZ+3CGdc7mpYQbld4atHg+cxUd
M+tPgn/OHVzWAiEAtnBKZVGMTc0260bgaQlgOz2Zfc80ueDD8O0fAUmQQJcAdwBz
2Z6JG0yWeKAgfUed5rLGHNBRXnEZKoxrgBB6wXdytQAAAYWXCbZ8AAAEAwBIMEYC
IQDa9yk6ehLQPrbTLbJpBBqhvlxT2rWivmiQ9nzhNYbaqAIhAKcFbwktInd//b/3
pGU7y6FS4sX2bXj49vryKqQ/kmVRAHUA7s3QZNXbGs7FXLedtM0TojKHRny87N7D
UUhZRnEftZsAAAGFlwm2HQAABAMARjBEAiAFGAvvjGBoIwDkyIv20DS/aWKEHG2Q
fHzgHLT3PaBqvQIgQWk4OfnVrYcHZfiwAq79CXyn8+G0odRZgBa9rhB5dP4wDQYJ
KoZIhvcNAQELBQADggEBADv3TO/NcnMuQcUblyRk9NPUOSxc8NRUzkocOO8ClJA0
MmeL4F87NkPdK4L7uHQwCIjxpPHnM4f0wTj8gN0/J/Ru7dlKyVnDZI3IgWWfpAy/
5onB82M3lakL/0ByuTp+hSk6tZSoHJOKCQDjfZ0t8If/koPPopIX5/DJx0z+E68q
b39hIzi/4reg7xsYLJmP3UJQM3dX/cJNkAyhF9euRqP4No9mK8Y97yXfg98CzdaB
QdXcK6YaGT8iuzk6V1B+f4RwwgwBsum44zjhAKsRhlNAxJLRd/nfuDuyRG1JHn1s
HaV9iYsxxz89wcvOcxG3o+ELzGTw4+x174XBtoXiFB8=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoj34p2cjUPp1HgZC0bw
KoTMvfju6LquEWYvOibN1DSePDQ+c6M3JpjdkctEZ869xg6dpCSkROKKjJ+nFAuL
P3944HOjms4+NuScC+rO7SSY2eMMvHUEh6NrCDP0XYJ02Meu79yJN30U8mUt9/Pn
leP/2YzedHFhU1YnInasRIKCT+34oPucblIpqW9gP5pHKUZ7q7+Mo/Pq0xRaPmjr
wBv1A+85BabvLROtuEkaWVdM2/HUxC7ZeEhKDgZj9Q7S6SEw4Jtgz3WoWndNZuGL
Qc3m2U6LKgJU26pVU3tlwy8e5+4KpbVdPIGGzZ0UVP+aInPSLpvor+TQI4dCjCMP
ZQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 19255392351391652342907154246
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AlphaSSL CA - SHA256 - G4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-01-09 14:57:51 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-10 14:57:50 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.vattenfall.se'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 22537959870801951744949664726909770496144316012318496735663752281258883359728830943737212517425392645872923567940804674022474528638874390097293288086063028801783463805273253397826100354492052400886172639377713865777411727012482253754483842458827547473560393861496319211027858470657196637661936606015899238085964141769694290574896415884532222154762091590411756510166948489304345459024326879591376993756169668115131075982394427289474374979559497750532703669360894341133641145502817292421097266750591873611085138422676871364263772037244916245962602838256431850994321728746232449383175661368212066297052644205527587557221
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/alphasslcasha256g4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/alphasslcasha256g4'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (80 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.10.1.3
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/alphasslcasha256g4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (34 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.vattenfall.se'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vattenfall.se'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 4fcbaca8c2efabdd836f6bbfce983d5c58257615
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							0da48e13f424e0d7f9ebe4d08c9baa8edfd30150
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (367 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (363 bytes)
							01690077006f5376ac31f03119d89900a45115ff77151c11d902c10029068db2089a37d913000001859709b4400000040300483046022100f3bb413819fb708675cee6a5841b95de1ab4783e73151d33eb4f827fce1d5cd6022100b6704a65518c4dcd36eb46e06909603b3d997dcf34b9e0c3f0ed1f014990409700770073d99e891b4c9678a0207d479de6b2c61cd0515e71192a8c6b80107ac17772b5000001859709b67c0000040300483046022100daf7293a7a12d03eb6d32db269041aa1be5c53dab5a2be6890f67ce13586daa8022100a7056f092d22777ffdbff7a4653bcba152e2c5f66d78f8f6faf22aa43f926551007500eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b000001859709b61d0000040300463044022005180bef8c60682300e4c88bf6d034bf6962841c6d907c7ce01cb4f73da06abd022041693839f9d5ad870765f8b002aefd097ca7f3e1b4a1d4598016bdae107974fe
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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