*.tz.bspb.ru
Issued by GlobalSign GCC R3 DV TLS CA 2020
About this certificate
This digital certificate with serial number 6e:c3:9e:08:0a:b4:c5:fe:80:1e:69:26 was issued on by GlobalSign nv-sa.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=*.tz.bspb.ru
GlobalSign nv-sa
Organization:
GlobalSign nv-sa
Country:
BE
This certificate will expire on
Certificate Details
Serial Number (hex): 6e:c3:9e:08:0a:b4:c5:fe:80:1e:69:26Serial Number (int): 34279837897422515375462836518
Serial Number lenght: 95 bits, 12 octets
SubjectKeyId: d7:af:aa:39:bf:9a:37:88:29:63:ed:c9:fb:ea:bc:90:88:08:ea:ad
AuthorityKeyId: 0d:98:c0:73:7f:ab:bd:bd:d9:47:4b:49:ad:0a:4a:0c:ac:3e:c7:7c
Fingerprint (sha1): 14:98:b9:60:ae:e4:33:1a:fb:43:68:f3:1d:85:e3:a0:20:a5:f9:fe
Fingerprint (sha256): 3e:75:0a:23:f6:c0:29:a6:a4:b7:90:3d:8b:ba:c7:cd:df:6b:55:00:d1:e1:ff:65:7c:d9:f6:1f:bd:c9:59:02
Issuing Certificate URL: http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt
Revocation information
OCSP Server: http://ocsp.globalsign.com/gsgccr3dvtlsca2020CRL Distribution Point: http://crl.globalsign.com/gsgccr3dvtlsca2020.crl
Check the revocation status for certificate *.tz.bspb.ru
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for *.tz.bspb.ru
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Client Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
*.tz.bspb.ru
tz.bspb.ru
tz.bspb.ru
Other certificates including the domain name bspb.ru
(limited to 100 certificates)
acsemb.bspb.ru
www.bspb.ru
acskapital.bspb.ru
travel.bspb.ru
exchange.bspb.ru
acsconst.bspb.ru
exchange.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ise.bspb.ru
ibank.bspb.ru
acs.bspb.ru
www.bspb.ru
ap.bspb.ru
chat-test.bspb.ru
www.bspb.ru
*.tz.bspb.ru
travel.bspb.ru
www.bspb.ru
sbk.bspb.ru
exchange.bspb.ru
mpitest.bspb.ru
acskapital.bspb.ru
wab2.bspb.ru
acsemb.bspb.ru
smsap.bspb.ru
vts.bspb.ru
*.dev.qdlocal.bspb.ru
i.bspb.ru
acs.bspb.ru
mpi.bspb.ru
vpn.bspb.ru
sbk.bspb.ru
promo.bspb.ru
fx.bspb.ru
acskapital.bspb.ru
acsonego.bspb.ru
acsemb.bspb.ru
acstest.bspb.ru
acsalex.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
credit.bspb.ru
acscity.bspb.ru
pg.bspb.ru
srv-expe.bspb.ru
credit.bspb.ru
response.sas-sendsay.bspb.ru
mpi.bspb.ru
mpitest.bspb.ru
acs.bspb.ru
acsonego.bspb.ru
acscity.bspb.ru
srv-expe.bspb.ru
itogi2023.bspb.ru
itest.bspb.ru
travel.bspb.ru
sbk.bspb.ru
*.tz.bspb.ru
dp.bspb.ru
www.bspb.ru
icabinet.bspb.ru
*.test1.qdlocal.bspb.ru
acstest.bspb.ru
*.test1.qdlocal.bspb.ru
exchange.bspb.ru
acsemb.bspb.ru
kas.bspb.ru
dom.bspb.ru
fx.bspb.ru
confluence.bspb.ru
i.bspb.ru
acsemb.bspb.ru
sbk.bspb.ru
pgtest.bspb.ru
promo.bspb.ru
acsemb.bspb.ru
sip.bspb.ru
mpitest.bspb.ru
idemo.bspb.ru
acsalex.bspb.ru
sbk.bspb.ru
acs.bspb.ru
acs.bspb.ru
mpitest.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ap.bspb.ru
acscity.bspb.ru
acsconst.bspb.ru
acscity.bspb.ru
