www.universalcompanies.com

Issued by GlobalSign Domain Validation CA - SHA256 - G3

About this certificate

This digital certificate with serial number 2b:e0:c7:9a:a0:ec:64:bc:7e:c1:25:aa was issued on by GlobalSign nv-sa.

This certificate has already expired and will cause a warning or error message in the browser it's still listed on this site to allow you to look back on previously issued certificates. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

Certificate Subject

CN=www.universalcompanies.com,OU=Domain Control Validated

GlobalSign nv-sa

Organization: GlobalSign nv-sa
Country: BE

This certificate has expire since

Certificate Details

Serial Number (hex): 2b:e0:c7:9a:a0:ec:64:bc:7e:c1:25:aa
Serial Number (int): 13579597409235947202283644330
Serial Number lenght: 94 bits, 12 octets

SubjectKeyId: 4e:a2:29:92:24:69:f1:40:49:23:82:76:55:7f:0a:a7:06:ec:dc:f2
AuthorityKeyId: 3d:80:82:79:c5:48:82:a3:c3:12:ee:df:99:0f:57:35:48:9e:d0:cb

Fingerprint (sha1): 74:23:73:92:d3:8e:c4:97:ad:0d:13:63:57:7e:c3:e0:06:c8:c4:38
Fingerprint (sha256): 49:63:b4:e9:d0:48:d2:62:bc:b5:b9:10:11:67:47:2c:e1:ae:e9:f8:80:47:79:ab:e1:ff:7e:70:12:b7:88:a1

Issuing Certificate URL: http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt

Revocation information

OCSP Server: http://ocsp2.globalsign.com/gsdomainvalsha2g3
CRL Distribution Point: http://crl.globalsign.com/gsdomainvalsha2g3.crl

Check the revocation status for certificate www.universalcompanies.com

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www.universalcompanies.com

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA256 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www.universalcompanies.com

Other certificates including the domain name universalcompanies.com

(limited to 100 certificates)
show.universalcompanies.com
helpdesk.unitedwarehouse.com
servicedesk.mastercall.org.uk
help.seoudisupermarket.com
support.homeownersfg.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
universalcompanies.com
servicedesk.gortons.com
universalcompanies.com
show.universalcompanies.com
iot-helpdesk.dtgo.com
iot-helpdesk.dtgo.com
servicedesk.simkosupport.com
servicedesk.primowater.com
support.blaney.com
shop.universalcompanies.com
servicedesk.mastercall.org.uk
supportdesk.highmarkfcu.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
pro.universalcompanies.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
helpdesk.nwtc.edu
servicedesk.mastercall.org.uk
shop.universalcompanies.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
destek.4usbilisim.com
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
helpdesk.boire.qc.ca
shop.universalcompanies.com
universalcompanies.com
servicedesk.mastercall.org.uk
shop.universalcompanies.com
supportdesk.highmarkfcu.com
helpdesk.boire.qc.ca
destek.4usbilisim.com
images.universalcompanies.com
servicedesk.simkosupport.com
helpdesk.unitedwarehouse.com
helpdesk.unitedwarehouse.com
images.universalcompanies.com
shop.universalcompanies.com
pages.universalcompanies.com
universalcompanies.com
helpdesk.boire.qc.ca
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
servicedesk.primowater.com
universalcompanies.com
helpdesk.boire.qc.ca
shop.universalcompanies.com
servicedesk.mastercall.org.uk
servicedesk.simkosupport.com
www.universalcompanies.com
servicedesk.mastercall.org.uk
kcsthelps.kcst.edu.kw
images.universalcompanies.com
shop.universalcompanies.com
support.studio22.tv
universalcompanies.com
helpdesk.vielis.co.jp
show.universalcompanies.com
itsupport.integrationcharterschools.org
reports.universalcompanies.com
servicedesk.mastercall.org.uk
sd.21tk.ru
vendors.universalcompanies.com
sni.cloudflaressl.com
servicedesk.mastercall.org.uk
servicedesk.mastercall.org.uk
itsp.tv2east.dk
support.blaney.com
universalcompanies.com
www.universalcompanies.com
helpdesk.abxpackaging.com
destek.4usbilisim.com
prod.24.slot.cdn.salesforce-communities.com
servicedesk.mastercall.org.uk
supportservices.mitwpu.edu.in
servicedesk.mastercall.org.uk
helpdesk.abxpackaging.com
shop.universalcompanies.com
helpdesk.jdanetwork.com
helpdesk.tamiser.in
universalcompanies.com
support.blaney.com
servicedesk.mastercall.org.uk
servicedesk.deepbluecompany.com.au
shop.universalcompanies.com
helpdesk.jdanetwork.com
servicedesk.mastercall.org.uk
show.universalcompanies.com
servicedesk.primowater.com
www.universalcompanies.com

