sjdc-gissmonjob.us.trendnet.org

- Trend Micro Inc. -

Issued by AffirmTrust Extended Validation CA - EV1

About this certificate

This digital certificate with serial number 33:69:eb:c6:00:ad:81:f6:00:00:00:00:58:07:e6:aa was issued on by AffirmTrust.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Trend Micro Inc.

Company registration number: C1919248
Organization: Trend Micro Inc.
State / Province: Texas
Locality: Irving
Country: US

AffirmTrust

Organization: AffirmTrust
Organization unit: See www.affirmtrust.com/repository
Country: CA

This certificate has expire since

Certificate Details

Serial Number (hex): 33:69:eb:c6:00:ad:81:f6:00:00:00:00:58:07:e6:aa
Serial Number (int): 68340601008819660275946996480103409322
Serial Number lenght: 126 bits, 16 octets

SubjectKeyId: 86:a9:a2:bd:f7:b3:df:0d:e3:33:74:d1:89:27:ed:3c:0d:ef:ad:39
AuthorityKeyId: db:ef:65:37:0b:e5:47:cb:35:d1:90:1f:03:c1:bc:88:c7:a7:ea:80

Fingerprint (sha1): 92:1a:64:d8:e5:f8:97:e1:2d:9b:82:1e:bd:b5:84:bc:f8:6c:3c:d4
Fingerprint (sha256): 42:fb:6c:63:df:67:40:63:7a:5c:9a:a5:16:ca:bb:29:a4:b8:6b:be:5e:64:7b:a3:ed:b8:e8:77:e1:ed:dc:35

Issuing Certificate URL: http://aia.affirmtrust.com/aftev1ca.crt

Revocation information

OCSP Server: http://ocsp.affirmtrust.com
CRL Distribution Point: http://crl.affirmtrust.com/crl/aftev1ca.crl

Check the revocation status for certificate sjdc-gissmonjob.us.trendnet.org

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for sjdc-gissmonjob.us.trendnet.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

sjdc-gissmonjob.us.trendnet.org

Other certificates including the domain name trendnet.org

(limited to 100 certificates)
*.trendnet.org
liberalapi-tmp.sdi.trendnet.org
phvm-is-radius3.ph.trendnet.org
ca-ets-labvcenter.us.trendnet.org
phvm-gsd-sslaut.ph.trendnet.org
edc2kafkazk2.eu.trendnet.org
*.trendnet.org
*.trendnet.org
SJDC-NAV17WEBS2.us.trendnet.org
ie-lansweep-01.eu.trendnet.org
aws-billingapi.plsstg.trendmicro.com
edc2kafkaschema.eu.trendnet.org
SJDC-KAFKABK5.us.trendnet.org
*.trendnet.org
*.us.trendnet.org
jdc2-ise01.jp.trendnet.org
hubstg.trendmicro.com
sjc1-gfr-vip2.sdi.trendnet.org
itk8sd.tw.trendnet.org
us-ets-nexusproxystg.us.trendnet.org
PHVM-IS-AACTI.ph.trendnet.org
us-ets-fs01.us.trendnet.org
nj-594-rdgw.tw.trendnet.org
sjdc-infosec-arcmc.us.trendnet.org
horusapi-ibeta.sdi.trendnet.org
virtualsharesstg.trendnet.org
sjc1-tmus-ops.sdi.trendnet.org
virusRDP2.tw.trendnet.org
tw-ets-rgw06.tw.trendnet.org
ca-ot-yogi.us.trendnet.org
hrfoundation.trendnet.org
senna.aptinfra.tw.trendnet.org
nj-ets-labfs.tw.trendnet.org
*.terra-stg-vtr.vtr.trendnet.org
eunavposita.eu.trendnet.org
*.vtr.trendnet.org
infra.mars.trendmicro.com
minionapi-tmp.sdi.trendnet.org
de-ddwi-01.eu.trendnet.org
*.sdi.trendnet.org
kallitest.us.trendnet.org
*.us.trendnet.org
SJDC-KAFKAAPI1.us.trendnet.org
sjdc-scssoapp.us.trendnet.org
tw-ets-rgw08.tw.trendnet.org
virtualshares.trendnet.org
nj-ets-fs.tw.trendnet.org
SJDC-KAFKABK2.us.trendnet.org
tw-ets-rg03.tw.trendnet.org
kkbox.tw.trendnet.org
sjdc-nabuintapp.us.trendnet.org
cloudcntr.sdi.trendnet.org
OCSEG.TRENDNET.ORG
adc-lcmweb01.tw.trendnet.org
pr2g.baplsstg.trendmicro.com
EDC2VMNAVSITB18.eu.trendnet.org
nj-ets-labfs.tw.trendnet.org
regalpha.trendnet.org
apollo-reports.eu.trendnet.org
login-tmp.trendmicro.com
sjdckafkabk.us.trendnet.org
mybuddiy.us.trendnet.org
NJ-ETS-MSDN.TW.TRENDNET.ORG
ddan.tw.trendnet.org
SJDC-NAV17WEBS1.us.trendnet.org
tw-ets-vra.tw.trendnet.org
tw-ets-rg03.tw.trendnet.org
aws-iapi.plsbeta.trendmicro.com
phvm-gsd-sslaut.ph.trendnet.org
tw-ets-jksgw3.tw.trendnet.org
tw-magw.tw.trendnet.org
tw-ets-fs.tw.trendnet.org
aws-billingapi.plsprod.trendmicro.com
nj-ets-rgw.tw.trendnet.org
hrfoundation.trendmicro.com
aws-emsapi.plsprod.trendmicro.com
dozer.aptinfra.tw.trendnet.org
OCSEG.TRENDNET.ORG
submit.aptinfra.tw.trendnet.org
EDC2NAVSTG021.eu.trendnet.org
driapi-beta.sdi.trendnet.org
tw.trendnet.org
threatsearch.tw.trendnet.org
analyze.aptinfra.tw.trendnet.org
lmpi-beta.sdi.trendnet.org
edc2kafkazk5.eu.trendnet.org
TW-ETS-LABFS.tw.trendnet.org
tw-ets-ddwi.tw.trendnet.org
edc2kafkastream1.eu.trendnet.org
us-ets-nexusproxy.us.trendnet.org
aws-sdiadapter.plsbeta.trendmicro.com
edc2kafkazk4.eu.trendnet.org
tw-ds-labfs.tw.trendnet.org
SJDC-NABURADIUS.us.trendnet.org
www.vrli-sjdc.trendmicro.com
nj-rdsec-msdn.tw.trendnet.org
sjdc-gissmonjob.us.trendnet.org
sjdc-selenium.us.trendnet.org
pr2g-beta.trendnet.org
SJDC-KAFKAAPI2.us.trendnet.org

