www.seeso.com

- NBC Universal Media, LLC -

Issued by Verizon Akamai SureServer CA G14-SHA2

About this certificate

This digital certificate with serial number 1f:42:1a:14:79:8b:e7:64:a7:5b:ee:50:4f:4c:6e:93:40:31:d3:f3 was issued on by Verizon Enterprise Solutions.

With 7 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)
  • When the id-ad-caIssuers accessMethod is used, at least one instance SHOULD specify an accessLocation that is an HTTP or LDAP URI (RFC 5280: 4.2.2.1)
  • Subscriber certificates authorityInformationAccess extension should contain the HTTP URL of the issuing CA’s certificate (BRs: 7.1.2.3)

NBC Universal Media, LLC

Organization: NBC Universal Media, LLC
State / Province: NY
Locality: NY
Country: US

Verizon Enterprise Solutions

Organization: Verizon Enterprise Solutions
Organization unit: Cybertrust
Locality: Amsterdam
Country: NL

This certificate has expire since

Certificate Details

Serial Number (hex): 1f:42:1a:14:79:8b:e7:64:a7:5b:ee:50:4f:4c:6e:93:40:31:d3:f3
Serial Number (int): 178452834965286620528291890025065557918764618739
Serial Number lenght: 157 bits, 20 octets

SubjectKeyId: 2f:06:97:46:f1:cc:81:fd:35:00:ad:0e:1a:9e:31:a4:63:ce:67:08
AuthorityKeyId: f8:bd:fa:af:73:77:c6:c7:1b:f9:4b:4d:11:a7:d1:33:af:af:72:11

Fingerprint (sha1): 19:df:58:40:af:b7:27:bb:ee:e2:7f:d2:f8:14:a5:46:13:f5:48:0f
Fingerprint (sha256): 45:e5:5b:fe:fe:7e:fa:83:8b:a6:12:58:85:b8:7a:35:f5:f2:11:32:b1:46:c9:ac:88:80:38:14:51:7a:36:ff

Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.crt
Issuing Certificate URL: https://cacert.a.omniroot.com/vassg142.der

Revocation information

OCSP Server: http://vassg142.ocsp.omniroot.com
CRL Distribution Point: http://vassg142.crl.omniroot.com/vassg142.crl

Check the revocation status for certificate www.seeso.com

7

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.seeso.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

9 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.seeso.com
whoismrrobot.com
www.whoismrrobot.com
seeso.com
www.iammrrobot.com
iammrrobot.com
*.seeso.com

Other certificates including the domain name seeso.com

(limited to 100 certificates)
www.seeso.com
www.seeso.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
click.mail.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
view.mail.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
www.seeso.com
akamai-san9.exacttarget.com
view.mail.seeso.com
www.seeso.com
www.seeso.com
login.seeso.com
akamai-san9.exacttarget.com
akamai-san9.exacttarget.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
*.seeso.com
www.seeso.com
pages.mail.seeso.com
akamai-san9.exacttarget.com
seeso.com
akamai-san9.exacttarget.com
www.seeso.com
login.seeso.com
seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
login.seeso.com
www.seeso.com
www.seeso.com
akamai-san9.exacttarget.com
www.seeso.com
seeso.com