Certificate

The complete raw certificate details for www.universalcompanies.com in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----
MIIGDDCCBPSgAwIBAgIMK+DHmqDsZLx+wSWqMA0GCSqGSIb3DQEBCwUAMGAxCzAJ
BgNVBAYTAkJFMRkwFwYDVQQKExBHbG9iYWxTaWduIG52LXNhMTYwNAYDVQQDEy1H
bG9iYWxTaWduIERvbWFpbiBWYWxpZGF0aW9uIENBIC0gU0hBMjU2IC0gRzMwHhcN
MTkwNDI4MDIxMjU1WhcNMjAwNDI4MDIxMjU1WjBIMSEwHwYDVQQLExhEb21haW4g
Q29udHJvbCBWYWxpZGF0ZWQxIzAhBgNVBAMTGnd3dy51bml2ZXJzYWxjb21wYW5p
ZXMuY29tMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40SFxSydhbZg
eUoY+Ee+/eoJPQZETgebwrkvgA01p7ec8ams9wdAFQ8vnjf0NqgcblKZeuT1LOp1
Lqoysly70hA2eOQDCATe+S2ZK79xLkhf3yXzOLBB55X0wqWTMn9Iri6FYqp+LWVv
Yp0pIZ2xU0yE6j7kHoKaPnPLd8NDkjkHn/TFGTbydtoDfPqL+iM7/rD+arfdq8ud
pgyEjb2wYi+RGucCXYIMpJDuFc95DdEvd4Htsvvwm4cyGyjiHOHdYC9KQQaFlcTx
uN1Dzlrlj5Mnk8B4i4X8PswI5HTD6sT376REIo7HYfwnbdL7cluNJu9sSYD8/jxK
L6ExK4AaLQIDAQABo4IC3DCCAtgwDgYDVR0PAQH/BAQDAgWgMIGSBggrBgEFBQcB
AQSBhTCBgjBFBggrBgEFBQcwAoY5aHR0cDovL3NlY3VyZS5nbG9iYWxzaWduLmNv
bS9jYWNlcnQvZ3Nkb21haW52YWxzaGEyZzMuY3J0MDkGCCsGAQUFBzABhi1odHRw
Oi8vb2NzcDIuZ2xvYmFsc2lnbi5jb20vZ3Nkb21haW52YWxzaGEyZzMwVgYDVR0g
BE8wTTBBBgkrBgEEAaAyAQowNDAyBggrBgEFBQcCARYmaHR0cHM6Ly93d3cuZ2xv
YmFsc2lnbi5jb20vcmVwb3NpdG9yeS8wCAYGZ4EMAQIBMAkGA1UdEwQCMAAwQAYD
VR0fBDkwNzA1oDOgMYYvaHR0cDovL2NybC5nbG9iYWxzaWduLmNvbS9nc2RvbWFp
bnZhbHNoYTJnMy5jcmwwJQYDVR0RBB4wHIIad3d3LnVuaXZlcnNhbGNvbXBhbmll
cy5jb20wHQYDVR0lBBYwFAYIKwYBBQUHAwEGCCsGAQUFBwMCMB0GA1UdDgQWBBRO
oimSJGnxQEkjgnZVfwqnBuzc8jAfBgNVHSMEGDAWgBQ9gIJ5xUiCo8MS7t+ZD1c1
SJ7QyzCCAQQGCisGAQQB1nkCBAIEgfUEgfIA8AB2AId1v+dZfPiMQ5lfvfNu/1aN
R1Y2/0q1YMG06v9eoIMPAAABamG3hS8AAAQDAEcwRQIgOVBCeq+3FNcg7f+Jpxzd
0JyCOcZT95qjOyrcFw5DP1cCIQCJY+y+XQrneNav/y2fhX5pDnH1UL/Q1ZfZ0VUf
d6E09wB2ALvZ37wfinG1k5Qjl6qSe0c4V5UKq1LoGpCWZDaOHtGFAAABamG3gc8A
AAQDAEcwRQIgZD4et65LtBgQzwpCYJ2UwqaN1Ph9s4Js/Tlj7CHxJDoCIQCqWG7e
57XUFzouSVZhpfZob+2ONovj86gCNRwbV1G+YzANBgkqhkiG9w0BAQsFAAOCAQEA
wKPHC1jitH25ke/K5wLVc+C7yFGBhvuEMxVekHgDQgsYClm1i/t9+9UfR0+/bT4o
gfK407DEgkBZOSBl+SFGFUKk1VtQXzLeQlqMneIax67b735RJaZxv0Ie2z1R+jF9
L6LjTUeSr63wqW6a5Fbr0jLc15PkxDv/d8U4twGdpxDpGs3tqR1tM1U7GqoPQZze
bjyXVp4+emOWeELnERk3hlgocDXQPek7AUSjhb96ynT4x4VC5HsLS2M+Ecs4jxO9
Wd8l3bhoieaXxLqZqVOZqJ5QRvHj/o49eBFm7cM1ePO95yAoUnYAItykdzvoQPuv
Tt8OeXvDCeqrLJg8KyT/GA==
-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40SFxSydhbZgeUoY+Ee+
/eoJPQZETgebwrkvgA01p7ec8ams9wdAFQ8vnjf0NqgcblKZeuT1LOp1Lqoysly7
0hA2eOQDCATe+S2ZK79xLkhf3yXzOLBB55X0wqWTMn9Iri6FYqp+LWVvYp0pIZ2x
U0yE6j7kHoKaPnPLd8NDkjkHn/TFGTbydtoDfPqL+iM7/rD+arfdq8udpgyEjb2w
Yi+RGucCXYIMpJDuFc95DdEvd4Htsvvwm4cyGyjiHOHdYC9KQQaFlcTxuN1Dzlrl
j5Mnk8B4i4X8PswI5HTD6sT376REIo7HYfwnbdL7cluNJu9sSYD8/jxKL6ExK4Aa
LQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 13579597409235947202283644330