acsemb.bspb.ru
www.bspb.ru
acsemb.bspb.ru
m.bspb.ru
sbk.bspb.ru
mpi.bspb.ru
capsule.bspb.ru
acscity.bspb.ru
acs.bspb.ru
www.bspb.ru
acskapital.bspb.ru
travel.bspb.ru
exchange.bspb.ru
acsconst.bspb.ru
exchange.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ise.bspb.ru
ibank.bspb.ru
acs.bspb.ru
www.bspb.ru
ap.bspb.ru
chat-test.bspb.ru
www.bspb.ru
*.tz.bspb.ru
travel.bspb.ru
www.bspb.ru
sbk.bspb.ru
exchange.bspb.ru
mpitest.bspb.ru
acskapital.bspb.ru
wab2.bspb.ru
acsemb.bspb.ru
smsap.bspb.ru
vts.bspb.ru
*.dev.qdlocal.bspb.ru
i.bspb.ru
acs.bspb.ru
mpi.bspb.ru
vpn.bspb.ru
sbk.bspb.ru
promo.bspb.ru
fx.bspb.ru
acskapital.bspb.ru
acsonego.bspb.ru
acsemb.bspb.ru
acstest.bspb.ru
acsalex.bspb.ru
acsemb.bspb.ru
fx.bspb.ru
credit.bspb.ru
acscity.bspb.ru
pg.bspb.ru
srv-expe.bspb.ru
credit.bspb.ru
response.sas-sendsay.bspb.ru
mpi.bspb.ru
mpitest.bspb.ru
acs.bspb.ru
acsonego.bspb.ru
acscity.bspb.ru
srv-expe.bspb.ru
itogi2023.bspb.ru
itest.bspb.ru
travel.bspb.ru
sbk.bspb.ru
*.tz.bspb.ru
dp.bspb.ru
www.bspb.ru
icabinet.bspb.ru
*.test1.qdlocal.bspb.ru
acstest.bspb.ru
*.test1.qdlocal.bspb.ru
exchange.bspb.ru
acsemb.bspb.ru
kas.bspb.ru
dom.bspb.ru
fx.bspb.ru
confluence.bspb.ru
i.bspb.ru
acsemb.bspb.ru
sbk.bspb.ru
pgtest.bspb.ru
promo.bspb.ru
acsemb.bspb.ru
sip.bspb.ru
mpitest.bspb.ru
idemo.bspb.ru
acsalex.bspb.ru
sbk.bspb.ru
acs.bspb.ru
acs.bspb.ru
mpitest.bspb.ru
mpi.bspb.ru
mpi.bspb.ru
ap.bspb.ru
acscity.bspb.ru
acsconst.bspb.ru
acscity.bspb.ru
acsemb.bspb.ru
www.bspb.ru
acsemb.bspb.ru
m.bspb.ru
sbk.bspb.ru
mpi.bspb.ru
capsule.bspb.ru
acscity.bspb.ru
acs.bspb.ru
Certificate
The complete raw certificate details for *.tz.bspb.ru in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIE3jCCA8agAwIBAgIMbsOeCAq0xf6AHmkmMA0GCSqGSIb3DQEBCwUAMFMxCzAJ BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMSkwJwYDVQQDEyBH bG9iYWxTaWduIEdDQyBSMyBEViBUTFMgQ0EgMjAyMDAeFw0yNDAyMTkxMjQwNDRa Fw0yNTAzMjIxMjQwNDNaMBcxFTATBgNVBAMMDCoudHouYnNwYi5ydTCCASIwDQYJ KoZIhvcNAQEBBQADggEPADCCAQoCggEBAMMHZQPQGwaB4DT/cr0PkTXbmY+quXXT LG/AJWLNMeoKVIh8L7CwcIB2kORxYfjHKf1aoWR/4oFSeTrJzO55vGTEvvXd+IRd f32/Q0ns43shcyboSxViVk0iGiFRtmIeotYpEWipbY9O+Q7rcVj5gcupMTQqX8st 26rzaWz/oFWi1KC/2Qz0aH+Q177Y9vDesklqE8gxYXZl47HvKrfFefUkvQ3CKTFV 1IEldxr/nn/2nWL0x3hQ77fiT0OZrLUyonMtJwRzjTXdaEGv4ScxZbXsU9DsQrNf 8c5kop/tFfTsGzYjeKYlopVFt5cYL3mxsstD5TTi5t0BNGPJexJC2F8CAwEAAaOC AewwggHoMA4GA1UdDwEB/wQEAwIFoDAMBgNVHRMBAf8EAjAAMIGTBggrBgEFBQcB AQSBhjCBgzBGBggrBgEFBQcwAoY6aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNv bS9jYWNlcnQvZ3NnY2NyM2R2dGxzY2EyMDIwLmNydDA5BggrBgEFBQcwAYYtaHR0 cDovL29jc3AuZ2xvYmFsc2lnbi5jb20vZ3NnY2NyM2R2dGxzY2EyMDIwMFYGA1Ud IARPME0wQQYJKwYBBAGgMgEKMDQwMgYIKwYBBQUHAgEWJmh0dHBzOi8vd3d3Lmds b2JhbHNpZ24uY29tL3JlcG9zaXRvcnkvMAgGBmeBDAECATBBBgNVHR8EOjA4MDag NKAyhjBodHRwOi8vY3JsLmdsb2JhbHNpZ24uY29tL2dzZ2NjcjNkdnRsc2NhMjAy