gemsotec.com
Issued by GTS CA 1P5
About this certificate
This digital certificate with serial number aa:78:9e:b8:8c:88:fb:4d:13:98:e5:47:06:18:9b:1f was issued on by Google Trust Services LLC.
With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.
We have idenified some issues with this certificate:
- DV certificate contains a subject common name, this is not recommended. If certificate policy 2.23.140.1.2.1 (CA/B BR domain validated) is included, only country and/or common name is allowed in SubjectDN. (BRs: 7.1.2.7.2)
- Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
- Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)
Certificate Subject
CN=gemsotec.com
Google Trust Services LLC
Organization:
Google Trust Services LLC
Country:
US
This certificate will expire on
Certificate Details
Serial Number (hex): aa:78:9e:b8:8c:88:fb:4d:13:98:e5:47:06:18:9b:1fSerial Number (int): 226595054148652659319890484407156906783
Serial Number lenght: 128 bits, 16 octets
SubjectKeyId: b9:9c:17:6f:0a:ae:21:a5:a9:f0:55:90:3b:01:a1:c5:83:1e:be:91
AuthorityKeyId: d5:fc:9e:0d:df:1e:ca:dd:08:97:97:6e:2b:c5:5f:c5:2b:f5:ec:b8
Fingerprint (sha1): b0:2c:aa:5e:06:94:44:9d:67:5c:46:7e:0a:08:0e:51:a0:20:b3:2b
Fingerprint (sha256): 45:00:83:d9:35:b4:25:ae:e2:8f:f1:df:a0:d1:d7:3b:b8:cc:38:db:97:b8:0a:58:36:2a:c5:1d:e3:11:b9:46
Issuing Certificate URL: http://pki.goog/repo/certs/gts1p5.der
Revocation information
OCSP Server: http://ocsp.pki.goog/s/gts1p5/pcvJsvDe6oYCRL Distribution Point: http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl
Check the revocation status for certificate gemsotec.com
2
DNS Names
0
Email Addresses
0
IP Addresses
Advanced Certificate Properties
Tehnical certificate details for gemsotec.com
Public Key Algorithm
RSA
Key Size
2048
Signature Algorithm
SHA256 with RSA
Key Usage
Digital Signature
Key Encipherment
Extended Key Usages
Server Authentication
Extensions
10 extensions
No
unhandled critical extensions
CA Certificate
This is not a CA certificate
Subject Alternative Names
gemsotec.com
*.gemsotec.com
*.gemsotec.com
Other certificates including the domain name gemsotec.com
(limited to 100 certificates)
gemsotec.com
www.mbxr.io
justosiris.com
thebazaar.ml
korona-dezinfekce.cz
skytrackr.com
dev.restamiga.com
www.dev-app.askgenie.io
gemsotec.com
keeptweaking.com
c2-systems.com
yofardev.fr
www.moonlocker.org
kdwyer.dev
livestreamja.com
narita.link
school-dev.handtoy.com
www.gemsotec.com
castlevania.tonycasale.net
nextjsauthdeve.breins.dev
www.postmeta.com
emvento.com
www.prodmmd.com
gemsotec.com
www.sbstnjmnz.com
apoet.co
nordahl.vetspire.com
gemsotec.com
jamesstuddart.co.uk
wealdstone.scouthub.app
*.gemsotec.com
www.davidladleydo.com
gemsotec.com
www.nexusedu.app
www.navramlogistics.com
inventaire-outils.cafedemarie.fr
www.zennetaler.be
guitarnoob.net
hi.notionlayer.com
www.muffut.com
mereaux.org
imedis.io
wastewater.nicd.ac.za
mobile.signally.app
gemsotec.com
encuesta.fundaciondelamujer.com
gemsotec.com
www.schoolswillrockyou.co.uk
wizheard.com
gemsotec.com
gemsotec.com
gemsotec.com
www.lossalvadores.cl
www.housle.house
gemsotec.com
link.hkilter.com
dashboard.foodly.tech
app.oxxio.nl
henesysstudio.com
link.hkilter.com
nordahl.vetspire.com
www.funcionalflow.com
femshare.com
andradev.com.br
teamsports.me
chargefinder.com
kristiedawnbabcock.org
gemsotec.com
jamesstuddart.co.uk
gemsotec.com
gemsotec.com
app.overhq.com
gemsotec.com
orsaydemain.corehab.fr
proresume.in
ismailhsici.com
www.thebothies.com
gemsotec.com
dev.beta.admin.klikkie.com
www.kylecompiles.com
gemsotec.com
georgeshawtoilethire.com
www.pokemonplanner.com
gemsotec.com
fbdnlinks.d405house.com
www.physicalexam.online
demo.intercept.rest
gemsotec.com
wl.ueue.com.au
gemsotec.com
www.unilab.health
anotherclass.net
tog.systemdesign.no
assetstratagem.com
listen.no
gemsotec.com
chargefinder.com
mothr.yachtmoney.io
imedis.io
ismailhsici.com
