eai-cts-nc.impots.gouv.fr

- DIRECTION GENERALE DES FINANCES PUBLIQUES -

Issued by GlobalSign Extended Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 19:b8:70:36:69:04:2c:03:56:19:3f:de was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

DIRECTION GENERALE DES FINANCES PUBLIQUES

Company registration number: 130 004 955
Organization: DIRECTION GENERALE DES FINANCES PUBLIQUES
Address: BATIMENT COLBERT 139 RUE DE BERCY
State / Province: Île-de-France
Locality: Paris
Country: FR

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 19:b8:70:36:69:04:2c:03:56:19:3f:de
Serial Number (int): 7960097505080201533575479262
Serial Number lenght: 93 bits, 12 octets

SubjectKeyId: 30:b9:9a:4f:2f:8d:ff:a1:a2:5c:76:9a:44:43:a7:9a:21:c1:27:70
AuthorityKeyId: dd:b3:e7:6d:a8:2e:e8:c5:4e:6e:cf:74:e6:75:3c:94:15:ce:e8:1d

Fingerprint (sha1): 0b:00:82:f2:f0:96:85:55:de:e8:3c:a4:f4:5a:4a:17:cd:8e:bc:c5
Fingerprint (sha256): 48:f8:53:ed:e3:2c:19:3b:2b:73:12:0d:14:52:fb:65:66:6c:52:21:ad:17:69:83:b8:f8:af:75:2c:f4:cb:4a

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsextendvalsha2g3r3
CRL Distribution Point: http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl

Check the revocation status for certificate eai-cts-nc.impots.gouv.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for eai-cts-nc.impots.gouv.fr

Public Key Algorithm

RSA

Key Size

4096

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

eai-cts-nc.impots.gouv.fr

Other certificates including the domain name impots.gouv.fr

(limited to 100 certificates)
cfsfc.impots.gouv.fr
bmly.impots.gouv.fr
adel.impots.gouv.fr
cfspro-idp.impots.gouv.fr
teletd.impots.gouv.fr
cfsfc.impots.gouv.fr
www.impots.gouv.fr
www.impots.gouv.fr
cfspro.impots.gouv.fr
timbres.impots.gouv.fr
cfspro.impots.gouv.fr
www3.impots.gouv.fr
consommation.timbres.impots.gouv.fr
cfspart.impots.gouv.fr
cfspart.impots.gouv.fr
inscriptionpart.impots.gouv.fr
assistance-en-ligne.integration.impots.gouv.fr
static.impots.gouv.fr
assistance-en-ligne.impots.gouv.fr
www3.impots.gouv.fr
idp.impots.gouv.fr
wss-acl.integration.impots.gouv.fr
www.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
cfspro.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
teletd.impots.gouv.fr
cfspro-idp.impots.gouv.fr
idp.impots.gouv.fr
adel.integration.impots.gouv.fr
teletd-test.impots.gouv.fr
timbres.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
inscriptionpro.impots.gouv.fr
teletd.integration.impots.gouv.fr
inscriptionpro.impots.gouv.fr
recherchesuccessionsvacantes.impots.gouv.fr
poseidon1.integration.impots.gouv.fr
www.impots.gouv.fr
inscriptionpro.integration.impots.gouv.fr
formuelassistteleservice.impots.gouv.fr
www.impots.gouv.fr
poseidon1-test.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
formulaires.impots.gouv.fr
inscriptionpro.impots.gouv.fr
idp.impots.gouv.fr
eai-cts-nc.impots.gouv.fr
rendezvous.impots.gouv.fr
idp.integration.impots.gouv.fr
poseidon2.impots.gouv.fr
idp.integration.impots.gouv.fr
cfsfc.impots.gouv.fr
www.impots.gouv.fr
payfip.impots.gouv.fr
poseidon1.impots.gouv.fr
www.impots.gouv.fr
static.impots.gouv.fr
payfip.impots.gouv.fr
timbres.impots.gouv.fr
consommation.timbres.impots.gouv.fr
gw.impots.gouv.fr
cfsfc.impots.gouv.fr
teletd.integration.impots.gouv.fr
static.impots.gouv.fr
poseidon2.impots.gouv.fr
cfspro.impots.gouv.fr
cfspart.integration.impots.gouv.fr
payfip.integration.impots.gouv.fr
cfsmsp.impots.gouv.fr
formuelassistteleservice.impots.gouv.fr
retraitesdeletat.integration.impots.gouv.fr
cfspart.impots.gouv.fr
cfspro.impots.gouv.fr
encheres-domaine2.integration.impots.gouv.fr
www.impots.gouv.fr
static.impots.gouv.fr
static.impots.gouv.fr
inscriptionpro.impots.gouv.fr
www.tipi.integration.impots.gouv.fr
idp.impots.gouv.fr
inscriptionpart.impots.gouv.fr
padoc.impots.gouv.fr
eai-cts.impots.gouv.fr
avatar.impots.gouv.fr
adel.impots.gouv.fr
bofip-archives.impots.gouv.fr
teletd.impots.gouv.fr
cfspart.impots.gouv.fr
teletd-test.integration.impots.gouv.fr
teletd.impots.gouv.fr
inscriptionpro.impots.gouv.fr
formuelassistanceteleprocedure.impots.gouv.fr
www.integration.impots.gouv.fr
www.impots.gouv.fr
cfsmsp.impots.gouv.fr
inscriptionpro.impots.gouv.fr
bmly.impots.gouv.fr