MC5jcmwwIwYDVR0RBBwwGoIMKi50ei5ic3BiLnJ1ggp0ei5ic3BiLnJ1MB0GA1Ud JQQWMBQGCCsGAQUFBwMBBggrBgEFBQcDAjAfBgNVHSMEGDAWgBQNmMBzf6u9vdlH S0mtCkoMrD7HfDAdBgNVHQ4EFgQU16+qOb+aN4gpY+3J++q8kIgI6q0wEwYKKwYB BAHWeQIEAwEB/wQCBQAwDQYJKoZIhvcNAQELBQADggEBAAqOh6tnn4um5MRjc3XY YD8XI38rJQ9gsGPGJ0coRIVxVSmDnb1vXrwl1ldDNJmPwGOY81yVTpt474k2N23o xhpZn7IX4l7UptNKXZNlUGSGEtJuXRzyKvqt338tKLnllUrkte33bV7csnse+9xU CFt/0Ci3iGUBXozmB8pdVDkin3yk0T9rhp37lqXqhsfyn3XXRa+taEIEBvsBgd5X iyJpx0fxCmbuw/sP9HWB/2FjBJMV5JatH3IaaBj/HURcwnVOc5ypg6dINldbtTfW 2GaXgzuNPGBtfRGw2t6oNkdUiKWKB7IxX5U6jfv+Oz9qrmTj8xIzbk6dzo3BGuK4 QLg= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwwdlA9AbBoHgNP9yvQ+R NduZj6q5ddMsb8AlYs0x6gpUiHwvsLBwgHaQ5HFh+Mcp/VqhZH/igVJ5OsnM7nm8 ZMS+9d34hF1/fb9DSezjeyFzJuhLFWJWTSIaIVG2Yh6i1ikRaKltj075DutxWPmB y6kxNCpfyy3bqvNpbP+gVaLUoL/ZDPRof5DXvtj28N6ySWoTyDFhdmXjse8qt8V5 9SS9DcIpMVXUgSV3Gv+ef/adYvTHeFDvt+JPQ5mstTKicy0nBHONNd1oQa/hJzFl texT0OxCs1/xzmSin+0V9OwbNiN4piWilUW3lxgvebGyy0PlNOLm3QE0Y8l7EkLY XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 34279837897422515375462836518 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign GCC R3 DV TLS CA 2020' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-02-19 12:40:44 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-03-22 12:40:43 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String '*.tz.bspb.ru' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24620115876333059727086214340259090123999169856603879253837898310423934935006742879664685191765629373175087976406626756459388366534935931441679699905118930939598953348939112097054916362609677003844397942162356437496410459637369819451514942551822309159883891807361056802679802291439629102685462138625064273367898137223409963919622998397384676006491910977617733101711749965422521870017784810098845724282651830598119065907610501707781525121055233460067605549848191877582090802853709623884932585680306966663301414593054723550087784446192899810514702170301168386274130347754483966405366226730781957719147018081763116374111 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (134 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsgccr3dvtlsca2020.crt' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.globalsign.com/gsgccr3dvtlsca2020' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (58 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsgccr3dvtlsca2020.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (28 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.tz.bspb.ru' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'tz.bspb.ru' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 0d98c0737fabbdbdd9474b49ad0a4a0cac3ec77c . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) d7afaa39bf9a37882963edc9fbeabc908808eaad . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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