www.mbxr.io
justosiris.com
thebazaar.ml
korona-dezinfekce.cz
skytrackr.com
dev.restamiga.com
www.dev-app.askgenie.io
gemsotec.com
keeptweaking.com
c2-systems.com
yofardev.fr
www.moonlocker.org
kdwyer.dev
livestreamja.com
narita.link
school-dev.handtoy.com
www.gemsotec.com
castlevania.tonycasale.net
nextjsauthdeve.breins.dev
www.postmeta.com
emvento.com
www.prodmmd.com
gemsotec.com
www.sbstnjmnz.com
apoet.co
nordahl.vetspire.com
gemsotec.com
jamesstuddart.co.uk
wealdstone.scouthub.app
*.gemsotec.com
www.davidladleydo.com
gemsotec.com
www.nexusedu.app
www.navramlogistics.com
inventaire-outils.cafedemarie.fr
www.zennetaler.be
guitarnoob.net
hi.notionlayer.com
www.muffut.com
mereaux.org
imedis.io
wastewater.nicd.ac.za
mobile.signally.app
gemsotec.com
encuesta.fundaciondelamujer.com
gemsotec.com
www.schoolswillrockyou.co.uk
wizheard.com
gemsotec.com
gemsotec.com
gemsotec.com
www.lossalvadores.cl
www.housle.house
gemsotec.com
link.hkilter.com
dashboard.foodly.tech
app.oxxio.nl
henesysstudio.com
link.hkilter.com
nordahl.vetspire.com
www.funcionalflow.com
femshare.com
andradev.com.br
teamsports.me
chargefinder.com
kristiedawnbabcock.org
gemsotec.com
jamesstuddart.co.uk
gemsotec.com
gemsotec.com
app.overhq.com
gemsotec.com
orsaydemain.corehab.fr
proresume.in
ismailhsici.com
www.thebothies.com
gemsotec.com
dev.beta.admin.klikkie.com
www.kylecompiles.com
gemsotec.com
georgeshawtoilethire.com
www.pokemonplanner.com
gemsotec.com
fbdnlinks.d405house.com
www.physicalexam.online
demo.intercept.rest
gemsotec.com
wl.ueue.com.au
gemsotec.com
www.unilab.health
anotherclass.net
tog.systemdesign.no
assetstratagem.com
listen.no
gemsotec.com
chargefinder.com
mothr.yachtmoney.io
imedis.io
ismailhsici.com
Certificate
The complete raw certificate details for gemsotec.com in PEM and ASN.1 format.
Certificate (PEM)
-----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIRAKp4nriMiPtNE5jlRwYYmx8wDQYJKoZIhvcNAQELBQAw RjELMAkGA1UEBhMCVVMxIjAgBgNVBAoTGUdvb2dsZSBUcnVzdCBTZXJ2aWNlcyBM TEMxEzARBgNVBAMTCkdUUyBDQSAxUDUwHhcNMjQwNDMwMDgzMTE2WhcNMjQwNzI5 MDgzMTE1WjAXMRUwEwYDVQQDEwxnZW1zb3RlYy5jb20wggEiMA0GCSqGSIb3DQEB AQUAA4IBDwAwggEKAoIBAQCHhE21l4W4rZo70KFGO5KRD2SGioBlJ2NwWu5yb50t Veh4G5/64AiTRCetIb13Nf0M6yrOGbhXRsdf2Y2idkHl/4M9nxe2PPTySk3EPWwL 7o8+bnyy0LCXgMl1/6/uXraONwqvHTWposhVBSdsvA3vgl0GRthh0ZtQwsDlWI+a BrU5NSQhkSTm7jj8eWRUO+rucobsc3y+QLsKHHQtQtDtmdq4cHN4rBj3kGSsOhpy LWjEpwZnuO8wbncHRwqnm/yKLuorUhI144BBufqqdAVa1w4UtYoeX/Wgb5Pibhma +W19pyJ2E/Xt8hJZ1mvlAp37TVCMfFCnzU6kDcM+UMxfAgMBAAGjggKEMIICgDAO BgNVHQ8BAf8EBAMCBaAwEwYDVR0lBAwwCgYIKwYBBQUHAwEwDAYDVR0TAQH/BAIw ADAdBgNVHQ4EFgQUuZwXbwquIaWp8FWQOwGhxYMevpEwHwYDVR0jBBgwFoAU1fye Dd8eyt0Il5duK8VfxSv17LgweAYIKwYBBQUHAQEEbDBqMDUGCCsGAQUFBzABhilo dHRwOi8vb2NzcC5wa2kuZ29vZy9zL2d0czFwNS9wY3ZKc3ZEZTZvWTAxBggrBgEF BQcwAoYlaHR0cDovL3BraS5nb29nL3JlcG8vY2VydHMvZ3RzMXA1LmRlcjAnBgNV HREEIDAeggxnZW1zb3RlYy5jb22CDiouZ2Vtc290ZWMuY29tMCEGA1UdIAQaMBgw CAYGZ4EMAQIBMAwGCisGAQQB1nkCBQMwPAYDVR0fBDUwMzAxoC+gLYYraHR0cDov L2NybHMucGtpLmdvb2cvZ3RzMXA1L2tBZHpaeVdVTTBVLmNybDCCAQUGCisGAQQB 1nkCBAIEgfYEgfMA8QB2AO7N0GTV2xrOxVy3nbTNE6Iyh0Z8vOzew1FIWUZxH7Wb AAABjy5YGXMAAAQDAEcwRQIgQU2E8tnjDpoH2OrOyJgOjhvXoKqtC7kYXwiEszuZ 8cECIQCOucbERy+afzGp64ymRGOHb4odqfHDCMQDbU56oT5odgB3AEiw42vapkc0 D+VqAvqdMOscUgHLVt0sgdm7v6s52IRzAAABjy5YGZkAAAQDAEgwRgIhAMKJ4tyZ kiuma7mrE76o4WHisiA0TqV+rAUF2Z4tTd39AiEA8YWLHznLHhLpxtznkOdFUO5q mQV68Anx783z+9eaNZ8wDQYJKoZIhvcNAQELBQADggEBAEAkmm+2TJlmNH2CIU/+ hqAS9/AQf3KUgV93qC7BdTSs6cO6/3m14Awz1SZULXEjPStO8ABEOcBuv5NBXxwN qg6UQgdvUKyzlkjPXzokcYYANsxxsGl+lc1ODvUxSofF1vtY887O2t7Y/CAr9/ZD uhM2RXFpNGwjGxRr6QGLSqXdnV+ktbr6LcS1rJruJI2bXgq3etSKUIVHl7yQZSOQ 1/Apypu9PwZqblOdjPtAGUpRopsU3OaRzhfo+mDJMFJx5o72yr0mzw5Q3X/yutif QzDyoo4DWPmgqpM6rBaTyD/wVfV4IdM//l1L3BsVms9sbQ8MYmi4wQNJQQhPIdbu i8M= -----END CERTIFICATE-----
Public Key (PEM)