Certificate

The complete raw certificate details for sjdc-gissmonjob.us.trendnet.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2Ajq5KB5ilV1k+qOmZ5
me2FQASY0OD+9wXg4HWDH4JyV0tO5qqOT7dgLbaHSh+pTXehcPvjmJsX++Y4Xs5U
Nr6DoG7vmhg0/cYv7CumwXgVBMSyYsUlL1drglSPmZlJsC/b36fMiIzh8lb31G/T
dz/WtEkUpdGLj5pjPW+zJ8VcN0GdF/fGIelJ5kO+kpBc1TlhXzZns0p9T4Jvyw42
sln39C5T/wzmHNOvw/SfkPZwljYrxlGE6uH/4e1ogJC0lwjeGCwV4+O+HjaJabhI
KU/TMwshJAAZZKuj+DyqOECKZTI9u+mPtRRyWKK2lCTulXM+T2qBIETS4d4c8LIg
qQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 68340601008819660275946996480103409322
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CA'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.affirmtrust.com/repository'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'AffirmTrust Extended Validation CA - EV1'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2018-03-27 10:03:11 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-27 10:33:09 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Texas'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Irving'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.2 (jurisdictionOfIncorporationSP)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'California'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Trend Micro Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Private Organization'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'C1919248'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'sjdc-gissmonjob.us.trendnet.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 26178737201841496650477466678919029001135408317092751800819397832603457933046075912507555201996817079891093780934839932082766933947976823855496393535642470060069341940468834594713262797060952367773879451799638137980653221123706501436377427594324674057213058202070332408037782698989525456756437277749702735041042233300066508877172722065365354241805090026795222544493700630103431480891640218106975804323404712327995125509017716551235323961781022962803119379317332256960958566573047913264908523832602530807569451800648008421923233718843316409781202844078315191866034833589524351766615438951077972198181824720292663140521
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (35 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'sjdc-gissmonjob.us.trendnet.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (96 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.affirmtrust.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.affirmtrust.com/aftev1ca.crt'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.34697.2.1 (AffirmTrust EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.affirmtrust.com/repository'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.affirmtrust.com/crl/aftev1ca.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName dbef65370be547cb35d1901f03c1bc88c7a7ea80
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							86a9a2bdf7b3df0de33374d18927ed3c0defad39
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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