Certificate

The complete raw certificate details for www.seeso.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFvzCCBKegAwIBAgIUH0IaFHmL52SnW+5QT0xuk0Ax0/MwDQYJKoZIhvcNAQEL
BQAwgY0xCzAJBgNVBAYTAk5MMRIwEAYDVQQHEwlBbXN0ZXJkYW0xJTAjBgNVBAoT
HFZlcml6b24gRW50ZXJwcmlzZSBTb2x1dGlvbnMxEzARBgNVBAsTCkN5YmVydHJ1
c3QxLjAsBgNVBAMTJVZlcml6b24gQWthbWFpIFN1cmVTZXJ2ZXIgQ0EgRzE0LVNI
QTIwHhcNMTYwNDE1MjA1NDE4WhcNMTcwNDE1MjA1NDE1WjBiMQswCQYDVQQGEwJV
UzELMAkGA1UECBMCTlkxCzAJBgNVBAcTAk5ZMSEwHwYDVQQKExhOQkMgVW5pdmVy
c2FsIE1lZGlhLCBMTEMxFjAUBgNVBAMTDXd3dy5zZWVzby5jb20wggEiMA0GCSqG
SIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgubgWXVIUOWS+24b3xYT3XNeiMywkSoO
tppWsv/DKxIzV4MBuU9BMIIbLZqxfNkk8oLapMgwzhW/nh/PUcihz2itEI9GHVFD
zRykINS5UZflB174e3zkGotik+pymcmVUQzUiyMMtgvqXIdO5v/pwA/HaKFJvxm4
JUsAAcsUQnhPRfNo2vvzPCZdB8sTefspFkGEo2joc1oVKvOdhjkw1EiVRPiizDNX
v3CFOX3A44fL/jquC7sR5cAErP8rc2raMD0kTrFz1aloLg+mi9sH7Ppm6ymE60jf
7FEgenyLGwh3iDyP3b22hAcw2cCIGXlmOfTXJha763gAIyqNEZdBAgMBAAGjggI/
MIICOzAMBgNVHRMBAf8EAjAAMEwGA1UdIARFMEMwQQYJKwYBBAGxPgEyMDQwMgYI
KwYBBQUHAgEWJmh0dHBzOi8vc2VjdXJlLm9tbmlyb290LmNvbS9yZXBvc2l0b3J5
MIGvBggrBgEFBQcBAQSBojCBnzAtBggrBgEFBQcwAYYhaHR0cDovL3Zhc3NnMTQy
Lm9jc3Aub21uaXJvb3QuY29tMDYGCCsGAQUFBzAChipodHRwczovL2NhY2VydC5h
Lm9tbmlyb290LmNvbS92YXNzZzE0Mi5jcnQwNgYIKwYBBQUHMAKGKmh0dHBzOi8v
Y2FjZXJ0LmEub21uaXJvb3QuY29tL3Zhc3NnMTQyLmRlcjB8BgNVHREEdTBzgg13
d3cuc2Vlc28uY29tghB3aG9pc21ycm9ib3QuY29tghR3d3cud2hvaXNtcnJvYm90
LmNvbYIJc2Vlc28uY29tghJ3d3cuaWFtbXJyb2JvdC5jb22CDmlhbW1ycm9ib3Qu
Y29tggsqLnNlZXNvLmNvbTAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYB
BQUHAwEGCCsGAQUFBwMCMB8GA1UdIwQYMBaAFPi9+q9zd8bHG/lLTRGn0TOvr3IR
MD4GA1UdHwQ3MDUwM6AxoC+GLWh0dHA6Ly92YXNzZzE0Mi5jcmwub21uaXJvb3Qu
Y29tL3Zhc3NnMTQyLmNybDAdBgNVHQ4EFgQULwaXRvHMgf01AK0OGp4xpGPOZwgw
DQYJKoZIhvcNAQELBQADggEBACIMy6COm4MfbwcOR+f4vZ8JxyfDOY6iM9fUJ2Lw
++cqXW3T8Vlmgcn98IzENeAyPjh1c1fRkn0oTBlvCWiaDu3FHv44QAjTE0SNmmiP
HO/D13krk5/tjWAbiiJaK6ZWtTuI9dWcJpryazOFr+aOCYkQAd0DibDGc2iYeBkp
kgCGCCFzVHVqWIcZHvgrftaS3rbjDsgpVVD9oQf9O3Hq6rBbEm79HXJ1gq6j87Aa
XRo2YXhLr11n4+ellXlZjqMxD9KPMjJv8EZRSgqhvHHmum19HEtcUz3/Yo6xtfmI
32Fpa7uAloZmICFTYBALeXVYqEt+PffBYNHqYxC5Qf/k2tg=
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYLm4Fl1SFDlkvtuG98W
E91zXojMsJEqDraaVrL/wysSM1eDAblPQTCCGy2asXzZJPKC2qTIMM4Vv54fz1HI
oc9orRCPRh1RQ80cpCDUuVGX5Qde+Ht85BqLYpPqcpnJlVEM1IsjDLYL6lyHTub/
6cAPx2ihSb8ZuCVLAAHLFEJ4T0XzaNr78zwmXQfLE3n7KRZBhKNo6HNaFSrznYY5
MNRIlUT4oswzV79whTl9wOOHy/46rgu7EeXABKz/K3Nq2jA9JE6xc9WpaC4Ppovb
B+z6ZusphOtI3+xRIHp8ixsId4g8j929toQHMNnAiBl5Zjn01yYWu+t4ACMqjRGX
QQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 178452834965286620528291890025065557918764618739
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Amsterdam'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Enterprise Solutions'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Cybertrust'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Verizon Akamai SureServer CA G14-SHA2'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2016-04-15 20:54:18 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2017-04-15 20:54:15 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NBC Universal Media, LLC'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.seeso.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 20893870432776254021602093231343917600468120198830472730767429332990250246381943799332466310327290202068723911052261199020550912416048153648291604903894237778796176079515147229184564955423601627075432064969904985462791177224955446839912540367180158298812369466783033435672722987460147349552534173517865387882404588409372686066953071214938136075997811492373169324608828133221687158110957534912919969492238513485407763664159029002751531739238713990018353578213225041011296110594902354455558392124584643962107551776324991345857229799976222242590915828409503119825002030463240526881122862257837688965784105610704290158401
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (69 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6334.1.50
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://secure.omniroot.com/repository'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (162 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.ocsp.omniroot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'https://cacert.a.omniroot.com/vassg142.der'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (117 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.whoismrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'seeso.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'iammrrobot.com'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String '*.seeso.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName f8bdfaaf7377c6c71bf94b4d11a7d133afaf7211
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (55 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://vassg142.crl.omniroot.com/vassg142.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							2f069746f1cc81fd3500ad0e1a9e31a463ce6708
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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