vacunahrc.sanidadmadrid.org

- CONSEJERIA DE DIGITALIZACION DE LA COMUNIDAD DE MADRID -

Issued by Entrust Certification Authority - L1K

About this certificate

This digital certificate with serial number 78:44:9a:2f:ef:0d:f3:a4:15:c5:81:ee:16:44:b4:f9 was issued on by Entrust, Inc..

With 2 subject alternative names this certificate can be used to secure multiple fqdn's. This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber certificates use of Subject Key Identifier is NOT RECOMMENDED (BRs v2: 7.1.2.7.6)
  • Subscriber Certificate: commonName is NOT RECOMMENDED. (BRs: 7.1.2.7.1)

CONSEJERIA DE DIGITALIZACION DE LA COMUNIDAD DE MADRID

Organization: CONSEJERIA DE DIGITALIZACION DE LA COMUNIDAD DE MADRID
Locality: Madrid
Country: ES

Entrust, Inc.

Organization: Entrust, Inc.
Organization unit: See www.entrust.net/legal-terms
Organization unit: (c) 2012 Entrust, Inc. - for authorized use only
Country: US

This certificate will expire on

Certificate Details

Serial Number (hex): 78:44:9a:2f:ef:0d:f3:a4:15:c5:81:ee:16:44:b4:f9
Serial Number (int): 159863562969356657499712705678723560697
Serial Number lenght: 127 bits, 16 octets

SubjectKeyId: fe:c0:cd:e8:61:e0:61:c6:4c:ca:31:a4:99:24:42:04:36:29:be:13
AuthorityKeyId: 82:a2:70:74:dd:bc:53:3f:cf:7b:d4:f7:cd:7f:a7:60:c6:0a:4c:bf

Fingerprint (sha1): 8b:ac:3e:2a:c3:54:bf:51:b8:86:a3:59:af:6f:cc:b6:e0:23:9f:20
Fingerprint (sha256): 48:1a:27:27:4e:7e:79:45:98:fe:fc:9e:60:21:45:c2:d8:33:6f:7e:b7:c5:5e:34:a4:db:4c:40:3b:83:18:bd

Issuing Certificate URL: http://aia.entrust.net/l1k-chain256.cer

Revocation information

OCSP Server: http://ocsp.entrust.net
CRL Distribution Point: http://crl.entrust.net/level1k.crl

Check the revocation status for certificate vacunahrc.sanidadmadrid.org

2

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for vacunahrc.sanidadmadrid.org