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'BE'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign nv-sa'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GlobalSign Domain Validation CA - SHA256 - G3'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2019-04-28 02:12:55 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2020-04-28 02:12:55 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.11 (organizationalUnitName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Domain Control Validated'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www.universalcompanies.com'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 28689884951075675804671751141074001585343157444693730913919918358293054031208157413250588865239843675978294895181482790100856316176144906095651584519039299672733855275712004667035002663025260151966143637429602507966997486093625243388884175389622037761941358997166326140835009188124821196818474010223599272846276269921656903318992491604011398944667994575517827518764042152255367140732212119848107761042742437653320702092874036645465567309280041034061974486256298362637505240313570818313704291141704113779712644580186339976664404059284968182020267942462451207755987893021985877548104043823116622965164359411666675309101
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (133 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://secure.globalsign.com/cacert/gsdomainvalsha2g3.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://ocsp2.globalsign.com/gsdomainvalsha2g3'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (79 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.4146.1.10 (globalsignDVPolicy)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://www.globalsign.com/repository/'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.1 (Domain Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (57 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://crl.globalsign.com/gsdomainvalsha2g3.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (30 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www.universalcompanies.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							4ea229922469f14049238276557f0aa706ecdcf2
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 3d808279c54882a3c312eedf990f5735489ed0cb
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (245 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (242 bytes)
							00f00076008775bfe7597cf88c43995fbdf36eff568d475636ff4ab560c1b4eaff5ea0830f0000016a61b7852f000004030047304502203950427aafb714d720edff89a71cddd09c8239c653f79aa33b2adc170e433f570221008963ecbe5d0ae778d6afff2d9f857e690e71f550bfd0d597d9d1551f77a134f7007600bbd9dfbc1f8a71b593942397aa927b473857950aab52e81a909664368e1ed1850000016a61b781cf00000403004730450220643e1eb7ae4bb41810cf0a42609d94c2a68dd4f87db3826cfd3963ec21f1243a022100aa586edee7b5d4173a2e495661a5f6686fed8e368be3f3a802351c1b5751be63
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.11 (sha256WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (2048 bits)
		00c0a3c70b58e2b47db991efcae702d573e0bbc8518186fb8433155e907803420b180a59b58bfb7dfbd51f474fbf6d3e2881f2b8d3b0c4824059392065f921461542a4d55b505f32de425a8c9de21ac7aedbef7e5125a671bf421edb3d51fa317d2fa2e34d4792afadf0a96e9ae456ebd232dcd793e4c43bff77c538b7019da710e91acdeda91d6d33553b1aaa0f419cde6e3c97569e3e7a63967842e71119378658287035d03de93b0144a385bf7aca74f8c78542e47b0b4b633e11cb388f13bd59df25ddb86889e697c4ba99a95399a89e5046f1e3fe8e3d781166edc33578f3bde7202852760022dca4773be840fbaf4edf0e797bc309eaab2c983c2b24ff18