-----BEGIN PUBLIC KEY----- MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh4RNtZeFuK2aO9ChRjuS kQ9khoqAZSdjcFrucm+dLVXoeBuf+uAIk0QnrSG9dzX9DOsqzhm4V0bHX9mNonZB 5f+DPZ8Xtjz08kpNxD1sC+6PPm58stCwl4DJdf+v7l62jjcKrx01qaLIVQUnbLwN 74JdBkbYYdGbUMLA5ViPmga1OTUkIZEk5u44/HlkVDvq7nKG7HN8vkC7Chx0LULQ 7ZnauHBzeKwY95BkrDoaci1oxKcGZ7jvMG53B0cKp5v8ii7qK1ISNeOAQbn6qnQF WtcOFLWKHl/1oG+T4m4ZmvltfacidhP17fISWdZr5QKd+01QjHxQp81OpA3DPlDM XwIDAQAB -----END PUBLIC KEY-----
ASN.1 decoded
[c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2 . . . . . . . . [c:0|t:2|false] INTEGER 226595054148652659319890484407156906783 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Google Trust Services LLC' . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GTS CA 1P5' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-30 08:31:16 +0000 UTC . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-07-29 08:31:15 +0000 UTC . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName) . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'gemsotec.com' . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption) . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 17107412483546438223580252552369046430758284316683612643296243201169382808815585744455476846787197164164348366669906048248334069930285358590043688471834972227937638073115652387068053656851231012490201025066013058513225053526538693613204848270143780834430138267754647254978564268036998994523194136757976173356310247838535219547873007133985085377228859833181101217270124558153777155485482666611893643220491613413254885079475900800977166439300526244907589752800273085029077167876814912443613093601039266896459737803623188230474322356304841429173949274552854656629659741130446585374594938444903101362993537627617728973919 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537 . . . . . . . . [c:2|t:3|true] ORAddress . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits) 05a0 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth) . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints) . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes) b99c176f0aae21a5a9f055903b01a1c5831ebe91 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName d5fc9e0ddf1ecadd0897976e2bc55fc52bf5ecb8 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (108 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.pki.goog/s/gts1p5/pcvJsvDe6oY' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers) . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://pki.goog/repo/certs/gts1p5.der' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (32 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'gemsotec.com' . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.gemsotec.com' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (26 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy) . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.5.3 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints) . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (53 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crls.pki.goog/gts1p5/kAdzZyWUM0U.crl' . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (246 bytes) . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (243 bytes) 00f1007600eecdd064d5db1acec55cb79db4cd13a23287467cbcecdec351485946711fb59b0000018f2e58197300000403004730450220414d84f2d9e30e9a07d8eacec8980e8e1bd7a0aaad0bb9185f0884b33b99f1c10221008eb9c6c4472f9a7f31a9eb8ca64463876f8a1da9f1c308c4036d4e7aa13e687600770048b0e36bdaa647340fe56a02fa9d30eb1c5201cb56dd2c81d9bbbfab39d884730000018f2e5819990000040300483046022100c289e2dc99922ba66bb9ab13bea8e161e2b220344ea57eac0505d99e2d4dddfd022100f1858b1f39cb1e12e9c6dce790e74550ee6a99057af009f1efcdf3fbd79a359f . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption) . . . . . . . . [c:0|t:5|false] NULL . . . . [c:0|t:3|false] BIT STRING (2048 bits) 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