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

vacunahrc.sanidadmadrid.org
www.vacunahrc.sanidadmadrid.org

Other certificates including the domain name sanidadmadrid.org

(limited to 100 certificates)
www.carpetavirtual.sanidadmadrid.org
WWW.UNIDADVIAJERO.SANIDADMADRID.ORG
*.sanidadmadrid.org
www.adopcioninternacional.sanidadmadrid.org
ar.madrid.org
WWW.CARPETAVIRTUAL.SANIDADMADRID.ORG
WWW.CITAPREVIA.SANIDADMADRID.ORG
ar.madrid.org
www.gedesma.es
www.gedesma.es
WWW.SEGURIDADMEDICAMENTO.SANIDADMADRID.ORG
www.citaprevia.sanidadmadrid.org
hcrnube.sanidadmadrid.org
WWW.UNIDADVIAJERO.SANIDADMADRID.ORG
WWW.CITAPREVIA.SANIDADMADRID.ORG
WWW.SEGURIDADMEDICAMENTO.SANIDADMADRID.ORG
www.libreeleccion.sanidadmadrid.org
hcrnube.sanidadmadrid.org
elecciones.madrid.org
WWW.TARJETASANITARIA.SANIDADMADRID.ORG
ar.madrid.org
WWW.UNIDADVIAJERO.SANIDADMADRID.ORG
vacunahrc.sanidadmadrid.org
www.gedesma.es
hcdsns.sanidadmadrid.org
certcitamovil.salud.madrid.org
hcroffice.sanidadmadrid.org
campusimf.sabentis.com
www.gedesma.es
www.hcsc.sanidadmadrid.org
*.sanidadmadrid.org
ar.madrid.org
hufaresetpwd.sanidadmadrid.org
www.sanidadmadrid.org
www.unidadviajero.sanidadmadrid.org
WWW.SANIDADMADRID.ORG
www.citaprevia.sanidadmadrid.org
saluda.sanidadmadrid.org
hcrnube.sanidadmadrid.org
www.intranet.sanidadmadrid.org
www.sanidadmadrid.org
hcrnube.sanidadmadrid.org
*.sanidadmadrid.org
WWW.CARPETAVIRTUAL.SANIDADMADRID.ORG
www.sanidadmadrid.org
*.sanidadmadrid.org
hcrnube.sanidadmadrid.org
www.intranet.sanidadmadrid.org
WWW.INTRANET.SANIDADMADRID.ORG
www.carpetavirtual.sanidadmadrid.org
educahgugm.sanidadmadrid.org
*.sanidadmadrid.org
www.citainstruccionesprevias.sanidadmadrid.org
*.sanidadmadrid.org
ehgugm.sanidadmadrid.org
www.intranet.sanidadmadrid.org
www.libreeleccion.sanidadmadrid.org
WWW.LIBREELECCION.SANIDADMADRID.ORG
*.sanidadmadrid.org
www.carpetavirtual.sanidadmadrid.org
www.libreeleccion.sanidadmadrid.org
*.sanidadmadrid.org
*.sanidadmadrid.org
WWW.CITAPREVIA.SANIDADMADRID.ORG
*.sanidadmadrid.org
elecciones.madrid.org
www.gedesma.es
www.libreeleccion.sanidadmadrid.org
www.citaprevia.sanidadmadrid.org
hcrnube.sanidadmadrid.org
farmaciahrc.sanidadmadrid.org
www.unidadviajero.sanidadmadrid.org
WWW.UNIDADVIAJERO.SANIDADMADRID.ORG
WWW.LIBREELECCION.SANIDADMADRID.ORG
*.sanidadmadrid.org
WWW.CITAPREVIA.SANIDADMADRID.ORG
saluda.sanidadmadrid.org