Certificate

The complete raw certificate details for eai-cts-nc.impots.gouv.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIICIjANBgkqhkiG9w0BAQEFAAOCAg8AMIICCgKCAgEAnkadGJ2JCaF4z5xN3I6Q
X8GmvOVLSkyOftrYs37UCmDkLHUFdJKa8gyCVfyPouBZzzSqFWV2lruzKgOF4L4b
Rh6ow3pJe2UU+ffeVJ6/2ba5mUAUICe0ABbjrMZ2ZoHgGKjlwgMr1BBNGkpoBQ8A
rvl2WTgLgCoXS5OspzL5Tr9tnwUQsx0X/q+8xFBzPidSGg7fOFsUeztqIkdI5ec8
B+3G4n1/rMXfLRu/RcPThLa1oJdNVZR3DWWNoeZQZiI5el9zyu6VYp45r2+ysEDm
m0uzX5KRmHYkx3tYmiNQ0aL/a8L+dMksCKqfXESfY6n4BQ+dJmYQJZrKaObUz4XT
W1r80rKr9kkPIIFwumKfBH7nVibhuwUssQhkDadaImY/fIRrXw+Nu0R6aBniWDp/
aPTw2dMPMjZ5j+BV9N000P9t22vzwgU1amiY9PQ+xE6G4bw71ta4HZBQTNZa7MNu
5tWExFX95/BeJPYCjQfIG3L/2TbiHs5RAEh5rHNS0TLP89U53QNC/Mc/Bgt5Mi2C
Y4TH5phWeu9ALTLOjPMwEQ7xqzSoOV/XiBKvmzvQdJQaa6cJ7xjrFqIZZ5YaoSgY
Xs1dI5PqQcJk8y9rP2x/uDHQocKyu13p7ZFMWdXoThyVHbBrz13/KQ2UXnC1ZXMY
im0lpY9ESl3YuA3KXycSmUUCAwEAAQ==
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 7960097505080201533575479262
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Extended Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-03-12 09:44:59 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2022-03-13 09:44:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.15 (businessCategory)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Government Entity'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.5 (serialNumber)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString '130 004 955'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.311.60.2.1.3 (jurisdictionOfIncorporationC)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:12|false] UTF8String 'Île-de-France'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.7 (localityName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.9 (streetAddress)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BATIMENT COLBERT 139 RUE DE BERCY'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'DIRECTION GENERALE DES FINANCES PUBLIQUES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'eai-cts-nc.impots.gouv.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (4208 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 645709069724885008197500176637900083508859714592606807571906011703551685478441389418068213654743154977213589956702639807784836664221710393523242895523115020728844960596245389259059905146034522657437523403052420067661046697451482695641098662324274619144441619356992129422474480787141378291653209354755101240169787061371804712552766997839122501061308331088373396834054016281784016925973872643949911799382895417378514112363021532935837055469738151355350394075142165166919158331183682269871533409989685199815164938065581545161789269264014663121151842122258466254827827037037771856988769083085162385579255242407049770369716465326261623965869850632256718539672221553516191811701708439487992013582699122327430563094740336538694822404995599870569404174085542846719176099863758332199979626166916079121974199802941288995636044632711756333830135987126109249888347013587863562159513572855926278562070861687747435627904081040104639857847118537965156975940269248920528656140585614512689614243858175958485024197943109673904914806476174499394361258191911702469473213959676798450102494967018327402983052818343467419529511611080489499792951426529533695396024560621083552247738694832461227212448548967099974184277363254074679083235145736718493081049413
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (137 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsextendvalsha2g3r3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsextendvalsha2g3r3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (78 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.1 (GlobalSign EV policy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.1
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (62 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gs/gsextendvalsha2g3r3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (29 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'eai-cts-nc.impots.gouv.fr'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName ddb3e76da82ee8c54e6ecf74e6753c9415cee81d
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							30b99a4f2f8dffa1a25c769a4443a79a21c12770
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.3 (CT Precertificate Poison)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		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