Certificate

The complete raw certificate details for vacunahrc.sanidadmadrid.org in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIFYDCCBEigAwIBAgIQeESaL+8N86QVxYHuFkS0+TANBgkqhkiG9w0BAQsFADCB
ujELMAkGA1UEBhMCVVMxFjAUBgNVBAoTDUVudHJ1c3QsIEluYy4xKDAmBgNVBAsT
H1NlZSB3d3cuZW50cnVzdC5uZXQvbGVnYWwtdGVybXMxOTA3BgNVBAsTMChjKSAy
MDEyIEVudHJ1c3QsIEluYy4gLSBmb3IgYXV0aG9yaXplZCB1c2Ugb25seTEuMCwG
A1UEAxMlRW50cnVzdCBDZXJ0aWZpY2F0aW9uIEF1dGhvcml0eSAtIEwxSzAeFw0y
NDA0MTExNTU3MjRaFw0yNTA0MjExNTU3MjJaMIGFMQswCQYDVQQGEwJFUzEPMA0G
A1UEBxMGTWFkcmlkMT8wPQYDVQQKEzZDT05TRUpFUklBIERFIERJR0lUQUxJWkFD
SU9OIERFIExBIENPTVVOSURBRCBERSBNQURSSUQxJDAiBgNVBAMTG3ZhY3VuYWhy
Yy5zYW5pZGFkbWFkcmlkLm9yZzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAN7CPdTu+Y+tZyKZpWiIsqjJ3CFwvB0WrtHxG5Lb/deHqOsClc0+BsndwlmR
g33Qy6OGNouq1IKmkx9IXqDeiVfqm5l9bpkwdmdizd2/b+s/V4kopE+dGdigcNVy
ET8Te5qjJnfiBPHf7arJ0YaCDNoIFoF+H1px9u6QvjDBkYHEO5N4FsBXItkTqe1z
Ld+PnGr3KhRpHnguZikGqH3VDxYeBi5yI/wyxJbXvMNkKincw/GcBezggQGGjEXb
tlE5ALRXtddVeLBwG6DNu9ouzNE5Dg0pD4oNSV2G4DgiF48TnCYpTH1fsFtDm0t9
uNSy5TrY5olnBgsF4RmAs+1yvwECAwEAAaOCAZMwggGPMAwGA1UdEwEB/wQCMAAw
HQYDVR0OBBYEFP7Azehh4GHGTMoxpJkkQgQ2Kb4TMB8GA1UdIwQYMBaAFIKicHTd
vFM/z3vU981/p2DGCky/MGgGCCsGAQUFBwEBBFwwWjAjBggrBgEFBQcwAYYXaHR0
cDovL29jc3AuZW50cnVzdC5uZXQwMwYIKwYBBQUHMAKGJ2h0dHA6Ly9haWEuZW50
cnVzdC5uZXQvbDFrLWNoYWluMjU2LmNlcjAzBgNVHR8ELDAqMCigJqAkhiJodHRw
Oi8vY3JsLmVudHJ1c3QubmV0L2xldmVsMWsuY3JsMEcGA1UdEQRAMD6CG3ZhY3Vu
YWhyYy5zYW5pZGFkbWFkcmlkLm9yZ4Ifd3d3LnZhY3VuYWhyYy5zYW5pZGFkbWFk
cmlkLm9yZzAOBgNVHQ8BAf8EBAMCBaAwHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsG
AQUFBwMCMBMGA1UdIAQMMAowCAYGZ4EMAQICMBMGCisGAQQB1nkCBAMBAf8EAgUA
MA0GCSqGSIb3DQEBCwUAA4IBAQBR+i5rb1/8eDxlFThMNWTRJyA2HM1LBkTr+W/k
Zl425sqLcqgX4PXE1Q7KM6M82uU/BV46rOk+Kbhis9zwrW4uiFQmkw+99GStReVq
Kqf8p5kXbGXaJcewYGZWFEVYZlQq+Ple6t5gnm6iq7PyXh41lW9uItounj1XSF7+
e8Li6QQ8+lglzn+617PIzXmN1fqCeIva51XGpDhJIBCNmWajqizsVsvSZk7XQ+7d
105rjzG3h+ygtcldIfdomlNZufXuhgy/Vpo+AIW/DWF9yT+wzshGKFy0fet2pAt8
Ezl1V/cqVbUuo3AgJNS60xDa19PfecKnMCI6Cnn9nD3jVOE+
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sI91O75j61nIpmlaIiy
qMncIXC8HRau0fEbktv914eo6wKVzT4Gyd3CWZGDfdDLo4Y2i6rUgqaTH0heoN6J
V+qbmX1umTB2Z2LN3b9v6z9XiSikT50Z2KBw1XIRPxN7mqMmd+IE8d/tqsnRhoIM
2ggWgX4fWnH27pC+MMGRgcQ7k3gWwFci2ROp7XMt34+cavcqFGkeeC5mKQaofdUP
Fh4GLnIj/DLElte8w2QqKdzD8ZwF7OCBAYaMRdu2UTkAtFe111V4sHAboM272i7M
0TkODSkPig1JXYbgOCIXjxOcJilMfV+wW0ObS3241LLlOtjmiWcGCwXhGYCz7XK/
AQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 159863562969356657499712705678723560697
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'US'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust, Inc.'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'See www.entrust.net/legal-terms'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '(c) 2012 Entrust, Inc. - for authorized use only'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Entrust Certification Authority - L1K'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-04-11 15:57:24 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2025-04-21 15:57:22 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'ES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Madrid'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'CONSEJERIA DE DIGITALIZACION DE LA COMUNIDAD DE MADRID'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'vacunahrc.sanidadmadrid.org'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28120687771005318002587014469319281532769823620693710660495215698039653132795133243133349638828690671986706026242185785279044019665003311281231237093219907213127522447646420314663938988141200236386827718872226819713015774314755967967608592379709133659078895009147094690748812866595784139553410820905230538018741024611641603560272094329653089595257184933810084955161168952254027943162756678816001438308363977534227043380543254596932802240159282121219358909824016052543158307034986369809698671099273369714561482220477388036779382075274783867629286677881365176467967871391524155952037464184201919652379737147895562026753
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							fec0cde861e061c64cca31a4992442043629be13
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 82a27074ddbc533fcf7bd4f7cd7fa760c60a4cbf
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (92 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp.entrust.net'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://aia.entrust.net/l1k-chain256.cer'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (44 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.entrust.net/level1k.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (64 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'vacunahrc.sanidadmadrid.org'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.vacunahrc.sanidadmadrid.org'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (12 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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